Daniel Grunberger
eddbed4363
fix commands
...
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-09-05 09:48:15 +03:00
Daniel Grunberger
e091269b22
Merge pull request #1332 from anubhav06/patch-cmd
...
feat: add kubescape patch command
2023-09-04 12:47:58 +03:00
Daniel Grunberger
58553688e9
validate sarif format
...
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-09-03 16:51:52 +03:00
Anubhav Gupta
7f889b8423
Merge branch 'master' of https://github.com/kubescape/kubescape into patch-cmd
2023-09-01 10:19:07 +05:30
Anubhav Gupta
53f5667694
fix patch command logic
...
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
2023-09-01 09:43:09 +05:30
Amir Malka
592e0e2b43
Service discovery ( #1359 )
...
* remove hardcoded urls
Signed-off-by: Amir Malka <amirm@armosec.io >
* update
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix test
Signed-off-by: Amir Malka <amirm@armosec.io >
* update providers docs
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix
Signed-off-by: Amir Malka <amirm@armosec.io >
* hardcoded systests branch
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix
Signed-off-by: Amir Malka <amirm@armosec.io >
* added logs
Signed-off-by: Amir Malka <amirm@armosec.io >
* added logs
Signed-off-by: Amir Malka <amirm@armosec.io >
* create config path if it does not exist
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix
Signed-off-by: Amir Malka <amirm@armosec.io >
---------
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-30 09:54:50 +03:00
David Wertenteil
92449bf564
core(cmd): adding corrections to cmd ( #1357 )
...
* adding corrections to cmd
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* remove decorative line
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: changed results indicator
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* replace status test with icons
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* print workloads in a different line
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update display
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* deprecate commands
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* removed unused functions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed tests
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update cloud provider detection
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* rename column name
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-29 09:50:22 +03:00
Amir Malka
150967eae8
Refactor backend integration ( #1355 )
...
* refactor BE integration
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-23 15:36:08 +03:00
Daniel Grunberger and Daniel Grunberger
150dc61ec7
fix panic & provide msg ( #1353 )
...
* fix pani & provide msgf
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support sarif
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* new line
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* validate format
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* refactor
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* validate printer tests
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* use sarif const
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* small refactor
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* unify switch
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-22 15:22:57 +03:00
Daniel Grunberger and Daniel Grunberger
7b46cdd480
Improve cluster scan cli ( #1352 )
...
* start improvements
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* cta
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* refactor
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* fixes
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* http handler go mod
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* set control type
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* move to func
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* move to func
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* use color for vuln summary
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-22 15:21:01 +03:00
Anubhav Gupta
18b4d3cbec
update patch command output format
...
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
2023-08-22 01:11:55 +05:30
Anubhav Gupta
deff1c3b2c
Merge branch 'master' of https://github.com/kubescape/kubescape into patch-cmd
2023-08-21 20:28:08 +05:30
Daniel Grunberger and Daniel Grunberger
d6a47a82d2
improve cli output ( #1347 )
...
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-16 13:01:32 +03:00
DRAGON
d946662e57
feat: migrate fatih/color to gchalk
...
Signed-off-by: DRAGON <anantvijay3@gmail.com >
2023-08-11 04:31:39 +05:30
DRAGON2002
9afae713ba
feat: add table heading colors ( #1321 )
...
Signed-off-by: DRAGON <anantvijay3@gmail.com >
2023-08-10 19:14:38 +03:00
DRAGON2002
6c1a3fb89b
feat: add short table ( #1292 )
...
Signed-off-by: DRAGON <anantvijay3@gmail.com >
Signed-off-by: DRAGON2002 <81813720+XDRAGON2002@users.noreply.github.com >
2023-08-09 16:56:58 +03:00
DRAGON2002
df5f7db51d
feat: change colors library ( #1316 )
...
Signed-off-by: DRAGON <anantvijay3@gmail.com >
2023-08-09 09:48:34 +03:00
DRAGON2002
869f0ea109
feat: add unicode table ( #1285 )
...
Signed-off-by: DRAGON <anantvijay3@gmail.com >
2023-08-09 09:26:37 +03:00
4c9fec8ef4
Support scanning scope ( #1293 )
...
* support scanning scope
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update go mod
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update white list
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update go mod
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* scope empty return control should tested
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update rego scope for system test
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update test + mock
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* add comment
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update rego library
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update k8s-interface
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update opa utils - lots of file changes in this commit since armoapi-go bump up in opa-utils
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* move to temp k8s-interface - till PR in k8s-interface repo will approved
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update k8s-interface with released tag
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update go mod in httphandler
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* PR review corrections
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* change test name
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* scanning scope support for framework
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* test/mock adjustments after merge
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* add more informative log to the user
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* update go.mod and go.sum of the http handler
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* remove framework just scanning scope not matched to framework config scope
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* add system tests to workflow
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
* add system test to github workflow
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
---------
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
Signed-off-by: David Wertenteil <dwertent@armosec.io >
Co-authored-by: rcohencyberarmor <rcohen@armosec.io >
Co-authored-by: David Wertenteil <dwertent@armosec.io >
2023-08-07 19:11:14 +03:00
David Wertenteil
6f07e63d3f
Hotfix for version 2.3.8 ( #1333 )
...
* update wf
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed tag
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* build arm64
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: revert release changes
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: adding build-image wf
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* adding platforms to wf
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-06 12:23:49 +03:00
Anubhav Gupta
38aa8b0dce
feat: add kubescape patch command
...
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com >
2023-08-05 00:18:18 +05:30
David Wertenteil
addd66bf72
Merge pull request #1327 from dwertent/hot-fix-submit-timestamp
...
Fix submit time
2023-08-04 19:24:27 +03:00
Amir Malka
e2f96200e0
Code refactor (follow up to PR #1300 ) ( #1323 )
...
* code refactor
Signed-off-by: Amir Malka <amirm@armosec.io >
* use scaninfo object in resource handler
Signed-off-by: Amir Malka <amirm@armosec.io >
---------
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-03 17:50:33 +03:00
David Wertenteil
7444acae11
Merge pull request #1312 from XDRAGON2002/issue_1282
...
fix: negative compliance score
2023-08-03 14:32:47 +03:00
David Wertenteil
226b4772a2
fix submit time
...
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-03 13:26:49 +03:00
5379b9b0a6
New output ( #1320 )
...
* phase-1
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* factory
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* wip: feat(cli): add an image scanning command
Add a CLI command that launches an image scan. Does not scan images yet.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: add image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore: include dependencies
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: adjust image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: use scanning service in CLI
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* use iface
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* touches
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* identifiers
* go mod
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* merge
* more
* integrate img scan
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* changes
* changes
* fixes
* changes
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): create vuln db with dedicated function
Remove commented out code, too.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* docs(imagescan): provide package-level docs
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* finish merge
* image scan tests
* continue
* fixes
* refactor
* rm duplicate
* start fixes
* update gh actions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* pr fixes
* fix test
* improvements
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
Signed-off-by: Amir Malka <amirm@armosec.io >
Signed-off-by: David Wertenteil <dwertent@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: David Wertenteil <dwertent@armosec.io >
2023-08-03 12:09:33 +03:00
Amir Malka and Daniel Grunberger
0c019819ff
Scanning a single resource ( #1300 )
...
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* use ScanObject instead of workload identifier
Signed-off-by: Amir Malka <amirm@armosec.io >
* refactor logic after CR
Signed-off-by: Amir Malka <amirm@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Amir Malka <amirm@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-01 14:07:31 +03:00
David Wertenteil
d9e946cf6d
reset head ( #1306 )
...
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-01 10:47:07 +03:00
DRAGON
d2af7f47db
fix: negative compliance score
...
Signed-off-by: DRAGON <anantvijay3@gmail.com >
2023-07-31 00:21:01 +05:30
Amir Malka
ea3172eda6
time-based cached policies
...
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-07-10 10:54:56 +03:00
David Wertenteil
abe0477249
Merge pull request #1265 from dwertent/update-submit-message
...
Update submit message
2023-07-06 09:39:04 +03:00
David Wertenteil
8fa15688fb
Merge pull request #1260 from dwertent/deprecate-host-scanner
...
Deprecated host-scanner from CLI
2023-07-05 17:46:12 +03:00
David Wertenteil
780be45392
update submit message
...
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-07-05 10:38:59 +03:00
Oshrat Nir
3c38021f7c
Changed Assistance Remediation to Assited Remediation
...
Signed-off-by: Oshrat Nir <oshratn@gmail.com >
2023-07-04 13:13:50 +03:00
David Wertenteil
8989cc1679
Deprecated host-scanner
...
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-07-04 09:43:10 +03:00
Nitish Chauhan
6cefada215
correcting the formating of the table in pdf output ( #1244 )
...
* correcting the formatting of the table in pdf output
Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com >
* adding some starting unit tests
Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com >
* resolving the mod error
Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com >
---------
Signed-off-by: ntishchauhan0022 <nitishchauhan0022@gmail.com >
2023-06-04 15:21:07 +03:00
Alessio Greggi
7840ecb5da
fix: move host-scanner to kubescape namespace
...
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it >
2023-05-24 09:45:12 +02:00
Amir Malka
987f97102d
bump opa-utils version for memory optimizations
...
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-05-22 16:44:11 +03:00
YiscahLevySilas1
b7935276e3
Merge branch 'master' of github.com:kubescape/kubescape into new-threshold-flag
...
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
2023-04-27 15:56:12 +03:00
YiscahLevySilas1
d6edd818b8
add compliance score to new field in controls for backward compatibility
...
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
2023-04-27 15:53:47 +03:00
YiscahLevySilas1
95e88f8581
add compliance-threshold, deprecate fail-threshold ( #1197 )
...
* add compliance-threshold, deprecate fail-threshold
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
* update opa-utils version
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
* update opa-utils version for fix in compliance score
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
---------
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
2023-04-24 15:33:30 +03:00
David Wertenteil
ecf770c756
Merge pull request #1189 from dwertent/hotfix-2.2.6-add_data
...
fix(submit): set default report time
2023-04-20 16:39:51 +03:00
YiscahLevySilas1
344e9188f6
add compliance-threshold, deprecate fail-threshold
...
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io >
2023-04-17 16:08:38 +03:00
Hollow Man
5c1a41e920
nit
...
Signed-off-by: Hollow Man <hollowman@opensuse.org >
2023-04-13 10:54:25 +03:00
Hollow Man
0b8d207615
Add more error check
...
Signed-off-by: Hollow Man <hollowman@opensuse.org >
2023-04-13 10:54:25 +03:00
Hollow Man
539b6c51b9
Add unit testcase
...
Signed-off-by: Hollow Man <hollowman@opensuse.org >
2023-04-13 10:54:25 +03:00
Hollow Man
19ca590e2f
S1023: redundant break statement (gosimple)
...
Signed-off-by: Hollow Man <hollowman@opensuse.org >
2023-04-13 10:54:25 +03:00
Hollow Man
4de50f82c0
feat(sarif): add fix object in generated reports
...
Signed-off-by: Hollow Man <hollowman@opensuse.org >
2023-04-13 10:54:19 +03:00
David Wertenteil
91c13381b2
set default report time
...
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-04-09 11:15:06 +02:00
yuleib
875deb7ec3
adding compliance score updates ( #1181 )
...
Signed-off-by: Yuval Leibovich <yuvall@armosec.io >
2023-04-04 16:03:40 +03:00
Daniel Grunberger
Daniel Grunberger
Anubhav Gupta
Amir Malka
David Wertenteil
DRAGON
DRAGON2002
Oshrat Nir
Nitish Chauhan
Alessio Greggi
YiscahLevySilas1
YiscahLevySilas1
Hollow Man
yuleib