mirror of
https://github.com/kubescape/kubescape.git
synced 2026-04-15 06:58:11 +00:00
* phase-1 Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> * factory Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> * wip: feat(cli): add an image scanning command Add a CLI command that launches an image scan. Does not scan images yet. Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * wip: feat: add image scanning service Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * chore: include dependencies Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * wip: adjust image scanning service Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * wip: feat: use scanning service in CLI Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * use iface Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> * touches Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> * continue Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> * add cmd Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> * support single workload scan Signed-off-by: Amir Malka <amirm@armosec.io> * fix conflict Signed-off-by: Amir Malka <amirm@armosec.io> * identifiers * go mod * feat(imagescan): add an image scanning command This commit adds a CLI command and an associated package that scan images for vulnerabilities. Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> feat(imagescan): fail on exceeding the severity threshold Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * chore(imagescan): include dependencies This commit adds the dependencies necessary for image scanning. Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * chore(imagescan): add dependencies to httphandler Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * added unit tests Signed-off-by: Amir Malka <amirm@armosec.io> * merge * more * integrate img scan * added unit tests Signed-off-by: Amir Malka <amirm@armosec.io> * more refactoring Signed-off-by: Amir Malka <amirm@armosec.io> * add scanned workload reference to opasessionobj Signed-off-by: Amir Malka <amirm@armosec.io> * fix GetWorkloadParentKind Signed-off-by: Amir Malka <amirm@armosec.io> * remove namespace argument from pullSingleResource, using field selector instead Signed-off-by: Amir Malka <amirm@armosec.io> * removed designators (unused) field from PolicyIdentifier, and designators argument from GetResources function Signed-off-by: Amir Malka <amirm@armosec.io> * changes * changes * fixes * changes * feat(imagescan): add an image scanning command This commit adds a CLI command and an associated package that scan images for vulnerabilities. Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> feat(imagescan): fail on exceeding the severity threshold Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * chore(imagescan): include dependencies This commit adds the dependencies necessary for image scanning. Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * chore(imagescan): add dependencies to httphandler Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * chore(imagescan): create vuln db with dedicated function Remove commented out code, too. Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * docs(imagescan): provide package-level docs Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> * finish merge * image scan tests * continue * fixes * refactor * rm duplicate * start fixes * update gh actions Signed-off-by: David Wertenteil <dwertent@armosec.io> * pr fixes * fix test * improvements --------- Signed-off-by: Daniel Grunberger <danielgrunberger@armosec.io> Signed-off-by: Vlad Klokun <vklokun@protonmail.ch> Signed-off-by: Amir Malka <amirm@armosec.io> Signed-off-by: David Wertenteil <dwertent@armosec.io> Co-authored-by: Daniel Grunberger <danielgrunberger@armosec.io> Co-authored-by: Vlad Klokun <vklokun@protonmail.ch> Co-authored-by: Amir Malka <amirm@armosec.io> Co-authored-by: David Wertenteil <dwertent@armosec.io>
87 lines
2.2 KiB
Go
87 lines
2.2 KiB
Go
package printer
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"github.com/anchore/grype/grype/presenter"
|
|
"github.com/anchore/grype/grype/presenter/models"
|
|
logger "github.com/kubescape/go-logger"
|
|
"github.com/kubescape/go-logger/helpers"
|
|
"github.com/kubescape/kubescape/v2/core/cautils"
|
|
"github.com/kubescape/kubescape/v2/core/pkg/resultshandling/printer"
|
|
)
|
|
|
|
const (
|
|
jsonOutputFile = "report"
|
|
jsonOutputExt = ".json"
|
|
)
|
|
|
|
var _ printer.IPrinter = &JsonPrinter{}
|
|
|
|
type JsonPrinter struct {
|
|
writer *os.File
|
|
}
|
|
|
|
func NewJsonPrinter() *JsonPrinter {
|
|
return &JsonPrinter{}
|
|
}
|
|
|
|
func (jp *JsonPrinter) SetWriter(ctx context.Context, outputFile string) {
|
|
if strings.TrimSpace(outputFile) == "" {
|
|
outputFile = jsonOutputFile
|
|
}
|
|
if filepath.Ext(strings.TrimSpace(outputFile)) != jsonOutputExt {
|
|
outputFile = outputFile + jsonOutputExt
|
|
}
|
|
jp.writer = printer.GetWriter(ctx, outputFile)
|
|
}
|
|
|
|
func (jp *JsonPrinter) Score(score float32) {
|
|
fmt.Fprintf(os.Stderr, "\nOverall compliance-score (100- Excellent, 0- All failed): %d\n", cautils.Float32ToInt(score))
|
|
|
|
}
|
|
|
|
func (jp *JsonPrinter) ActionPrint(ctx context.Context, opaSessionObj *cautils.OPASessionObj, imageScanData []cautils.ImageScanData) {
|
|
var err error
|
|
if opaSessionObj != nil {
|
|
err = printConfigurationsScanning(opaSessionObj, ctx, jp)
|
|
} else if imageScanData != nil {
|
|
err = jp.PrintImageScan(ctx, imageScanData[0].PresenterConfig)
|
|
} else {
|
|
err = fmt.Errorf("failed to write results, no data provided")
|
|
}
|
|
|
|
if err != nil {
|
|
logger.L().Ctx(ctx).Error("failed to write results", helpers.Error(err))
|
|
return
|
|
}
|
|
|
|
printer.LogOutputFile(jp.writer.Name())
|
|
}
|
|
|
|
func printConfigurationsScanning(opaSessionObj *cautils.OPASessionObj, ctx context.Context, jp *JsonPrinter) error {
|
|
r, err := json.Marshal(FinalizeResults(opaSessionObj))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
_, err = jp.writer.Write(r)
|
|
return err
|
|
}
|
|
|
|
func (jp *JsonPrinter) PrintImageScan(ctx context.Context, scanResults *models.PresenterConfig) error {
|
|
presenterConfig, _ := presenter.ValidatedConfig("json", "", false)
|
|
pres := presenter.GetPresenter(presenterConfig, *scanResults)
|
|
|
|
return pres.Present(jp.writer)
|
|
}
|
|
|
|
func (jp *JsonPrinter) PrintNextSteps() {
|
|
|
|
}
|