github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,966 Commits 23 Branches 553 Tags
3fd7bf40cc2c5de69ffe88c0af6556f01e3c792f
Commit Graph

836 Commits

Author SHA1 Message Date
David Wertenteil
a15fc066e1 fixed return status code 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-04-30 15:26:38 +03:00
Matthias Bertschy
9521cf1974 bump syft version 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-29 14:00:18 +02:00
fanqiaojun
bd35d521f2 Fix some comments 
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net>
 2024-04-13 15:42:01 +08:00
Massimiliano Giovagnoli
e0f2944fc8 chore(core/pkg/resultshandling): add control id to pdf output 
Add a new column in the PDF output to reference each control that has
been executed as control ID.

Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
 2024-04-10 17:11:30 +02:00
Matthias Bertschy
bda7a17f41 Merge pull request #1658 from needsure/master 
chore: fix function names in comment
 2024-04-09 11:47:07 +02:00
needsure
dee6ed96f8 chore: fix function names in comment 
Signed-off-by: needsure <qinzhipeng@outlook.com>
 2024-04-09 16:33:24 +08:00
Matthias Bertschy
d27284b6f6 remove api calls from scan repo 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-09 07:37:58 +02:00
Matthias Bertschy
d9736d7d56 Merge pull request #1644 from kubescape/fix-panic-submitting-report 
fix panic when submitting report
 2024-03-27 10:54:28 +01:00
YiscahLevySilas1
0477f8cb03 use regolibrary v2 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-03-26 09:05:01 +02:00
Amir Malka
8a671b9658 fix panic when submitting report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-19 11:39:26 +02:00
Matthias Bertschy
708bf4477a Fix gitlab (#1639) 
* always use git token if we provide one

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* bump go-git-url for gitlab fix

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* fix action permissions for cosign signature

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 11:02:39 +02:00
Amir Malka
56a9d9a7f3 fix panic when error is returned from SubmitReport (#1640) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-17 14:08:04 +02:00
Matthias Bertschy
55e570a2b2 get KubernetesClient only if k8s is not nil 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-13 10:45:32 +01:00
Matthias Bertschy
da022a1cf0 set BuildNumber and Client from env 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-12 16:11:58 +01:00
David Wertenteil
d8d6ab96df Merge pull request #1629 from kubescape/fix/sarif-fix 
Remove repeating fixes
 2024-03-11 09:47:42 +02:00
David Wertenteil
abefe8c21a Merge pull request #1593 from kubescape/daily 
update daily report
 2024-03-11 09:26:28 +02:00
David Wertenteil
0e0e1ed6fb remove repeating fixes 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-11 09:22:03 +02:00
mmmmmmorty
f5e110c212 Fix bug for no matches of yalib in one file mapping 
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-08 10:50:39 +02:00
Matthias Bertschy
2429d2b89d move versioncheck to kubescape/backend 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-06 14:44:37 +01:00
David Wertenteil
e87f3399c7 fixed release artifacts 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-01 15:09:25 +02:00
Alfredo Garcia
fad8f2b272 Add Vulnerability scanning report to the summaryDetails section (#1615) 
* Add Vulnerability scanning report to the summaryDetails section

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

* Updating the opa-utils dependency version

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

---------

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>
 2024-03-01 14:59:23 +02:00
MMMMMMorty
bc33f10d0a feat: Add the debugging ability for scanning Helm chart (#1215) 
* Fix issue 11552

Signed-off-by: MMMMMMorty <465346562@qq.com>

* Add helm chart mapping node for sarif printer

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add MappingNodes to getWorkloadFromHelmChart

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* clear the code to mappingnode and parseFile

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add input to fixPathsToString

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add fixs for error message

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add solution for multiple files in one yaml helm chart file

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add parseFile tests

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

---------

Signed-off-by: MMMMMMorty <465346562@qq.com>
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-01 14:31:51 +02:00
David Wertenteil
533edc6d05 Fixing exceptions for regovector objects 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-29 08:42:32 +02:00
Matthias Bertschy
ac6c5ca570 image scan add schema v1 support 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-02-28 10:25:16 +01:00
David Wertenteil
ea7a8bef94 Fix/backlog (#1613) 
* Many minor improvements

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Handle fw scan error

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Remove prometheus docs

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fix workload threshold

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed units

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-26 22:42:41 +02:00
David Wertenteil
05903e34ff Handle unknown fw 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 17:05:38 +02:00
David Wertenteil
9b05fb60e4 Merge pull request #1607 from kubescape/fix/fw-list 
Remove "%" from the print
 2024-02-22 15:36:24 +02:00
David Wertenteil
d01a7977ae Remove "%" from the print 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 14:26:51 +02:00
Matthias Bertschy
3e287db1f9 remove libgit files and dependencies 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-20 10:24:21 +01:00
YiscahLevySilas1
1b59b6a35f fix backslashes 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-01-16 11:59:28 +02:00
Matthias Bertschy
6a6e4181bd fetch Rekor before cosign validation 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-15 14:33:39 +01:00
Amir Malka
4b8786bcaa checking for compatible policy rules before pulling k8s resources; failing to pull some k8s resource should not fail the entire scan (#1578) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-01-09 09:44:45 +02:00
David Wertenteil
3634499e11 Fixed filepath test (#1576) 
* remove unstable tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* skip tests on windows

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 23:00:16 +02:00
David Wertenteil
a0e6ebe0e0 filepath test 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 18:00:45 +02:00
David Wertenteil
65a557db90 fixed test (#1573) 
* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign-release version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed filepath related tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* failed windows tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed cosign version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update go version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change actor

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Cosign use secret

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 16:26:34 +02:00
VaibhavMalik4187
155889a479 Added missing tests for locationresolver 
Wrote new tests to cover the unhandled statements in the
`NewFixPathLocationResolver` and `ResolveLocation` functions.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-12-23 17:23:07 +05:30
Matthias Bertschy
e29e6a5e8a add wlid annotation to workloadconfigurationscans and summaries 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-12-12 10:42:02 +01:00
Matthias Bertschy
1b260f60cc patch GHSA-3f2q-6294-fmq5 by switching to chainguard's fork 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-12-11 07:19:05 +01:00
VaibhavMalik4187
de2e86dc6e Fixed crash when running the scan command 
Updated the `getSortPackageScores` function to fix the crash in the scan
command.

Fixes: https://github.com/kubescape/kubescape/issues/1553

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-30 15:12:33 +05:30
Matthias Bertschy
dd5a18c8fa Merge pull request #1544 from mohaidoss/Improvement/ks-cloud-logs 
Enhancement of Logging Mechanisms for KS Cloud Usage
 2023-11-27 16:48:10 +01:00
Yuval Leibovich
e4e795c6dc Merge pull request #1548 from kubescape/remove-armoBuiltin 
Removal of "armoBuiltin" attribute from JSON files
 2023-11-27 16:17:35 +02:00
VaibhavMalik4187
d1b78856ca Added tests for versioncheck and printer packages 
Wrote new tests for the following files:
- junit.go
- pdf.go
- versioncheck.go

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 18:25:34 +05:30
Matthias Bertschy
289e055014 Merge pull request #1547 from kubescape/add-scan-source 
add scan source
 2023-11-27 12:38:11 +01:00
Matthias Bertschy
81ba550043 Merge pull request #1537 from VaibhavMalik4187/printer-tests-continued 
Addition of Tests for the PrettyPrinter Package
 2023-11-27 11:11:15 +01:00
Matthias Bertschy
8e5d8e5c96 Merge pull request #1539 from VaibhavMalik4187/prettyprinter/utils 
Performance Enhancements and Test Additions in prettyprinter/utils.go
 2023-11-27 11:08:16 +01:00
Matthias Bertschy
5789f1f0fa Merge pull request #1542 from VaibhavMalik4187/imageprinter-tests 
Added new tests in the imagewriter package
 2023-11-27 11:07:30 +01:00
Matthias Bertschy
9a523f4a01 Merge pull request #1545 from VaibhavMalik4187/configurationprinter-tests 
Enhancements and Tests for Configuration Printer
 2023-11-27 11:06:38 +01:00
Matthias Bertschy
fb3357fba4 Merge pull request #1546 from kubescape/set-default-format 
Set default format
 2023-11-27 11:02:49 +01:00
Yuval Leibovich
69362ae415 Update MITRE.json 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 12:01:14 +02:00
Yuval Leibovich
bb17e1de78 Update NSA.json 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 11:57:31 +02:00