Matthias Bertschy
6ed3e408be
check scanInfo.Submit in HandleResults to not submit by default
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2025-06-30 08:16:41 +02:00
Ruslan Semagin
2e4f7c4477
fix: add error handling and context propagation
...
Signed-off-by: Ruslan Semagin <pixel.365.24@gmail.com >
2025-02-12 09:02:01 +03:00
Ruslan Semagin
fe7dad4560
Refactor: propagate context from main to avoid redundant context creation
...
- Introduced a single context in main() to handle interrupt signals (os.Interrupt, syscall.SIGTERM).
- Removed repetitive context creation in the program by reusing the propagated context.
- Improved code readability and maintainability by centralizing context management.
- Ensured consistent handling of graceful shutdown across the program.
Signed-off-by: Ruslan Semagin <pixel.365.24@gmail.com >
2025-02-11 19:52:48 +03:00
Matthias Bertschy
70a9380966
fix go imports
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2025-01-09 12:14:56 +01:00
Matthias Bertschy
2d77ea7b62
use pager.EachListItem to filter parented resources
...
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com >
2024-07-03 16:41:12 +02:00
David Wertenteil
ea7a8bef94
Fix/backlog ( #1613 )
...
* Many minor improvements
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* Handle fw scan error
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* Remove prometheus docs
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fix workload threshold
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed units
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2024-02-26 22:42:41 +02:00
VaibhavMalik4187
69bbf7f72e
Added Test Suite for the cmd packages
...
Wrote new tests for the following packages
- operator
- patch
- scan
Also fixed potential crash in the RunE function of the image subcommand
in the scan package.
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com >
2023-11-25 16:57:14 +05:30
David Wertenteil
3e2314a269
Bump v3 ( #1449 )
...
* bump version
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* change default view
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed tests
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed go mod
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-10-22 17:43:51 +03:00
David Wertenteil
d5407466d5
Preparing Kubescape for v3 ( #1403 )
...
* wip: minor cli fixes
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: change default view
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* wip: reduce default topWorkloadsNumber to 3
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update gif
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* default view for controls and frameworks
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-10-22 15:39:58 +03:00
Amir Malka
150967eae8
Refactor backend integration ( #1355 )
...
* refactor BE integration
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-23 15:36:08 +03:00
Daniel Grunberger
936cb26c06
fix panic and improve logs ( #1344 )
...
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-16 13:00:52 +03:00
David Wertenteil
cf08daf7fb
scan per namespace ( #1337 )
...
* scan per namespace
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* disable unit test
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* Adding build image wf
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* removing unused channels
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* adding scopes
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* fixed cluster size
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update rbac deps
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* aggregate resources
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* Delete build-image.yaml
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* adding scan image logs
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update cmd message
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* update logs
Signed-off-by: David Wertenteil <dwertent@armosec.io >
---------
Signed-off-by: David Wertenteil <dwertent@armosec.io >
2023-08-08 10:47:15 +03:00
Daniel Grunberger
5379b9b0a6
New output ( #1320 )
...
* phase-1
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* factory
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* wip: feat(cli): add an image scanning command
Add a CLI command that launches an image scan. Does not scan images yet.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: add image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore: include dependencies
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: adjust image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: use scanning service in CLI
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* use iface
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* touches
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* identifiers
* go mod
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* merge
* more
* integrate img scan
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* changes
* changes
* fixes
* changes
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): create vuln db with dedicated function
Remove commented out code, too.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* docs(imagescan): provide package-level docs
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* finish merge
* image scan tests
* continue
* fixes
* refactor
* rm duplicate
* start fixes
* update gh actions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* pr fixes
* fix test
* improvements
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
Signed-off-by: Amir Malka <amirm@armosec.io >
Signed-off-by: David Wertenteil <dwertent@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: David Wertenteil <dwertent@armosec.io >
2023-08-03 12:09:33 +03:00
Amir Malka
e276e54d2b
remove scan workload command
...
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-01 14:11:16 +03:00
Amir Malka
0c019819ff
Scanning a single resource ( #1300 )
...
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* use ScanObject instead of workload identifier
Signed-off-by: Amir Malka <amirm@armosec.io >
* refactor logic after CR
Signed-off-by: Amir Malka <amirm@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Amir Malka <amirm@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-01 14:07:31 +03:00
