chenk
e739ab8506
feat: support --skip-images scanning flag ( #6334 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2024-05-02 11:49:39 +00:00
Teppei Fukuda
94d6e8ced6
refactor: replace zap with slog ( #6466 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com >
2024-04-11 18:59:09 +00:00
Teppei Fukuda
ab74caa87f
refactor(sbom): use intermediate representation for SPDX ( #6310 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2024-03-18 08:52:11 +00:00
Teppei Fukuda
8fcef352b3
refactor(sbom): add intermediate representation for BOM ( #6240 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com >
2024-03-12 06:56:10 +00:00
guangwu
3d2f583ecd
fix: typo function name and comment optimization ( #6200 )
...
Signed-off-by: guoguangwu <guoguangwu@magic-shield.com >
2024-03-04 14:24:40 +00:00
chenk
cf0f0d00c2
feat(k8s): rancher rke2 version support ( #5988 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2024-02-22 04:35:47 +00:00
Teppei Fukuda
d0c81e23c4
feat(vex): add PURL matching for CSAF VEX ( #5890 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
2024-01-10 06:37:19 +00:00
Juan Ariza Toledano
1f0d6290c3
feat(vuln): include pkg identifier on detected vulnerabilities ( #5439 )
...
Signed-off-by: juan131 <jariza@vmware.com >
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com >
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io >
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2023-12-27 07:54:56 +00:00
chenk
0ff5f96bb7
feat: filter k8s core components vuln results ( #5713 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-12-05 07:17:51 +00:00
chenk
05df24477e
fix: fail k8s resource scanning ( #5529 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-11-08 05:39:53 +00:00
DmitriyLewen
772d1d08f8
fix(sbom): Use UUID as BomRef for packages with empty purl ( #5448 )
2023-11-06 03:29:13 +00:00
chenk
f3de7bc3be
feat: scan vulns on k8s core component apps ( #5418 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-11-01 09:31:48 +00:00
Teppei Fukuda
cbbd1ce1f0
feat(k8s): add support for vulnerability detection ( #5268 )
...
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Signed-off-by: chenk <hen.keinan@gmail.com >
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
Co-authored-by: chenk <hen.keinan@gmail.com >
2023-10-14 12:32:55 +00:00
Alexandr Hacicheant
00d9c4666f
feat: added Metadata into the k8s resource's scan report ( #5322 )
2023-10-05 08:16:50 +00:00
Teppei Fukuda
3be5e6b242
chore: enable go-critic ( #5302 )
...
* chore: enable gocritic
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* refactor: fix lint issues
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* test: return true for latest versions
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* chore(lint): enforce map and slice styles
Signed-off-by: knqyf263 <knqyf263@gmail.com >
---------
Signed-off-by: knqyf263 <knqyf263@gmail.com >
2023-10-02 08:33:21 +00:00
Teppei Fukuda
44656f2853
refactor: use defined types ( #5225 )
...
* refactor: replace string with defined types
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* chore: add gci
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* fix(purl): not confuse trivy type with purl type
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* test: fix cyclonedx fixture
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* fix(template): cast TargetType to string
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* chore: bump TinyGo to v0.29.0
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* test: change license to licence
Signed-off-by: knqyf263 <knqyf263@gmail.com >
* use `analyzer.TypeGoMod` for gomod analyzer
* ignore `licence` for misspell linter
---------
Signed-off-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2023-09-22 10:44:39 +00:00
chenk
69ea5bf70e
feat: improve kbom component name ( #5058 )
...
* feat: improve component name - merge
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: improve component name
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: improve component name
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: improve component name
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: improve component name
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: improve component name
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: improve component name
Signed-off-by: chenk <hen.keinan@gmail.com >
---------
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-08-31 07:35:47 +00:00
chenk
3114c87e60
fix: k8s private registries support ( #5021 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-08-21 12:00:04 +00:00
chenk
63cd41d20d
feat: k8s private registries support ( #4987 )
...
* feat: k8s private registries support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: k8s private registries support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: k8s private registries support
Signed-off-by: chenk <hen.keinan@gmail.com >
* fix: add non empty credential update
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: k8s private registries support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: k8s private registries support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: k8s private registries support
Signed-off-by: chenk <hen.keinan@gmail.com >
---------
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-08-20 06:07:30 +00:00
Teppei Fukuda
20c2246a61
fix(report): close the file ( #4842 )
...
* fix(report): close the file
* refactor: add the format type
* fix: return errors in version printing
* fix: lint issues
* fix: do not fail on bogus cache dir
---------
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2023-07-23 13:37:18 +00:00
chenk
85c681d443
feat: kbom and cyclonedx v1.5 spec support ( #4708 )
...
* feat: kbom and cyclonedx v1.5 spec support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kbom and cyclonedx v1.5 spec support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kbom and cyclonedx v1.5 spec support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: feat: kbom and cyclonedx 1.5 spec support
Signed-off-by: chenk <hen.keinan@gmail.com >
* fix: unmarshal bom on v1.5 return invalid specification version
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: cyclonedx-1.5 spec support
Signed-off-by: chenk <hen.keinan@gmail.com >
---------
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-06-25 13:47:06 +00:00
chenk
e3d10d2512
feat: cyclondx sbom custom property support ( #4688 )
...
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: custom property support
Signed-off-by: chenk <hen.keinan@gmail.com >
---------
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-06-22 08:33:27 +00:00
chenk
35c4262d0b
feat(k8s): cyclonedx kbom support ( #4557 )
...
* feat: cyclonedx kbom support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: cyclonedx kbom support
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* chore: update sum db
Signed-off-by: chenk <hen.keinan@gmail.com >
* chore: update sum db
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* chore: update sumdb
Signed-off-by: chenk <hen.keinan@gmail.com >
* chore: update sumdb
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
* feat: kubernetes bill of materials
Signed-off-by: chenk <hen.keinan@gmail.com >
---------
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-06-19 10:48:26 +00:00
Teppei Fukuda
e1361368a1
refactor: enable cases where return values are not needed in pipeline ( #4443 )
2023-05-22 08:11:24 +03:00
chenk
090a00e717
feat: unified k8s scan resources ( #4188 )
2023-05-09 16:52:02 +03:00
chenk
a00d00eb94
fix(k8s): fix quiet flag ( #4120 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-04-25 14:46:37 +03:00
chenk
2c3b60f4c9
fix(k8s): quit support on k8s progress bar ( #4021 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2023-04-13 17:30:54 +03:00
chenk
234a360a7a
feat: k8s parallel processing ( #3693 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2023-03-20 13:34:38 +02:00
Teppei Fukuda
fb0d8f3f30
feat(image): scan misconfigurations in image config ( #3437 )
2023-01-30 04:48:29 +02:00
Teppei Fukuda
e1076085d9
refactor: rename security-checks to scanners ( #3467 )
2023-01-23 16:53:06 +02:00
chenk
f115895d30
fix: present control status instead of compliance percentage in compliance report ( #3181 )
...
Signed-off-by: chenk <hen.keinan@gmail.com >
2022-11-20 13:46:16 +02:00
chenk
18581f345b
feat: compliance reports ( #2951 )
2022-10-25 19:42:01 +03:00
Jose Donizetti
9b0e9794cb
feat: add k8s components ( #2589 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-10-24 14:51:02 +03:00
Denys Mazhar
84677903a6
fix(k8s): no error logged if trivy can't get docker image in kubernetes mode ( #2521 )
...
* Enable k8s logging and increase log level of the image scan errors
* Rework errors reporting
* Rework GetErrors method into printErrors
Print errors during report writing
* Increase log level for scan errors logging
2022-07-21 15:34:47 -03:00
Owen Rumney
a3a66df007
feat: Add support for license scanning ( #2418 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
2022-07-13 22:36:41 +03:00
Teppei Fukuda
5b7e0a858d
refactor: move from urfave/cli to spf13/cobra ( #2458 )
...
Co-authored-by: afdesk <work@afdesk.com >
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com >
2022-07-09 19:40:31 +03:00
chenk
776ef1a31e
feat: rbac support k8s sub-command ( #2339 )
2022-06-23 13:49:14 +03:00
Jose Donizetti
546e7bd6b1
BREAKING(k8s): change CLI API ( #2186 )
2022-06-15 10:41:18 +03:00
