github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,092 Commits 23 Branches 553 Tags
update-maintainers
Commit Graph
335 Commits
Author SHA1 Message Date
Ben 4f3ef49f99 Implementing capability to print out the "print" statements of the rego 
Signed-off-by: Ben <ben@armosec.io>
 2024-11-20 00:10:18 +02:00
Matthias Bertschy 5b9c6491de fix mod tidy 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-11-18 10:34:28 +01:00
Matthias Bertschy 90c359533f override docker/docker upgrade 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-11-12 14:46:29 +01:00
dependabot[bot] c4935671fe Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in /httphandler 
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-12 10:32:57 +00:00
dependabot[bot] 12c6f34fe7 Bump github.com/containers/common from 0.59.0 to 0.60.4 in /httphandler 
Bumps [github.com/containers/common](https://github.com/containers/common) from 0.59.0 to 0.60.4.
- [Release notes](https://github.com/containers/common/releases)
- [Commits](https://github.com/containers/common/compare/v0.59.0...v0.60.4)

---
updated-dependencies:
- dependency-name: github.com/containers/common
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-03 05:21:42 +00:00
Matthias Bertschy f64d5a03af bump opa and go-logger 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-09-30 17:40:38 +02:00
Matthias Bertschy b7c91c238d force grpc 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-09-04 21:57:00 +02:00
dependabot[bot] 729efcb8c3 Bump github.com/docker/docker in /httphandler 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.1.4+incompatible to 26.1.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v26.1.4...v26.1.5)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-21 10:24:57 +00:00
dependabot[bot] eea4cc0b49 Bump github.com/docker/docker in /httphandler 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.1.0+incompatible to 26.1.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v26.1.0...v26.1.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 19:43:32 +00:00
ttimonen 7507f58306 refactor(handler) Simplify the scan http handler concurrency. 
In particular,
Replace scanResponseChan struct with a reply channel in req.
This removes one chokepoint with tracking a map of channel with a mutex wrapping by not sharing data across different requests and
 makes it easier to reason about the correctness of the behavior.

Other changes are mostly cosmetic to group your operations related to
the primitives you are operating on, reducing the average lifetime of
a local variable (matters mostly for humans; compilers are very good at this nowadays).

Also this is net benefical by reducing LOCs by 45.

Signed-off-by: ttimonen <toni.timonen@iki.fi>
 2024-07-07 22:44:35 +00:00
ttimonen 48ad56a2ef Implement unit-test for scan handler. 
It plays wtih channels and goroutines, so having it
behave correctly is not completely trivial and test
worthy.

Signed-off-by: ttimonen <toni.timonen@iki.fi>
 2024-07-07 22:40:58 +00:00
Matthias Bertschy 2d77ea7b62 use pager.EachListItem to filter parented resources 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-03 16:41:12 +02:00
dependabot[bot] 0688e3620b Bump github.com/gorilla/schema from 1.2.0 to 1.4.1 in /httphandler 
Bumps [github.com/gorilla/schema](https://github.com/gorilla/schema) from 1.2.0 to 1.4.1.
- [Release notes](https://github.com/gorilla/schema/releases)
- [Commits](https://github.com/gorilla/schema/compare/v1.2.0...v1.4.1)

---
updated-dependencies:
- dependency-name: github.com/gorilla/schema
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-02 07:38:23 +00:00
dependabot[bot] d6dc8f219c Bump github.com/hashicorp/go-retryablehttp in /httphandler 
Bumps [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) from 0.7.5 to 0.7.7.
- [Changelog](https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/go-retryablehttp/compare/v0.7.5...v0.7.7)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-retryablehttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-25 07:46:08 +00:00
dependabot[bot] 51a9707d24 Bump go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace 
Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.40.0 to 0.44.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.40.0...zpages/v0.44.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-25 06:02:15 +00:00
Anubhav Gupta 2bbedc99dd Merge branch 'master' of ssh://github.com/kubescape/kubescape into copa-grype 2024-06-22 08:59:18 +05:30
dependabot[bot] a7127c0b27 Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity in /httphandler 
Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.5.1 to 1.6.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/internal/v1.5.1...sdk/azcore/v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-17 11:06:59 +00:00
dependabot[bot] 137fe81701 Bump github.com/aquasecurity/trivy from 0.44.1 to 0.51.2 in /httphandler 
Bumps [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) from 0.44.1 to 0.51.2.
- [Release notes](https://github.com/aquasecurity/trivy/releases)
- [Changelog](https://github.com/aquasecurity/trivy/blob/main/goreleaser.yml)
- [Commits](https://github.com/aquasecurity/trivy/compare/v0.44.1...v0.51.2)

---
updated-dependencies:
- dependency-name: github.com/aquasecurity/trivy
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-04 21:16:10 +00:00
Matthias Bertschy f293606f81 Merge pull request #1682 from slashben/vap-helper-features 
Adding two helper functions for VAP and CEL admission library
 2024-06-04 23:12:05 +02:00
Matthias Bertschy d6d2315ad0 fixes for vap helper 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-06-04 13:41:00 +02:00
David Wertenteil 0ee98351c0 fix scanning unsupported clouds 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-26 15:45:19 +03:00
Anubhav Gupta 160709eabf Merge branch 'master' of ssh://github.com/kubescape/kubescape into copa-grype 2024-05-17 13:37:25 +05:30
David Wertenteil da6faa3df0 Merge pull request #1680 from kubescape/fix/repo-scanning 
Fix scanning repo
 2024-05-07 09:16:20 +03:00
David Wertenteil 3cbd2c458d fix scanning repo 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-06 16:22:38 +03:00
dependabot[bot] 834623762d Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 in /httphandler 
Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.2.3 to 2.2.4.
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/cosign/compare/v2.2.3...v2.2.4)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-06 05:40:44 +00:00
Matthias Bertschy 4b5c2dfed4 fix go.mod for httphandler 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-30 09:57:29 +02:00
David Wertenteil 2f208c0866 Merge pull request #1668 from kubescape/bump 
bump opa-utils
 2024-04-30 08:43:19 +03:00
Matthias Bertschy 9521cf1974 bump syft version 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-29 14:00:18 +02:00
Matthias Bertschy 8ec56976c5 bump opa-utils 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-25 18:48:40 +02:00
Anubhav Gupta 6ee6a78a75 Merge branch 'master' of https://github.com/kubescape/kubescape into copa-grype 2024-04-09 21:37:46 +05:30
Matthias Bertschy 22fc14ae50 bump deps for vulnerabilities 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-28 10:05:38 +01:00
YiscahLevySilas1 a8cc411945 update backend version 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-03-26 12:06:21 +02:00
YiscahLevySilas1 0477f8cb03 use regolibrary v2 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-03-26 09:05:01 +02:00
Anubhav Gupta b9fd60b395 fix 
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com>
 2024-03-26 12:06:16 +05:30
Matthias Bertschy 708bf4477a Fix gitlab (#1639) 
* always use git token if we provide one

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* bump go-git-url for gitlab fix

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* fix action permissions for cosign signature

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 11:02:39 +02:00
Matthias Bertschy d13dd9b3a7 httphandler go mod tidy 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-14 10:15:57 +01:00
Matthias Bertschy 2429d2b89d move versioncheck to kubescape/backend 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-06 14:44:37 +01:00
Matthias Bertschy f1c34efa97 bump go-git-url for self-hosted gitlab 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-06 11:51:36 +01:00
Anubhav Gupta f0c3a568f0 change reference from anubhav06 to project-copacetic 
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com>
 2024-03-05 17:36:48 +01:00
David Wertenteil 15b63401b7 go sum 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-01 15:21:22 +02:00
Alfredo Garcia fad8f2b272 Add Vulnerability scanning report to the summaryDetails section (#1615) 
* Add Vulnerability scanning report to the summaryDetails section

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

* Updating the opa-utils dependency version

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

---------

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>
 2024-03-01 14:59:23 +02:00
David Wertenteil 533edc6d05 Fixing exceptions for regovector objects 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-29 08:42:32 +02:00
Matthias Bertschy ac6c5ca570 image scan add schema v1 support 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-02-28 10:25:16 +01:00
David Wertenteil ea7a8bef94 Fix/backlog (#1613) 
* Many minor improvements

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Handle fw scan error

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Remove prometheus docs

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fix workload threshold

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed units

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-26 22:42:41 +02:00
dependabot[bot] 3affee539f Bump helm.sh/helm/v3 from 3.12.1 to 3.14.2 in /httphandler 
Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.12.1 to 3.14.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](https://github.com/helm/helm/compare/v3.12.1...v3.14.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-02-25 21:35:19 +00:00
David Wertenteil 6c5c1265d5 Bump k8s-interface version 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 18:23:48 +02:00
David Wertenteil 121e4ccad4 Merge pull request #1590 from kubescape/nolibgit 
remove libgit files and dependencies
 2024-02-21 15:29:04 +02:00
dependabot[bot] 5fd7529c90 Bump github.com/moby/buildkit from 0.12.1 to 0.12.5 in /httphandler 
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.12.1 to 0.12.5.
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](https://github.com/moby/buildkit/compare/v0.12.1...v0.12.5)

---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-02-07 09:46:39 +00:00
Matthias Bertschy 3e287db1f9 remove libgit files and dependencies 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-20 10:24:21 +01:00
dependabot[bot] 5e9fbf05f1 Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 in /httphandler 
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.3 to 1.3.7.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.7)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-01-15 07:28:16 +00:00