Commit Graph

3594 Commits

Author SHA1 Message Date
DmitriyLewen
e988fbfebf docs: mage docs:generate 2025-06-27 11:54:43 +06:00
DmitriyLewen
2da74d6aaa chore(deps): bump trivy-db 2025-06-27 11:54:31 +06:00
DmitriyLewen
b8853b242f test: refactor IsVulnerable testcases 2025-06-27 11:49:18 +06:00
DmitriyLewen
50d153b495 chore: add comment for IsSupportedVersion 2025-06-27 11:18:55 +06:00
DmitriyLewen
9b35e6b11f Merge branch 'main' into '(feat/rootio-support' 2025-06-27 11:13:17 +06:00
DmitriyLewen
71ab2b8926 test: add tests for rootio 2025-06-26 19:06:14 +06:00
DmitriyLewen
978276ddd0 refactor: use AND logic for constraint.go 2025-06-26 19:04:32 +06:00
knqyf263
3b54435520 docs: add Root.io documentation
- Add Root.io documentation in others directory
- Update vulnerability scanner data sources to include Root.io
- Add Root.io to mkdocs navigation
- Update others index to include Root.io images
2025-06-26 12:26:45 +04:00
knqyf263
2ed3d7e6c2 refactor: replace mock VulnSrc with trivy-db integration
- Remove mock VulnSrc implementation
- Use real trivy-db rootio.VulnSrc
- Update go.mod to use trivy-db fork with Root.io support
- Fix FixedVersion field mapping to use PatchedVersions
2025-06-26 12:05:55 +04:00
Yuta Tokoi
367564a3be feat(ubuntu): add end of life date for Ubuntu 25.04 (#9077) 2025-06-26 07:58:29 +00:00
knqyf263
1885e35fa6 fix: resolve linter issues
- Fix empty error handling blocks in vulnsrc.go by properly returning errors
- Add missing newline at end of driver.go file
- Fix import order in provider_test.go as flagged by linter
- All lint checks now pass with 0 issues
2025-06-25 18:52:34 +04:00
knqyf263
4d85a82749 fix: correct Alpine Root.io pattern and improve tests
- Fix Alpine Root.io pattern from 'roo7' to '-r\d007\d' (e.g., -r10071, -r20072)
- Change Debian/Ubuntu pattern from 'root.io' to '.root.io' using regex
- Unify pattern matching using single hasPackageWithPattern function with precompiled regex
- Simplify tests to only test public Provider function using rootio_test package
- Remove redundant private function tests as requested
- Fix import sorting in test file
2025-06-25 18:49:28 +04:00
knqyf263
680358743f refactor: improve Root.io scanner implementation
- Simplify Scanner struct by removing baseOS field (only used in NewScanner)
- Add logger field with Root.io prefix for better debugging
- Improve constraint checking logic to use VulnerableVersions array
- Update isVulnerable method to handle constraint-based vulnerability detection
- Add proper error handling and logging in constraint validation
- Enhance comments and documentation
2025-06-25 18:40:17 +04:00
knqyf263
c902f4ba90 feat: implement realistic VulnSrc for Root.io
- Add realistic mockVulnSrc that integrates with existing OS-specific VulnSrc implementations
- Fetch advisories from original distributors (Debian, Ubuntu, Alpine)
- Transform fixed versions to constraint format (VulnerableVersions, PatchedVersions)
- Merge advisories from base OS and Root.io sources
- Use actual trivy-db components for more realistic behavior
2025-06-25 18:39:46 +04:00
knqyf263
44f068caa2 feat: add root.io support for container image scanning
- Add version constraint library supporting 5 operators (>, <, >=, <=, ==, !=)
- Implement DriverProvider pattern for dynamic driver selection
- Add Root.io environment detection based on package version suffixes
- Support Debian/Ubuntu (root.io suffix) and Alpine (roo7 suffix)
- Add constraint-based vulnerability detection using version ranges
- Include comprehensive tests for all components
2025-06-25 17:35:59 +04:00
knqyf263
317fa2fe85 feat: add version constraint library for Root.io support
- Add constraint.go with support for 5 operators (>, <, >=, <=, ==, !=)
- Add compare.go with DEBComparer and APKComparer implementations
- Support both comma and space separated constraints
- Return errors for empty constraints/versions for security
- Comprehensive test coverage with version_test package
- All linter issues resolved
2025-06-25 15:22:03 +04:00
Teppei Fukuda
3adfd988d1 refactor: centralize HTTP transport configuration (#9058)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
2025-06-24 17:43:58 +00:00
Teppei Fukuda
cd7c595e4a test: include integration tests in linting and fix all issues (#9060) 2025-06-24 13:09:15 +00:00
dependabot[bot]
6bf7ac41fb chore(deps): bump the common group across 1 directory with 26 updates (#9063)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
2025-06-24 12:25:20 +00:00
kennyk
5aade698c7 feat(java): dereference all maven settings.xml env placeholders (#9024) 2025-06-20 11:39:23 +00:00
simar7
99c5151d6e fix(misconf): reduce log noise on incompatible check (#9029) 2025-06-20 05:57:44 +00:00
Luke Young
371b8cc02f fix(misconf): .Config.User always takes precedence over USER in .History (#9050)
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2025-06-19 09:10:45 +00:00
Teppei Fukuda
3f41ffa5b8 chore(deps): update Docker to v28.2.2 and fix compatibility issues (#9037) 2025-06-19 07:44:06 +00:00
simar7
f23d2f66c1 docs(misconf): simplify misconfiguration docs (#9030) 2025-06-17 22:23:42 +00:00
Nikita Pivkin
a58c36de12 fix(misconf): move disabled checks filtering after analyzer scan (#9002)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-17 05:39:27 +00:00
Teppei Fukuda
64aea25e2a docs: add PR review policy for maintainers (#9032) 2025-06-16 07:31:59 +00:00
Teppei Fukuda
198789a07b fix(sbom): remove unnecessary OS detection check in SBOM decoding (#9034) 2025-06-16 04:55:30 +00:00
Nikita Pivkin
ae85c40858 test: improve and extend tests for iac/adapters/arm (#9028)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-14 05:37:53 +00:00
afdesk
7cfdbf0cd9 chore: bump up Go version to 1.24.4 (#9031) 2025-06-12 08:45:52 +00:00
Owen Rumney
19efa9fd37 feat(cli): add version constraints to annoucements (#9023) 2025-06-12 08:09:39 +00:00
Nikita Pivkin
40d017b67d fix(misconf): correct Azure value-to-time conversion in AsTimeValue (#9015)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-11 06:42:11 +00:00
DmitriyLewen
87118a0ec4 feat(ubuntu): add eol date for 20.04-ESM (#8981) 2025-06-10 07:39:34 +00:00
DmitriyLewen
87fda76f38 fix(report): don't panic when report contains vulns, but doesn't contain packages for table format (#8549) 2025-06-10 05:22:35 +00:00
DmitriyLewen
875ec3a9d2 fix(nodejs): correctly parse packages array of bun.lock file (#8998) 2025-06-09 11:52:30 +00:00
Nikita Pivkin
454b894098 refactor: use strings.SplitSeq instead of strings.Split in for-loop (#8983)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2025-06-09 10:01:53 +00:00
Wolfgang Ellsässer
15f421faf6 docs: change --disable-metrics to --disable-telemetry in example (#8999) (#9003)
Co-authored-by: wollomatic <wollomatic@users.noreply.github.com>
2025-06-09 08:30:24 +00:00
Jason Swank
57801d0324 feat(misconf): add OpenTofu file extension support (#8747) 2025-06-07 02:51:55 +00:00
Nikita Pivkin
b91284ac0d refactor(misconf): set Trivy version by default in Rego scanner (#9001)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-06 22:02:46 +00:00
Itay Shakury
e1beba2f29 docs: fix assets with versioning (#8996) 2025-06-05 19:07:54 +00:00
Itay Shakury
5d050ce274 docs: add partners page (#8988) 2025-06-05 13:20:55 +00:00
Chris Novakovic
94b12a8cd4 chore(alpine): add EOL date for Alpine 3.22 (#8992) 2025-06-05 13:02:56 +00:00
DmitriyLewen
4ed78e39af fix: don't show corrupted trivy-db warning for first run (#8991) 2025-06-05 11:00:16 +00:00
Aayan Mateen
a61978809b Update installation.md (#8979) 2025-06-04 06:29:28 +00:00
Nikita Pivkin
65e155fdaf feat(misconf): normalize CreatedBy for buildah and legacy docker builder (#8953)
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
2025-06-04 05:31:07 +00:00
afdesk
521be3a178 chore(k8s): update comments with deprecated command format (#8964) 2025-06-03 06:54:45 +00:00
DmitriyLewen
14d2b83d4b chore: fix errors and typos in docs (#8963) 2025-06-03 05:36:44 +00:00
Owen Rumney
ef5f8de8da fix: Add missing version check flags (#8951)
Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2025-06-02 07:45:34 +00:00
Romain Geissler @ Amadeus
48258a701a feat(redhat): Add EOL date for RHEL 10. (#8910) 2025-06-02 06:09:20 +00:00
simar7
b813527449 fix: Correctly check for semver versions for trivy version check (#8948) 2025-05-30 17:20:18 +00:00
Naimuddin Shaik
c29bb21973 refactor(server): change custom advisory and vulnerability data types fr… (#8923)
Co-authored-by: knqyf263 <knqyf263@gmail.com>
2025-05-30 04:54:11 +00:00