Amir Malka
e2f96200e0
Code refactor (follow up to PR #1300 ) ( #1323 )
...
* code refactor
Signed-off-by: Amir Malka <amirm@armosec.io >
* use scaninfo object in resource handler
Signed-off-by: Amir Malka <amirm@armosec.io >
---------
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-08-03 17:50:33 +03:00
Daniel Grunberger
5379b9b0a6
New output ( #1320 )
...
* phase-1
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* factory
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* wip: feat(cli): add an image scanning command
Add a CLI command that launches an image scan. Does not scan images yet.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: add image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore: include dependencies
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: adjust image scanning service
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* wip: feat: use scanning service in CLI
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* use iface
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* touches
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* continue
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* identifiers
* go mod
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* merge
* more
* integrate img scan
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* changes
* changes
* fixes
* changes
* feat(imagescan): add an image scanning command
This commit adds a CLI command and an associated package that scan
images for vulnerabilities.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
feat(imagescan): fail on exceeding the severity threshold
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): include dependencies
This commit adds the dependencies necessary for image scanning.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): add dependencies to httphandler
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* chore(imagescan): create vuln db with dedicated function
Remove commented out code, too.
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* docs(imagescan): provide package-level docs
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
* finish merge
* image scan tests
* continue
* fixes
* refactor
* rm duplicate
* start fixes
* update gh actions
Signed-off-by: David Wertenteil <dwertent@armosec.io >
* pr fixes
* fix test
* improvements
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Vlad Klokun <vklokun@protonmail.ch >
Signed-off-by: Amir Malka <amirm@armosec.io >
Signed-off-by: David Wertenteil <dwertent@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
Co-authored-by: Vlad Klokun <vklokun@protonmail.ch >
Co-authored-by: Amir Malka <amirm@armosec.io >
Co-authored-by: David Wertenteil <dwertent@armosec.io >
2023-08-03 12:09:33 +03:00
Amir Malka
0c019819ff
Scanning a single resource ( #1300 )
...
* add cmd
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
* support single workload scan
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix conflict
Signed-off-by: Amir Malka <amirm@armosec.io >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* added unit tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* more refactoring
Signed-off-by: Amir Malka <amirm@armosec.io >
* add scanned workload reference to opasessionobj
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix GetWorkloadParentKind
Signed-off-by: Amir Malka <amirm@armosec.io >
* remove namespace argument from pullSingleResource, using field selector instead
Signed-off-by: Amir Malka <amirm@armosec.io >
* removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function
Signed-off-by: Amir Malka <amirm@armosec.io >
* fix tests
Signed-off-by: Amir Malka <amirm@armosec.io >
* use ScanObject instead of workload identifier
Signed-off-by: Amir Malka <amirm@armosec.io >
* refactor logic after CR
Signed-off-by: Amir Malka <amirm@armosec.io >
---------
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io >
Signed-off-by: Amir Malka <amirm@armosec.io >
Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io >
2023-08-01 14:07:31 +03:00
David Wertenteil
fd3703b21b
Merge pull request #1296 from kubescape/error-handle-for-empty-resource-scan
...
Error handle for empty resource scan
2023-07-31 16:13:42 +03:00
Amir Malka
bbfa5d356a
bump opa-utils, k8s-interface and armoapi-go
...
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-07-31 10:39:03 +03:00
rcohencyberarmor
3280173e95
add error handle when there are no scan to trigger since the directory not contain any relevant scanning files
...
Signed-off-by: rcohencyberarmor <rcohen@armosec.io >
2023-07-24 17:17:06 +03:00
Amir Malka
ea3172eda6
time-based cached policies
...
Signed-off-by: Amir Malka <amirm@armosec.io >
2023-07-10 10:54:56 +03:00
