github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,236 Commits 23 Branches 553 Tags
a5b607ae2e2dd369ff2ea77796ece930edfdc1ac
Commit Graph
882 Commits
Author SHA1 Message Date
Amir MalkaandGitHub 4f9809eec1 fix: control-plane node taints check (#1843) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-07-15 11:06:09 +03:00
Matthias Bertschy 6ed3e408be check scanInfo.Submit in HandleResults to not submit by default 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-06-30 08:16:41 +02:00
shangchengbabaiban d8bfb27bc3 fix: Fix stdin restoration in TestUserConfirmed 
Signed-off-by: shangchengbabaiban <shuang.cui@live.cn>
 2025-04-19 10:51:09 +08:00
Matthias Bertschy 31ed7d5160 upgrade open-policy-agent to 1.x 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-04-10 17:17:08 +02:00
Matthias Bertschy 5d4bd2e94e removing enable/disable colors, as not compatible with all loggers 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-18 11:38:47 +01:00
Ruslan Semagin 835bcbeb12 fix: format imports with goimports 
Signed-off-by: Ruslan Semagin <pixel.365.24@gmail.com>
 2025-02-12 12:15:14 +03:00
Matthias Bertschy 3a036ed0e3 remove test resources saved by accident 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-11 21:26:26 +01:00
Ruslan Semagin fe7dad4560 Refactor: propagate context from main to avoid redundant context creation 
- Introduced a single context in main() to handle interrupt signals (os.Interrupt, syscall.SIGTERM).
- Removed repetitive context creation in the program by reusing the propagated context.
- Improved code readability and maintainability by centralizing context management.
- Ensured consistent handling of graceful shutdown across the program.

Signed-off-by: Ruslan Semagin <pixel.365.24@gmail.com>
 2025-02-11 19:52:48 +03:00
Matthias Bertschy 825694ade1 do not skip on location resolver error 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-10 10:25:44 +01:00
Matthias Bertschy 475b672a7a add fixed grypeDB for tests 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-07 12:34:11 +01:00
VaibhavMalik4187andMatthias Bertschy 0545818f82 Added tests and improvements for image exceptions 
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2025-02-07 10:26:53 +01:00
VaibhavMalik4187andMatthias Bertschy 046da1940c Added support for targets in image exceptions 
This commit introduces the ability to specify targets in image
exceptions. Each target will have the following 4 attributes:

1. Registry
2. Organization
3. ImageName
4. ImageTag

These attributes will be used to match against the canonical image name
of the image to be scanned. The vulnerabilites and the severities
specified in the VulnerabilitiesIgnorePolicy object will be considered
only if the image to be scanned matches the targets specified for that
policy. Regular expressions can also be used to specify the image
attributes.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2025-02-07 10:26:53 +01:00
VaibhavMalik4187andMatthias Bertschy a31154897f Added support for severity exceptions in imagescan 
This commit add relevant functions to support severity exceptions during
image scan.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2025-02-07 10:26:53 +01:00
VaibhavMalik4187andMatthias Bertschy 199c57be30 WIP: Load image exceptions from file 
Added initial commit to start loading image exceptions from json files.

Currently, it supports vulnerability exceptions using their CVE-IDs.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2025-02-07 10:26:53 +01:00
VaibhavMalik4187andMatthias Bertschy 7d55c79f11 Feature: Added exceptions flag in scan image cmd 
This commit introduces the "exceptions" flag in the scan image command.
Users can pass a list of vulnerabilities they ignore while scanning an
image using this flag. Also added tests for the same.

Fixes: https://github.com/kubescape/kubescape/issues/1564

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2025-02-07 10:26:53 +01:00
Fernando-hub527 8985bbe3a9 refactor: update Maroto configuration file location 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-06 18:07:57 -03:00
Matthias Bertschy 1ffca5648e delete TableObject.getSeverityColor to please CI 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-02-06 07:56:07 +01:00
Fernando-hub527 76b1ecb022 refactor: create a method that returns the pdf row 
Return a struct with the data for ease of use

Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:52:50 -03:00
Fernando-hub527 fc69a3692e refactor: remove unused code 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:47:28 -03:00
Fernando-hub527 e159458129 test:validate creation of report pdf 
Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:45:01 -03:00
Fernando-hub527 b259f117ff refactor: create a report template with maroto/v2 
Separate template creation from application logic

Signed-off-by: Fernando-hub527 <fernandocoelhosaraivanando@gmail.com>
 2025-02-05 21:36:39 -03:00
Matthias Bertschy 4215771134 fix helm detection in sarif printer 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-31 15:23:15 +01:00
Eng Zer JunandGitHub 2005010568 Replace golang.org/x/exp/slices with slices from stdlib (#1783) 2025-01-17 20:51:08 +02:00
Amir Malka 14ffe35437 add trigger by indication in posture report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2025-01-09 16:13:29 +02:00
Matthias Bertschy 70a9380966 fix go imports 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 12:14:56 +01:00
Matthias Bertschy 600f19406e enable offline mode with env KS_OFFLINE 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2025-01-09 10:33:19 +01:00
Matthias Bertschy 219582b92a add debug log on resource fetch with count 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-12-11 07:35:36 +01:00
needsure c585abc21a chore: fix some function name in comment 
Signed-off-by: needsure <qinzhipeng@outlook.com>
 2024-12-06 13:41:14 +08:00
Ben 4f3ef49f99 Implementing capability to print out the "print" statements of the rego 
Signed-off-by: Ben <ben@armosec.io>
 2024-11-20 00:10:18 +02:00
Matthias Bertschy 761d4c6ff4 gofmt and try to make linter happy 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-11-19 15:10:37 +01:00
jnathangreeg 7735087937 fix the repo scan get stucked bug 
Signed-off-by: jnathangreeg <jonathang@armosec.io>
 2024-11-19 15:13:31 +02:00
jnathangreeg 6f47f8dae0 adding a second term for getFilesFromTree for makeing sure we scaning the right path 
Signed-off-by: jnathangreeg <jonathang@armosec.io>
 2024-11-11 19:29:22 +02:00
Matthias Bertschy d5b8532e40 fix include/exclude NS for SA discovered via CRB 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-23 18:42:01 +02:00
Matthias Bertschy c7d3105ca5 use proper params in pager call 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-10 11:58:06 +02:00
Matthias Bertschy 2d77ea7b62 use pager.EachListItem to filter parented resources 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-07-03 16:41:12 +02:00
Anubhav Gupta 2bbedc99dd Merge branch 'master' of ssh://github.com/kubescape/kubescape into copa-grype 2024-06-22 08:59:18 +05:30
David Wertenteil 0ee98351c0 fix scanning unsupported clouds 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-26 15:45:19 +03:00
Matthias Bertschy 840162c865 fix yamlhandler deleting too many lines during fix 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-05-21 08:48:01 +02:00
Anubhav Gupta 160709eabf Merge branch 'master' of ssh://github.com/kubescape/kubescape into copa-grype 2024-05-17 13:37:25 +05:30
David Wertenteil b2b37f6abc Mask all containers data 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-09 19:08:09 +03:00
David Wertenteil 3cbd2c458d fix scanning repo 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-05-06 16:22:38 +03:00
David Wertenteil a15fc066e1 fixed return status code 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-04-30 15:26:38 +03:00
Matthias Bertschy 9521cf1974 bump syft version 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-29 14:00:18 +02:00
fanqiaojun bd35d521f2 Fix some comments 
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net>
 2024-04-13 15:42:01 +08:00
Massimiliano Giovagnoli e0f2944fc8 chore(core/pkg/resultshandling): add control id to pdf output 
Add a new column in the PDF output to reference each control that has
been executed as control ID.

Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
 2024-04-10 17:11:30 +02:00
Anubhav Gupta 4c9cacecfe fix lint 
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com>
 2024-04-09 22:41:57 +05:30
Anubhav Gupta 6ee6a78a75 Merge branch 'master' of https://github.com/kubescape/kubescape into copa-grype 2024-04-09 21:37:46 +05:30
Anubhav Gupta e754ecff4f fix grype name 
Signed-off-by: Anubhav Gupta <mail.anubhav06@gmail.com>
 2024-04-09 21:33:16 +05:30
Matthias BertschyandGitHub bda7a17f41 Merge pull request #1658 from needsure/master 
chore: fix function names in comment
 2024-04-09 11:47:07 +02:00
needsure dee6ed96f8 chore: fix function names in comment 
Signed-off-by: needsure <qinzhipeng@outlook.com>
 2024-04-09 16:33:24 +08:00