github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-04-15 06:58:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,948 Commits 23 Branches 553 Tags
d0abfb4ae7b9bb58248ad267e11c175ec124cb4e
Commit Graph
283 Commits
Author SHA1 Message Date
Matthias Bertschy 4bde684d8a fix ossf/scorecard 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-04 21:32:10 +02:00
Yuval Leibovich 374d8be96f Update b-binary-build-and-e2e-tests.yaml 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2024-04-01 13:34:13 +03:00
Matthias Bertschy 9a2d58faa0 fix scorecard with actions/checkout v3.1.0 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-26 07:57:35 +01:00
Matthias Bertschy a2bd504e36 bump actions/checkout to v4 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-25 08:42:47 +01:00
Matthias Bertschy 0ee121a08f fix permissions 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 10:09:42 +01:00
Matthias Bertschy 708bf4477a Fix gitlab (#1639) 
* always use git token if we provide one

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* bump go-git-url for gitlab fix

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* fix action permissions for cosign signature

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 11:02:39 +02:00
Matthias Bertschy c5fa53c00f remove scan_with_exception_to_backend from CI 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-14 17:50:38 +01:00
Matthias Bertschy f05ab61421 add riscv64 files to release step 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-13 15:13:05 +01:00
Matthias Bertschy ad4996e553 speedup golangci-lint-action by skipping caches 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-13 09:04:23 +01:00
David Wertenteil 7fd1396cff Fixed link (#1624) 
* fixed link

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Adding unit tests to PR check

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-04 09:45:50 +02:00
David Wertenteil e87f3399c7 fixed release artifacts 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-01 15:09:25 +02:00
mmmmmmorty 9549e0dcde add github action actor check for pr-scanner 
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-02-29 15:23:27 +01:00
Matthias Bertschy be5efbb3ef correct kubescape path in run-tests 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-20 22:00:49 +01:00
Matthias Bertschy bdefcd2442 use goreleaser for builds 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-09 08:10:05 +01:00
David Wertenteil 4e4a642673 Fixed filepath test (#1577) 
* remove unstable tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* skip tests on windows

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* temp: skip tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-08 10:29:31 +02:00
David Wertenteil 65a557db90 fixed test (#1573) 
* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign-release version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed filepath related tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* failed windows tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed cosign version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update go version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change actor

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Cosign use secret

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 16:26:34 +02:00
Matthias Bertschy 4208ed1ca6 Merge pull request #1456 from kubescape/fix-docker-build 
Fix Docker Build for Kubescape-CLI
 2024-01-03 15:52:12 +01:00
mmmmmmorty a382a2c5a3 add github action actor check for binary-build 
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2023-11-28 14:35:36 +01:00
Daniel Grunberger bd79fe4d8d update go version 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-11-27 09:37:13 +02:00
Yuval Leibovich 4bf3783677 Update a-pr-scanner.yaml 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-26 10:03:10 +02:00
Yuval Leibovich 139a89770f Update a-pr-scanner.yaml 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-26 09:47:59 +02:00
VaibhavMalik4187 16f4849323 Run binary-build job only for kubescape/kubscape 
Added a check before running the binary-build job to ensure that the
owner of the repository is kubescape.

Fixes: https://github.com/kubescape/kubescape/issues/1482

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-22 15:12:36 +05:30
David Wertenteil c781bc3166 remove deprecated tests 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-11-01 16:33:25 +02:00
Matthias Bertschy edfc5d5949 fix docker build for kubescape-cli 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-26 22:39:09 +02:00
Matthias Bertschy df602af7cf add more missing permissions for actions 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-18 12:41:04 +02:00
Matthias Bertschy 6a0a7b84a2 actions needs write on id-token in pr-scanner 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-18 07:28:52 +02:00
Matthias Bertschy b98d80a912 Merge pull request #1421 from kubescape/winwin 
build windows exec without libgit
 2023-10-17 10:09:32 +02:00
Matthias Bertschy 4f2d13b151 fixing GH actions permissions 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-17 09:53:46 +02:00
Matthias Bertschy 0b7d8cd45e remove extra permissions on GH action 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-17 07:36:38 +02:00
Matthias Bertschy 95133af9f4 build windows exec without libgit 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-16 11:16:30 +02:00
Matthias Bertschy 3efa40e808 use go-gitlog as an alternative to git2go (#1393) 
* use go-gitlog as an alternative to git2go

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* set RELEASE to something to avoid failing binary-build step

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-15 15:16:05 +03:00
Matthias Bertschy 143a4d9818 add top level permissions: read-all for openssf 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-13 15:20:52 +02:00
David Wertenteil 2cfd4f3b31 Create scorecard.yml 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-10-12 16:39:38 +03:00
Matthias Bertschy 5968f97583 Merge pull request #1417 from kubescape/fixtests 
drop build tags for tests (will soon deprecate them)
 2023-10-11 17:25:54 +02:00
Matthias Bertschy a52ca0e47d use correct variable for IMAGE_TAG 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-11 16:05:55 +02:00
Matthias Bertschy ed1219baf1 drop build tags for tests (will soon deprecate them) 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-11 14:03:53 +02:00
Matthias Bertschy f073ce0f42 add missing dependency on retag in binary-build 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-11 13:56:50 +02:00
VaibhavMalik4187 8908a4e8cf Removed the Codesee workflow 
Fixes: https://github.com/kubescape/kubescape/issues/1405

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-10-10 07:38:51 +05:30
Matthias Bertschy 5b1aa1501f force docker-build in absence of release label 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-10-09 10:13:53 +02:00
David Wertenteil bbabd5373a Adding check-secret to build image wf 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-10-08 12:18:19 +03:00
rcohencyberarmorandrcohencyberarmor 884af50c0b Support control cluster from cli (#1391) 
* adding operator CLI to kubescape

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* support http requet for trigger in cluster operator

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* create interface for create request payload

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* logs + go mod update

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* docs

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add relevant system tests

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* linter corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* code review corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* remove non relevant system tests - after code review corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* PR corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* PR corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* change log

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* remove from examples

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* change log

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* test correction

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

---------

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
Co-authored-by: rcohencyberarmor <rcohen@armosec.io>
 2023-09-27 16:31:04 +03:00
Matthias Bertschy 3e7a6b516b Separate docker builds for kubescape and kubescape-cli (#1390) 
* create a separate Dockerfile for httphandler

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* add Dockerfile for cli, edit README

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* modify gh action to use new cli Dockerfile

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-09-18 17:13:08 +03:00
Amir Malka c914ab1034 revert e2e test branch (#1373) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2023-09-05 14:31:56 +03:00
Amir Malka 592e0e2b43 Service discovery (#1359) 
* remove hardcoded urls

Signed-off-by: Amir Malka <amirm@armosec.io>

* update

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix test

Signed-off-by: Amir Malka <amirm@armosec.io>

* update providers docs

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix

Signed-off-by: Amir Malka <amirm@armosec.io>

* hardcoded systests branch

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix

Signed-off-by: Amir Malka <amirm@armosec.io>

* added logs

Signed-off-by: Amir Malka <amirm@armosec.io>

* added logs

Signed-off-by: Amir Malka <amirm@armosec.io>

* create config path if it does not exist

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix

Signed-off-by: Amir Malka <amirm@armosec.io>

* fix

Signed-off-by: Amir Malka <amirm@armosec.io>

---------

Signed-off-by: Amir Malka <amirm@armosec.io>
 2023-08-30 09:54:50 +03:00
rcohencyberarmorandrcohencyberarmor 4e48148d40 Support unified configuration (#1304) 
* support scanning scope

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update white list

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* scope empty return control should tested

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update rego scope for system test

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update test + mock

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add comment

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update rego library

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update k8s-interface

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update opa utils - lots of file changes in this commit since armoapi-go bump up in opa-utils

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* move to temp k8s-interface - till PR in k8s-interface repo will approved

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update k8s-interface with released tag

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod in httphandler

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* support unified configuration

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* unitest adjustment

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* config-unified

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* CR corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* remove system test till it will be merged

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add relevant system test

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* remove delete test

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* return config delete system test

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

---------

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
Co-authored-by: rcohencyberarmor <rcohen@armosec.io>
 2023-08-15 10:34:23 +03:00
DRAGON2002andSonglin Jiang 35c593a624 chore: update docs build.ps1 (#1299) 
* chore: update docs build.ps1

Signed-off-by: DRAGON <anantvijay3@gmail.com>

* Fix build.ps1 for CI

Signed-off-by: Songlin Jiang <songlin.jiang@csc.fi>

---------

Signed-off-by: DRAGON <anantvijay3@gmail.com>
Signed-off-by: Songlin Jiang <songlin.jiang@csc.fi>
Co-authored-by: Songlin Jiang <songlin.jiang@csc.fi>
 2023-08-09 09:27:35 +03:00
rcohencyberarmorrcohencyberarmorDavid Wertenteil
 		4c9fec8ef4 Support scanning scope (#1293) 
* support scanning scope

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update white list

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* scope empty return control should tested

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update rego scope for system test

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update test + mock

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add comment

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update rego library

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update k8s-interface

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update opa utils - lots of file changes in this commit since armoapi-go bump up in opa-utils

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* move to temp k8s-interface - till PR in k8s-interface repo will approved

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update k8s-interface with released tag

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go mod in httphandler

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* PR review corrections

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* change test name

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* scanning scope support for framework

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* test/mock adjustments after merge

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add more informative log to the user

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* update go.mod and go.sum of the http handler

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* remove framework just scanning scope not matched to framework config scope

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add system tests to workflow

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

* add system test to github workflow

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>

---------

Signed-off-by: rcohencyberarmor <rcohen@armosec.io>
Signed-off-by: David Wertenteil <dwertent@armosec.io>
Co-authored-by: rcohencyberarmor <rcohen@armosec.io>
Co-authored-by: David Wertenteil <dwertent@armosec.io>
 2023-08-07 19:11:14 +03:00
David Wertenteil 6f07e63d3f Hotfix for version 2.3.8 (#1333) 
* update wf

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed tag

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* build arm64

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: revert release changes

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* wip: adding build-image wf

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* adding platforms to wf

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-08-06 12:23:49 +03:00
David Wertenteil 1a2e16b895 Update PR workflow (#1330) 
* fixed wf call

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* do not wait for pr checks

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed typo

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2023-08-03 17:25:22 +03:00
David Wertenteil 12d7f18b79 Merge pull request #1329 from kubescape/codesee-wf 
Update codesee-arch-diagram.yml
 2023-08-03 14:05:34 +03:00