Teppei Fukuda
65b8a40d0d
chore(deps): bump golangci-lint to v1.58.2 ( #6719 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
2024-05-20 06:35:34 +00:00
simar7
37da98df45
feat(misconf): Use updated terminology for misconfiguration checks ( #6476 )
...
Signed-off-by: Simar <simar@linux.com >
2024-05-02 18:16:17 +00:00
Teppei Fukuda
94d6e8ced6
refactor: replace zap with slog ( #6466 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com >
2024-04-11 18:59:09 +00:00
Jeff Rescignano
f23ed77598
feat(misconf): Support private registries for misconf check bundle ( #6327 )
2024-04-01 05:45:58 +00:00
Nikita Pivkin
87a9aa60d1
feat(aws): quiet flag support ( #6331 )
2024-03-29 01:11:27 +00:00
simar7
14adbb4464
refactor(deps): Merge defsec into trivy ( #6109 )
...
Signed-off-by: Simar <simar@linux.com >
2024-02-16 08:31:32 +00:00
simar7
13362233c8
feat(misconf): Expose misconf engine debug logs with --debug option ( #5550 )
...
Signed-off-by: Simar <simar@linux.com >
2023-11-16 02:29:38 +00:00
simar7
e7f6a5c805
refactor(misconf): Update refactored dependencies ( #5245 )
...
Signed-off-by: Simar <simar@linux.com >
2023-11-09 02:24:52 +00:00
Teppei Fukuda
3be5e6b242
chore: enable go-critic ( #5302 )
...
* chore: enable gocritic
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* refactor: fix lint issues
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* test: return true for latest versions
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* chore(lint): enforce map and slice styles
Signed-off-by: knqyf263 <knqyf263@gmail.com >
---------
Signed-off-by: knqyf263 <knqyf263@gmail.com >
2023-10-02 08:33:21 +00:00
simar7
11618c9408
feat(misconf): Support custom URLs for policy bundle ( #4834 )
...
* feat(misconf): Support custom URLs for policy bundle
This PR adds support for custom policy bundles to be specified
with a flag `--policy-bundle-url` as an option to Trivy.
Fixes: https://github.com/aquasecurity/trivy/issues/4672
Signed-off-by: Simar <simar@linux.com >
* update docs
Signed-off-by: Simar <simar@linux.com >
* rename flag to `--policy-bundle-repository`
Signed-off-by: Simar <simar@linux.com >
* fix field
* rebase and update docs
Signed-off-by: Simar <simar@linux.com >
* set policyBundleRepo on client
Signed-off-by: Simar <simar@linux.com >
---------
Signed-off-by: Simar <simar@linux.com >
2023-07-26 08:45:49 +00:00
simar7
a7bd7bb65f
feat(misconf): Add support for independently enabling libraries ( #4070 )
...
* feat(misconf): Add support for independently enabling libraries
Implements: https://github.com/aquasecurity/trivy/issues/4181
Signed-off-by: Simar <simar@linux.com >
* update tests
Signed-off-by: Simar <simar@linux.com >
* fix lint
Signed-off-by: Simar <simar@linux.com >
* fix tests
Signed-off-by: Simar <simar@linux.com >
* update defsec
Signed-off-by: Simar <simar@linux.com >
* fix test
Signed-off-by: Simar <simar@linux.com >
---------
Signed-off-by: Simar <simar@linux.com >
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2023-07-23 09:44:59 +00:00
simar7
4bc8d29c15
feat(misconf): Support custom data for rego policies for cloud ( #4745 )
...
* feat(misconf): Support custom data for cloud policies
Signed-off-by: Simar <simar@linux.com >
* use policyfs
Signed-off-by: Simar <simar@linux.com >
* refactor to reduce cyclomatic complexity
Signed-off-by: Simar <simar@linux.com >
* bump defsec
* update docs
Signed-off-by: Simar <simar@linux.com >
* update test assertion
Signed-off-by: Simar <simar@linux.com >
* update test
Need this as OPA is currently broken on Windows
https://github.com/open-policy-agent/opa/issues/4521
Signed-off-by: Simar <simar@linux.com >
* fix data path
* fix(mapfs): convert volume names into dirs
* revert creating temp dirs
---------
Signed-off-by: Simar <simar@linux.com >
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com >
2023-07-17 12:34:20 +00:00
Gio Rodriguez
f251dfc5ce
fix(aws): Adding a fix for update-cache flag that is not applied on AWS scans. ( #3619 )
...
* adding a fix for update-cache that was not applied on AWS scans.
* removing unneeded code
---------
Co-authored-by: Gio Rodriguez <giovanni.rodriguez@aquasec.com >
2023-02-16 22:49:20 +02:00
Teppei Fukuda
cb5af0b33b
feat(image): add support for Docker CIS Benchmark ( #3496 )
...
Co-authored-by: chenk <hen.keinan@gmail.com >
2023-01-31 07:31:59 +02:00
simar7
a1d4427c8b
feat(misconf): Fetch policies from OCI registry ( #3015 )
...
Signed-off-by: Simar <simar@linux.com >
2023-01-15 13:37:04 +02:00
simar7
a3eece4fef
feat(misconf): Add compliance check support ( #3130 )
...
Signed-off-by: Simar <simar@linux.com >
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-12-07 22:42:59 +02:00
Liam Galvin
babd7e7526
feat(aws): Custom rego policies for AWS scanning ( #2994 )
2022-10-06 12:51:45 +03:00
Liam Galvin
b259b25ce4
feat: Add AWS Cloud scanning ( #2493 )
...
* feat: Added AWS Cloud scanning
Co-authored-by: Owen Rumney <owen.rumney@aquasec.com >
2022-08-11 14:59:32 +01:00
