 David Wertenteil
|
7fd1396cff
|
Fixed link (#1624)
* fixed link
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* Adding unit tests to PR check
Signed-off-by: David Wertenteil <dwertent@armosec.io>
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io>
|
2024-03-04 09:45:50 +02:00 |
|
 mmmmmmorty
|
9549e0dcde
|
add github action actor check for pr-scanner
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
|
2024-02-29 15:23:27 +01:00 |
|
 Matthias Bertschy
|
bdefcd2442
|
use goreleaser for builds
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
|
2024-01-09 08:10:05 +01:00 |
|
|
David Wertenteil
|
65a557db90
|
fixed test (#1573)
* fixed test
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* update cosign-release version
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* fixed filepath related tests
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* failed windows tests
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* fixed cosign version
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* update go version
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* fixed test
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* change actor
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* Cosign use secret
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* update cosign
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* update cosign
Signed-off-by: David Wertenteil <dwertent@armosec.io>
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io>
|
2024-01-07 16:26:34 +02:00 |
|
|
mmmmmmorty
|
a382a2c5a3
|
add github action actor check for binary-build
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
|
2023-11-28 14:35:36 +01:00 |
|
 Daniel Grunberger
|
bd79fe4d8d
|
update go version
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
|
2023-11-27 09:37:13 +02:00 |
|
 VaibhavMalik4187
|
16f4849323
|
Run binary-build job only for kubescape/kubscape
Added a check before running the binary-build job to ensure that the
owner of the repository is kubescape.
Fixes: https://github.com/kubescape/kubescape/issues/1482
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
|
2023-11-22 15:12:36 +05:30 |
|
|
Matthias Bertschy
|
df602af7cf
|
add more missing permissions for actions
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
|
2023-10-18 12:41:04 +02:00 |
|
|
Matthias Bertschy
|
6a0a7b84a2
|
actions needs write on id-token in pr-scanner
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
|
2023-10-18 07:28:52 +02:00 |
|
|
Matthias Bertschy
|
4f2d13b151
|
fixing GH actions permissions
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
|
2023-10-17 09:53:46 +02:00 |
|
|
Matthias Bertschy
|
3efa40e808
|
use go-gitlog as an alternative to git2go (#1393)
* use go-gitlog as an alternative to git2go
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
* set RELEASE to something to avoid failing binary-build step
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
---------
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
|
2023-10-15 15:16:05 +03:00 |
|
|
Matthias Bertschy
|
143a4d9818
|
add top level permissions: read-all for openssf
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
|
2023-10-13 15:20:52 +02:00 |
|
|
David Wertenteil
|
1a2e16b895
|
Update PR workflow (#1330)
* fixed wf call
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* do not wait for pr checks
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* fixed typo
Signed-off-by: David Wertenteil <dwertent@armosec.io>
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io>
|
2023-08-03 17:25:22 +03:00 |
|
|
David Wertenteil
|
b44f0a76c9
|
Update 00-pr-scanner.yaml
Signed-off-by: David Wertenteil <dwertent@armosec.io>
|
2023-08-03 13:49:34 +03:00 |
|
  
|
5379b9b0a6
|
New output (#1320)
* phase-1
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
* factory
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
* wip: feat(cli): add an image scanning command
Add a CLI command that launches an image scan. Does not scan images yet.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* wip: feat: add image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* chore: include dependencies
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* wip: adjust image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* wip: feat: use scanning service in CLI
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* use iface
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
* touches
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
* continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io>
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io>
* identifiers
* go mod
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io>
* merge
* more
* integrate img scan
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io>
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io>
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io>
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io>
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io>
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io>
* changes
* changes
* fixes
* changes
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* chore(imagescan): create vuln db with dedicated function
Remove commented out code, too.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* docs(imagescan): provide package-level docs
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
* finish merge
* image scan tests
* continue
* fixes
* refactor
* rm duplicate
* start fixes
* update gh actions
Signed-off-by: David Wertenteil <dwertent@armosec.io>
* pr fixes
* fix test
* improvements
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch>
Signed-off-by: Amir Malka <amirm@armosec.io>
Signed-off-by: David Wertenteil <dwertent@armosec.io>
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io>
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch>
Co-authored-by: Amir Malka <amirm@armosec.io>
Co-authored-by: David Wertenteil <dwertent@armosec.io>
|
2023-08-03 12:09:33 +03:00 |
|
 Matan Shkalim
|
bb576610ff
|
change concurrency in 00-pr-scanner
Signed-off-by: Matan Shkalim <shekel8@gmail.com>
|
2023-03-21 08:05:40 +00:00 |
|
 Alessio Greggi
|
e419af6c03
|
ci: pin workflows versions to fixed commits
Signed-off-by: Alessio Greggi <ale_grey_91@hotmail.it>
|
2023-02-27 21:43:09 +01:00 |
|
|
David Wertenteil
|
17f313177c
|
release with new tag
Signed-off-by: David Wertenteil <dwertent@armosec.io>
|
2023-02-06 15:49:13 +02:00 |
|
|
David Wertenteil
|
29b9448dc0
|
leaving release empty when testing PRs
Signed-off-by: David Wertenteil <dwertent@armosec.io>
|
2023-02-06 15:49:12 +02:00 |
|
|
Matan Shkalim
|
ac60dbed5e
|
add new workflows + action
Signed-off-by: Matan Shkalim <shekel8@gmail.com>
|
2023-01-31 13:01:22 +00:00 |
|