e7f72ef5ad
utils: rm prometheus.go
7 years ago
343e24eb7e
clair: remove `types` package
...
This removes the `types` package instead moving the contents to the
top-level clair package.
This change also renames the `Priority` type to `Severity` in order to
reduce confusion.
This change also removes the IsValid method and replaces it with a safe
constructor to avoid the creation of invalid values.
Many docstrings were tweaked in the making of this commit.
7 years ago
78cef02fda
pkg: cerrors -> commonerr
7 years ago
03bac0f1b6
pkg: utils/tar.go -> pkg/tarutil
7 years ago
ebd0170f5b
api/v1: fix JSON struct tag misnomer
7 years ago
033709eaea
add registerable version formats
...
Since we only ever used dpkg, this change shims everything into using
dpkg.
7 years ago
d4522e9c6e
api/v1: indexed layers for notifications
...
This change deprecates the old LayersIntroducingVulnerability for a new
one that orders output and contains an Index. This index is not
guaranteed to be consistent across multiple notifications, despite the
current Postgres implementation using the primary key of Layer table.
8 years ago
eb6117c372
Merge pull request #235 from jzelinskie/doc-move
...
docs: move to standard Documentation dir
8 years ago
b45b625fc8
improve v1 api docs header legibility
...
GitHub has changed fonts and as a result h6s are extremely small.
8 years ago
ad11393a28
Updated API documentation to reflect changes to authentication scheme. ( #180 )
...
With #167 , the API was changed to provide a more generic way of how Clair can retrieve the layers from a registry. This change reflects it in the documentation.
8 years ago
53e62577bc
api/worker: s/Authorization/Headers ( #167 )
...
This allows clients to specify any HTTP headers that need to be used in
order to allow Clair to download a layer, rather than just the
Authorization header.
8 years ago
9b5afc79ca
api/worker: introduce optional authorization
...
This allows clients to specify the contents of the HTTP Authorization
header so that Clair can access protected resources.
8 years ago
7aa88690af
api: WriteHeader on health endpoint
...
Fixes #141 .
8 years ago
68250f392b
api/v1: create namespace type
...
This change creates a struct type for namespaces rather than using a
string. This enables us to extend namespaces in the future to contain
metadata. This change also required renaming other field references of
namespaces to "NamespaceName".
Fixes #99
8 years ago
f14e4de4d8
api: fix anchor link in docs
8 years ago
1a863a06cf
remove the useless pointer of NextPage field; check namespace notfound error
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
8 years ago
27e5e42340
use tokenMarshal/unmarshal in page encoding
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
8 years ago
48ffb2687a
use encrypt page in listVuln api
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
8 years ago
a541e964e0
New API: list vulnerabilities by namespace
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
8 years ago
d47616a339
readme: make API description consistence
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
8 years ago
af0ddceaa2
readme: s/notification/notifications
8 years ago
2140995a54
readme: clarify "marked as read" notifications
8 years ago
1557a27a8c
Revert "v1: pagination now deterministic"
...
This reverts commit 24f329fea674e04c76f5e87c22eea1800e6bc413.
This was unnecessary.
8 years ago
3563cf9061
api: fix pagination token that's returned to match what has been passed
8 years ago
4fd4049fee
v1: update documented error codes
8 years ago
e78d076d02
api/worker: adjust error codes in postLayer
8 years ago
452c32d7d7
v1: pagination now deterministic
...
The standard JSON encoding has no guarantee of the order of keys, thus
token values could differ, but still be equivalent.
8 years ago
dc431c22f3
v1: add readme
8 years ago
771e35def0
v1: return object on PUT/POST
...
This change also improves error handling around InsertVulnerability.
8 years ago
c06df1affd
v1: 200 on PUT
8 years ago
274a1620a5
api: log instead of panic when a response could not be marshaled
...
In order to avoid killing Clair when there is simply a broken pipe..
8 years ago
8d76700506
api: add call duration in logs
8 years ago
418ab08c4b
api: adjust postLayer error codes
...
- return 422 when layer could not be analyzed (extraction failed or layer unsupported)
- return 404 if the parent is not found or the download path leads to a 404 page
8 years ago
f40f6a5ab6
api: add missing link field in vulnerability in getLayer
8 years ago
6d2eedf121
api/database: add the layer name that add each feature in getLayer
8 years ago
0e9a7e1740
api: close gzip writer to flush it
8 years ago
db974ae722
api: fix postLayer response headers
8 years ago
6f02119c56
api: add bad requests to insert layer
8 years ago
ca2b0ccfcb
api: support gzip responses
8 years ago
c7aa7c4db4
api: reorder constants and add comments
8 years ago
4516d6fd73
api: make postLayer returns a Layer
8 years ago
d19a4348df
api: implement fernet encryption of pagination tokens
8 years ago
b8c534cd0d
api: fix putVulnerability (fill missing Namespace.Name and Name fields)
8 years ago
c2061dc69e
api: fix negative timestamps in notifications
8 years ago
f68012de00
api: fix 404->500 and NPE issues
8 years ago
7c11e4eb5d
updater/database: do not create notifications during the initial update
8 years ago
c504d2ed0e
api: add FeatureFromDatabaseModel
...
This also handles replacing the DB identifier for a maximum version with
the string "None".
8 years ago
83b19b6179
api/prometheus: add prometheus metrics to API routes
8 years ago
f351d6304e
api: add "Content-Type" and "Server" headers
8 years ago
2d8d9ca401
api: finish initial work on v1 API
8 years ago
94ece7bf2b
database: fix notification design and add vulnerability history
8 years ago
b9a6da4a57
api: implement delete notification
8 years ago
96e96d948d
api: handle last page for notifications
8 years ago
3eaae478f9
api: implement get notification
8 years ago
116ce1a806
api: fix log message when stopping the API server
8 years ago
5fdd9d1a07
*: add metadata support along with NVD CVSS
8 years ago
c05848e32d
api: implement put vulnerability
8 years ago
8209922c0c
api: implement delete vulnerability
8 years ago
dc99d45f47
api: refactor endpoints and implement get vulnerability
8 years ago
6ac9b5e645
api: fix graceful stop
8 years ago
9a8d4aa591
api: implement post vulnerability
8 years ago
38aeed4f2c
api: implement get namespaces route
8 years ago
b916fba4c6
api: implement delete layer route
8 years ago
04c7351911
api: use pointers in models to get proper `omitempty` semantics
8 years ago
1a5aa88b18
api: use only one layer envelope
8 years ago
fa45d516df
api: add JSON tags to API models
8 years ago
d130d2fab4
api: implement getLayer
8 years ago
6b3f95dc03
api: fix /v1 router and some status codes
8 years ago
be9423b489
api: add request / response types and rename some fields
8 years ago
822ac7ab4c
api: add initial work on the new API
8 years ago
b8b7be3f81
*: remove health checker
8 years ago
726bd3c0c6
database/api: add layer deletion support
8 years ago
6e20993bac
api: simplify getLayer route and JSON output
8 years ago
77387af2ac
updater: port updater and its fetchers
8 years ago
2c150b015e
*: refactor & do initial work towards PostgreSQL implementation
8 years ago
e834301941
Merge pull request #49 from liangchenye/master
...
Add DataDetector to support ACI and other layout format
8 years ago
8c1d3c9a86
*: Fix `authentification` typo
9 years ago
34870a2a2b
move LoadTLSClientConfigForServer into API package
...
This isn't reused any where just yet, so we're best off leaving it local
to the place that needs it.
9 years ago
d402ae818e
use imageFormat in params for consistence
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
9 years ago
b1775ed3dc
add data detector to support ACI and other format in the future
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
9 years ago
eb7e5d5c74
main: Use configuration file instead of flags and simplify app extension.
...
Clair will now use a YAML configuration file instead of command line
arguments as the number of parameters grows.
Also, Clair now exposes a Boot() func that allows everyone to easily
create their own project and load dynamically their own fetchers/updaters.
9 years ago
9946382223
api: Extracted client cert & HTTP JSON Render to utils.
9 years ago
e444e93c97
api/database: Add the ability to delete layers
9 years ago
9db0e63401
api: Specify what packages cause the layer to have vulnerabilities.
9 years ago
3ec262dd51
Initial commit
9 years ago
Jimmy Zelinskie