github/kubescape
1
0
Fork 0
mirror of https://github.com/kubescape/kubescape.git synced 2026-03-06 11:41:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,960 Commits 20 Branches 552 Tags
effc57dfda4634ff0eaec974bb9b8a2b637e8334
Commit Graph

590 Commits

Author SHA1 Message Date
fanqiaojun
bd35d521f2 Fix some comments 
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net>
 2024-04-13 15:42:01 +08:00
Massimiliano Giovagnoli
e0f2944fc8 chore(core/pkg/resultshandling): add control id to pdf output 
Add a new column in the PDF output to reference each control that has
been executed as control ID.

Signed-off-by: Massimiliano Giovagnoli <me@maxgio.it>
 2024-04-10 17:11:30 +02:00
Matthias Bertschy
bda7a17f41 Merge pull request #1658 from needsure/master 
chore: fix function names in comment
 2024-04-09 11:47:07 +02:00
needsure
dee6ed96f8 chore: fix function names in comment 
Signed-off-by: needsure <qinzhipeng@outlook.com>
 2024-04-09 16:33:24 +08:00
Matthias Bertschy
d27284b6f6 remove api calls from scan repo 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-04-09 07:37:58 +02:00
Amir Malka
8a671b9658 fix panic when submitting report 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-19 11:39:26 +02:00
Matthias Bertschy
708bf4477a Fix gitlab (#1639) 
* always use git token if we provide one

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* bump go-git-url for gitlab fix

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

* fix action permissions for cosign signature

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

---------

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-03-18 11:02:39 +02:00
Amir Malka
56a9d9a7f3 fix panic when error is returned from SubmitReport (#1640) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-03-17 14:08:04 +02:00
David Wertenteil
0e0e1ed6fb remove repeating fixes 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-03-11 09:22:03 +02:00
mmmmmmorty
f5e110c212 Fix bug for no matches of yalib in one file mapping 
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-08 10:50:39 +02:00
Alfredo Garcia
fad8f2b272 Add Vulnerability scanning report to the summaryDetails section (#1615) 
* Add Vulnerability scanning report to the summaryDetails section

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

* Updating the opa-utils dependency version

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>

---------

Signed-off-by: Alfredo Garcia <algarcia@vmware.com>
 2024-03-01 14:59:23 +02:00
MMMMMMorty
bc33f10d0a feat: Add the debugging ability for scanning Helm chart (#1215) 
* Fix issue 11552

Signed-off-by: MMMMMMorty <465346562@qq.com>

* Add helm chart mapping node for sarif printer

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add MappingNodes to getWorkloadFromHelmChart

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* clear the code to mappingnode and parseFile

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add input to fixPathsToString

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* add fixs for error message

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add solution for multiple files in one yaml helm chart file

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

* Add parseFile tests

Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>

---------

Signed-off-by: MMMMMMorty <465346562@qq.com>
Signed-off-by: mmmmmmorty <mmmmmmorty@outlook.com>
 2024-03-01 14:31:51 +02:00
David Wertenteil
533edc6d05 Fixing exceptions for regovector objects 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-29 08:42:32 +02:00
Matthias Bertschy
ac6c5ca570 image scan add schema v1 support 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-02-28 10:25:16 +01:00
David Wertenteil
ea7a8bef94 Fix/backlog (#1613) 
* Many minor improvements

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Handle fw scan error

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Remove prometheus docs

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fix workload threshold

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed units

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-26 22:42:41 +02:00
David Wertenteil
05903e34ff Handle unknown fw 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 17:05:38 +02:00
David Wertenteil
d01a7977ae Remove "%" from the print 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-02-22 14:26:51 +02:00
YiscahLevySilas1
1b59b6a35f fix backslashes 
Signed-off-by: YiscahLevySilas1 <yiscahls@armosec.io>
 2024-01-16 11:59:28 +02:00
Matthias Bertschy
6a6e4181bd fetch Rekor before cosign validation 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2024-01-15 14:33:39 +01:00
Amir Malka
4b8786bcaa checking for compatible policy rules before pulling k8s resources; failing to pull some k8s resource should not fail the entire scan (#1578) 
Signed-off-by: Amir Malka <amirm@armosec.io>
 2024-01-09 09:44:45 +02:00
David Wertenteil
3634499e11 Fixed filepath test (#1576) 
* remove unstable tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* skip tests on windows

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 23:00:16 +02:00
David Wertenteil
a0e6ebe0e0 filepath test 
Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 18:00:45 +02:00
David Wertenteil
65a557db90 fixed test (#1573) 
* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign-release version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed filepath related tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* failed windows tests

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed cosign version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update go version

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* fixed test

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* change actor

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* Cosign use secret

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

* update cosign

Signed-off-by: David Wertenteil <dwertent@armosec.io>

---------

Signed-off-by: David Wertenteil <dwertent@armosec.io>
 2024-01-07 16:26:34 +02:00
VaibhavMalik4187
155889a479 Added missing tests for locationresolver 
Wrote new tests to cover the unhandled statements in the
`NewFixPathLocationResolver` and `ResolveLocation` functions.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-12-23 17:23:07 +05:30
Matthias Bertschy
1b260f60cc patch GHSA-3f2q-6294-fmq5 by switching to chainguard's fork 
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>
 2023-12-11 07:19:05 +01:00
VaibhavMalik4187
de2e86dc6e Fixed crash when running the scan command 
Updated the `getSortPackageScores` function to fix the crash in the scan
command.

Fixes: https://github.com/kubescape/kubescape/issues/1553

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-30 15:12:33 +05:30
Yuval Leibovich
e4e795c6dc Merge pull request #1548 from kubescape/remove-armoBuiltin 
Removal of "armoBuiltin" attribute from JSON files
 2023-11-27 16:17:35 +02:00
VaibhavMalik4187
d1b78856ca Added tests for versioncheck and printer packages 
Wrote new tests for the following files:
- junit.go
- pdf.go
- versioncheck.go

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 18:25:34 +05:30
Matthias Bertschy
81ba550043 Merge pull request #1537 from VaibhavMalik4187/printer-tests-continued 
Addition of Tests for the PrettyPrinter Package
 2023-11-27 11:11:15 +01:00
Matthias Bertschy
8e5d8e5c96 Merge pull request #1539 from VaibhavMalik4187/prettyprinter/utils 
Performance Enhancements and Test Additions in prettyprinter/utils.go
 2023-11-27 11:08:16 +01:00
Matthias Bertschy
5789f1f0fa Merge pull request #1542 from VaibhavMalik4187/imageprinter-tests 
Added new tests in the imagewriter package
 2023-11-27 11:07:30 +01:00
Matthias Bertschy
9a523f4a01 Merge pull request #1545 from VaibhavMalik4187/configurationprinter-tests 
Enhancements and Tests for Configuration Printer
 2023-11-27 11:06:38 +01:00
Matthias Bertschy
fb3357fba4 Merge pull request #1546 from kubescape/set-default-format 
Set default format
 2023-11-27 11:02:49 +01:00
Yuval Leibovich
d1606c5e39 Update processorhandler_test.go 
Signed-off-by: Yuval Leibovich <89763818+yuleib@users.noreply.github.com>
 2023-11-27 11:46:50 +02:00
Daniel Grunberger
08f3756608 fix test 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-11-27 09:25:07 +02:00
Daniel Grunberger
7cda7346b7 set default 
Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io>
 2023-11-27 08:56:33 +02:00
VaibhavMalik4187
8cd0bddf6f Enhancements and tests for configurationprinter 
Wrote new tests for `categorytable` and `frameworkscan`

Refactored the `shortFormatRow` function for:
- Imporved readability
- Consistency
- Improve code modularity
- Encapsulation: The formatted string construction is encapsulated
  within the function, maintaining code modularity and separation of
  concerns.

Added the `MockISeverityCounters` mock struct to test the
`renderSeverityCountersSummary` function.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 11:35:24 +05:30
VaibhavMalik4187
8fa7fc922d Added tests for the prettyprinter package 
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 03:46:45 +05:30
VaibhavMalik4187
6a2e48ac74 Performance enhancements in utils.go 
Improvments:
1. filterCVEsBySeverities
  - This approach is faster than iterating over the severities slice
    for each CVE. The map is created in advance, eliminating the
    need for repeated string comparisons.

2. getSortPackageScores
  - Avoids unnecessary map lookups by creating a slice of
    imageprinter.PackageScore pointers.

3. getSortedCVEsBySeverity
  - Avoiding Map Lookups
  - Efficient Sorting
  - Optimized Output

Added tests for tableprinter/utils

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 03:15:20 +05:30
VaibhavMalik4187
0bfbb87285 Added tests in imageprinter package 
Added tests for the following functions:
- `generateTable`
- `NewTableWriter`
- `PrintImageScanningTable`

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 02:33:15 +05:30
Matthias Bertschy
491ed09f6c Merge pull request #1536 from VaibhavMalik4187/printer/pdf-tests 
Enhancement and Test Suite for Printer Functions
 2023-11-26 22:02:03 +01:00
Matthias Bertschy
658855aaee Merge pull request #1540 from mohaidoss/enhancement/yamlfile_validation 
Enhancement of YAML File Validation and Corresponding Test Cases
 2023-11-26 21:55:53 +01:00
VaibhavMalik4187
e4477eaac4 Fixed invalid input bug, added tests for printers 
Added tests in the jsonprinter.go, junit.go pdf.go prometheus.go files
and updated the `Score` functions to handle invalid scores.

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-27 01:25:46 +05:30
Mehdi Moussaif
d653530ba2 Add YAML validation 
Signed-off-by: Mehdi Moussaif <m.moussaif42@gmail.com>
 2023-11-26 16:34:37 +01:00
Mehdi Moussaif
5242e8c4b0 Add test cases for loading host sensor from file 
Signed-off-by: Mehdi Moussaif <m.moussaif42@gmail.com>
 2023-11-26 16:34:26 +01:00
Mehdi Moussaif
efd2f7e77f Adding tests for core/pkg/resourcesprioritization 
Signed-off-by: Mehdi Moussaif <m.moussaif42@gmail.com>
 2023-11-26 14:56:12 +01:00
Mehdi Moussaif
16c632950d SupportedKinds refactored 
Signed-off-by: Mehdi Moussaif <m.moussaif42@gmail.com>
 2023-11-26 14:43:12 +01:00
Matthias Bertschy
fdeadda704 Merge pull request #1534 from VaibhavMalik4187/printer/prometheusutils-tests 
Added Test Suite for Prometheus Utilities
 2023-11-26 11:58:47 +01:00
VaibhavMalik4187
770f660db5 Enhancements and Test Suite for resourcetable 
Wrote new tests for the functions in the resourcetable.go file.

Enhancements:
1. `generateResourceHeader`:
  - Dynamic Header Length
  - Efficient Header Creation
  - Clearer Code Structure

2. `appendFailedPathsIfNotInPaths`:
  - Create a set to efficiently check if a failed path already exists in
    the paths slice
  - Append failed paths if they are not already present

Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-26 15:50:40 +05:30
VaibhavMalik4187
f54c2ee822 Added Test Suite for prometheusutils 
Signed-off-by: VaibhavMalik4187 <vaibhavmalik2018@gmail.com>
 2023-11-26 15:00:15 +05:30