mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-23 07:29:00 -08:00
5d73b47dbc
* feat(misconf): Add support for `--skip-service` flag. Fixes: https://github.com/aquasecurity/trivy/issues/4619 Signed-off-by: Simar <simar@linux.com> * update docs Signed-off-by: Simar <simar@linux.com> * update go mod * refactor processOptions to reduce cyclo complexity Signed-off-by: Simar <simar@linux.com> * fix a bug with multiple skip services Signed-off-by: Simar <simar@linux.com> * refactor tests Signed-off-by: Simar <simar@linux.com> * use x/slice and x/xerrors Signed-off-by: Simar <simar@linux.com> * go mod tidy * lint --------- Signed-off-by: Simar <simar@linux.com>
89 lines
2.3 KiB
Go
89 lines
2.3 KiB
Go
package flag
|
|
|
|
var (
|
|
awsRegionFlag = Flag{
|
|
Name: "region",
|
|
ConfigName: "cloud.aws.region",
|
|
Value: "",
|
|
Usage: "AWS Region to scan",
|
|
}
|
|
awsEndpointFlag = Flag{
|
|
Name: "endpoint",
|
|
ConfigName: "cloud.aws.endpoint",
|
|
Value: "",
|
|
Usage: "AWS Endpoint override",
|
|
}
|
|
awsServiceFlag = Flag{
|
|
Name: "service",
|
|
ConfigName: "cloud.aws.service",
|
|
Value: []string{},
|
|
Usage: "Only scan AWS Service(s) specified with this flag. Can specify multiple services using --service A --service B etc.",
|
|
}
|
|
awsSkipServicesFlag = Flag{
|
|
Name: "skip-service",
|
|
ConfigName: "cloud.aws.skip-service",
|
|
Value: []string{},
|
|
Usage: "Skip selected AWS Service(s) specified with this flag. Can specify multiple services using --skip-service A --skip-service B etc.",
|
|
}
|
|
awsAccountFlag = Flag{
|
|
Name: "account",
|
|
ConfigName: "cloud.aws.account",
|
|
Value: "",
|
|
Usage: "The AWS account to scan. It's useful to specify this when reviewing cached results for multiple accounts.",
|
|
}
|
|
awsARNFlag = Flag{
|
|
Name: "arn",
|
|
ConfigName: "cloud.aws.arn",
|
|
Value: "",
|
|
Usage: "The AWS ARN to show results for. Useful to filter results once a scan is cached.",
|
|
}
|
|
)
|
|
|
|
type AWSFlagGroup struct {
|
|
Region *Flag
|
|
Endpoint *Flag
|
|
Services *Flag
|
|
SkipServices *Flag
|
|
Account *Flag
|
|
ARN *Flag
|
|
}
|
|
|
|
type AWSOptions struct {
|
|
Region string
|
|
Endpoint string
|
|
Services []string
|
|
SkipServices []string
|
|
Account string
|
|
ARN string
|
|
}
|
|
|
|
func NewAWSFlagGroup() *AWSFlagGroup {
|
|
return &AWSFlagGroup{
|
|
Region: &awsRegionFlag,
|
|
Endpoint: &awsEndpointFlag,
|
|
Services: &awsServiceFlag,
|
|
SkipServices: &awsSkipServicesFlag,
|
|
Account: &awsAccountFlag,
|
|
ARN: &awsARNFlag,
|
|
}
|
|
}
|
|
|
|
func (f *AWSFlagGroup) Name() string {
|
|
return "AWS"
|
|
}
|
|
|
|
func (f *AWSFlagGroup) Flags() []*Flag {
|
|
return []*Flag{f.Region, f.Endpoint, f.Services, f.SkipServices, f.Account, f.ARN}
|
|
}
|
|
|
|
func (f *AWSFlagGroup) ToOptions() AWSOptions {
|
|
return AWSOptions{
|
|
Region: getString(f.Region),
|
|
Endpoint: getString(f.Endpoint),
|
|
Services: getStringSlice(f.Services),
|
|
SkipServices: getStringSlice(f.SkipServices),
|
|
Account: getString(f.Account),
|
|
ARN: getString(f.ARN),
|
|
}
|
|
}
|