github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,175 Commits 23 Branches 553 Tags
5d4bd2e94ea052d50ddbfeb5ff11b77463260450
Commit Graph

878 Commits

Author SHA1 Message Date
Amir Malka
8a671b9658 fix panic when submitting report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-19 11:39:26 +02:00
Matthias Bertschy
708bf4477a Fix gitlab (#1639) 
* always use git token if we provide one

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* bump go-git-url for gitlab fix

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* fix action permissions for cosign signature

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 11:02:39 +02:00
Amir Malka
56a9d9a7f3 fix panic when error is returned from SubmitReport (#1640) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-17 14:08:04 +02:00
Matthias Bertschy
55e570a2b2 get KubernetesClient only if k8s is not nil 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-13 10:45:32 +01:00
Matthias Bertschy
da022a1cf0 set BuildNumber and Client from env 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-12 16:11:58 +01:00
David Wertenteil
d8d6ab96df Merge pull request #1629 from kubescape/fix/sarif-fix 
Remove repeating fixes
 2024-03-11 09:47:42 +02:00
David Wertenteil
abefe8c21a Merge pull request #1593 from kubescape/daily 
update daily report
 2024-03-11 09:26:28 +02:00
David Wertenteil
0e0e1ed6fb remove repeating fixes 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-11 09:22:03 +02:00
mmmmmmorty
f5e110c212 Fix bug for no matches of yalib in one file mapping 
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-08 10:50:39 +02:00
Matthias Bertschy
2429d2b89d move versioncheck to kubescape/backend 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-06 14:44:37 +01:00
Anubhav Gupta
f0c3a568f0 change reference from anubhav06 to project-copacetic 
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com>
 2024-03-05 17:36:48 +01:00
David Wertenteil
e87f3399c7 fixed release artifacts 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-01 15:09:25 +02:00
Alfredo Garcia
fad8f2b272 Add Vulnerability scanning report to the summaryDetails section (#1615) 
* Add Vulnerability scanning report to the summaryDetails section

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

* Updating the opa-utils dependency version

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

---------

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>
 2024-03-01 14:59:23 +02:00
MMMMMMorty
bc33f10d0a feat: Add the debugging ability for scanning Helm chart (#1215) 
* Fix issue 11552

Signed-off-by: MMMMMMorty <465346562@qq.com>

* Add helm chart mapping node for sarif printer

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add MappingNodes to getWorkloadFromHelmChart

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* clear the code to mappingnode and parseFile

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add input to fixPathsToString

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add fixs for error message

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add solution for multiple files in one yaml helm chart file

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add parseFile tests

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

---------

Signed-off-by: MMMMMMorty <465346562@qq.com>
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-01 14:31:51 +02:00
David Wertenteil
533edc6d05 Fixing exceptions for regovector objects 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-29 08:42:32 +02:00
Matthias Bertschy
ac6c5ca570 image scan add schema v1 support 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-02-28 10:25:16 +01:00
David Wertenteil
ea7a8bef94 Fix/backlog (#1613) 
* Many minor improvements

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Handle fw scan error

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Remove prometheus docs

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fix workload threshold

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed units

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-26 22:42:41 +02:00
David Wertenteil
05903e34ff Handle unknown fw 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 17:05:38 +02:00
David Wertenteil
9b05fb60e4 Merge pull request #1607 from kubescape/fix/fw-list 
Remove "%" from the print
 2024-02-22 15:36:24 +02:00
David Wertenteil
d01a7977ae Remove "%" from the print 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 14:26:51 +02:00
Matthias Bertschy
3e287db1f9 remove libgit files and dependencies 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-20 10:24:21 +01:00
YiscahLevySilas1
1b59b6a35f fix backslashes 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-01-16 11:59:28 +02:00
Matthias Bertschy
6a6e4181bd fetch Rekor before cosign validation 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-15 14:33:39 +01:00
Amir Malka
4b8786bcaa checking for compatible policy rules before pulling k8s resources; failing to pull some k8s resource should not fail the entire scan (#1578) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-01-09 09:44:45 +02:00
David Wertenteil
3634499e11 Fixed filepath test (#1576) 
* remove unstable tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* skip tests on windows

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 23:00:16 +02:00
David Wertenteil
a0e6ebe0e0 filepath test 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 18:00:45 +02:00
David Wertenteil
65a557db90 fixed test (#1573) 
* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign-release version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed filepath related tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* failed windows tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed cosign version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update go version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change actor

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Cosign use secret

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 16:26:34 +02:00
VaibhavMalik4187
155889a479 Added missing tests for locationresolver 
Wrote new tests to cover the unhandled statements in the
`NewFixPathLocationResolver` and `ResolveLocation` functions.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-12-23 17:23:07 +05:30
Matthias Bertschy
e29e6a5e8a add wlid annotation to workloadconfigurationscans and summaries 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-12-12 10:42:02 +01:00
Matthias Bertschy
1b260f60cc patch GHSA-3f2q-6294-fmq5 by switching to chainguard's fork 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-12-11 07:19:05 +01:00
VaibhavMalik4187
de2e86dc6e Fixed crash when running the scan command 
Updated the `getSortPackageScores` function to fix the crash in the scan
command.

Fixes: https://github.com/kubescape/kubescape/issues/1553

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-30 15:12:33 +05:30
Matthias Bertschy
dd5a18c8fa Merge pull request #1544 from mohaidoss/Improvement/ks-cloud-logs 
Enhancement of Logging Mechanisms for KS Cloud Usage
 2023-11-27 16:48:10 +01:00
Yuval Leibovich
e4e795c6dc Merge pull request #1548 from kubescape/remove-armoBuiltin 
Removal of "armoBuiltin" attribute from JSON files
 2023-11-27 16:17:35 +02:00
VaibhavMalik4187
d1b78856ca Added tests for versioncheck and printer packages 
Wrote new tests for the following files:
- junit.go
- pdf.go
- versioncheck.go

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 18:25:34 +05:30
Matthias Bertschy
289e055014 Merge pull request #1547 from kubescape/add-scan-source 
add scan source
 2023-11-27 12:38:11 +01:00
Matthias Bertschy
81ba550043 Merge pull request #1537 from VaibhavMalik4187/printer-tests-continued 
Addition of Tests for the PrettyPrinter Package
 2023-11-27 11:11:15 +01:00
Matthias Bertschy
8e5d8e5c96 Merge pull request #1539 from VaibhavMalik4187/prettyprinter/utils 
Performance Enhancements and Test Additions in prettyprinter/utils.go
 2023-11-27 11:08:16 +01:00
Matthias Bertschy
5789f1f0fa Merge pull request #1542 from VaibhavMalik4187/imageprinter-tests 
Added new tests in the imagewriter package
 2023-11-27 11:07:30 +01:00
Matthias Bertschy
9a523f4a01 Merge pull request #1545 from VaibhavMalik4187/configurationprinter-tests 
Enhancements and Tests for Configuration Printer
 2023-11-27 11:06:38 +01:00
Matthias Bertschy
fb3357fba4 Merge pull request #1546 from kubescape/set-default-format 
Set default format
 2023-11-27 11:02:49 +01:00
Yuval Leibovich
69362ae415 Update MITRE.json 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 12:01:14 +02:00
Yuval Leibovich
bb17e1de78 Update NSA.json 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 11:57:31 +02:00
Yuval Leibovich
504891f519 Update C-0001.json 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 11:51:09 +02:00
Yuval Leibovich
d1606c5e39 Update processorhandler_test.go 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 11:46:50 +02:00
Daniel Grunberger
952beddcc3 add scan source 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-11-27 11:24:25 +02:00
Daniel Grunberger
08f3756608 fix test 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-11-27 09:25:07 +02:00
Daniel Grunberger
7cda7346b7 set default 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-11-27 08:56:33 +02:00
VaibhavMalik4187
8cd0bddf6f Enhancements and tests for configurationprinter 
Wrote new tests for `categorytable` and `frameworkscan`

Refactored the `shortFormatRow` function for:
- Imporved readability
- Consistency
- Improve code modularity
- Encapsulation: The formatted string construction is encapsulated
  within the function, maintaining code modularity and separation of
  concerns.

Added the `MockISeverityCounters` mock struct to test the
`renderSeverityCountersSummary` function.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 11:35:24 +05:30
VaibhavMalik4187
8fa7fc922d Added tests for the prettyprinter package 
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 03:46:45 +05:30
VaibhavMalik4187
6a2e48ac74 Performance enhancements in utils.go 
Improvments:
1. filterCVEsBySeverities
  - This approach is faster than iterating over the severities slice
    for each CVE. The map is created in advance, eliminating the
    need for repeated string comparisons.

2. getSortPackageScores
  - Avoids unnecessary map lookups by creating a slice of
    imageprinter.PackageScore pointers.

3. getSortedCVEsBySeverity
  - Avoiding Map Lookups
  - Efficient Sorting
  - Optimized Output

Added tests for tableprinter/utils

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 03:15:20 +05:30