mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-23 07:29:00 -08:00
20c2246a61
* fix(report): close the file * refactor: add the format type * fix: return errors in version printing * fix: lint issues * fix: do not fail on bogus cache dir --------- Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
49 lines
1.6 KiB
Go
49 lines
1.6 KiB
Go
package commands
|
|
|
|
import (
|
|
"context"
|
|
|
|
"golang.org/x/exp/slices"
|
|
"golang.org/x/xerrors"
|
|
|
|
"github.com/aquasecurity/trivy-kubernetes/pkg/artifacts"
|
|
"github.com/aquasecurity/trivy-kubernetes/pkg/k8s"
|
|
"github.com/aquasecurity/trivy-kubernetes/pkg/trivyk8s"
|
|
"github.com/aquasecurity/trivy/pkg/flag"
|
|
"github.com/aquasecurity/trivy/pkg/log"
|
|
"github.com/aquasecurity/trivy/pkg/types"
|
|
)
|
|
|
|
// clusterRun runs scan on kubernetes cluster
|
|
func clusterRun(ctx context.Context, opts flag.Options, cluster k8s.Cluster) error {
|
|
if err := validateReportArguments(opts); err != nil {
|
|
return err
|
|
}
|
|
var artifacts []*artifacts.Artifact
|
|
var err error
|
|
switch opts.Format {
|
|
case types.FormatCycloneDX:
|
|
artifacts, err = trivyk8s.New(cluster, log.Logger).ListBomInfo(ctx)
|
|
if err != nil {
|
|
return xerrors.Errorf("get k8s artifacts with node info error: %w", err)
|
|
}
|
|
case types.FormatJSON, types.FormatTable:
|
|
if opts.Scanners.AnyEnabled(types.MisconfigScanner) && slices.Contains(opts.Components, "infra") {
|
|
artifacts, err = trivyk8s.New(cluster, log.Logger).ListArtifactAndNodeInfo(ctx, opts.NodeCollectorNamespace, opts.ExcludeNodes, opts.Tolerations...)
|
|
if err != nil {
|
|
return xerrors.Errorf("get k8s artifacts with node info error: %w", err)
|
|
}
|
|
} else {
|
|
artifacts, err = trivyk8s.New(cluster, log.Logger).ListArtifacts(ctx)
|
|
if err != nil {
|
|
return xerrors.Errorf("get k8s artifacts error: %w", err)
|
|
}
|
|
}
|
|
default:
|
|
return xerrors.Errorf(`unknown format %q. Use "json" or "table" or "cyclonedx"`, opts.Format)
|
|
}
|
|
|
|
runner := newRunner(opts, cluster.GetCurrentContext())
|
|
return runner.run(ctx, artifacts)
|
|
}
|