Jimmy Zelinskie
e16d17dda9
updater: remove original RunUpdate()
5 years ago
Jimmy Zelinskie
0d41968acd
updater: reimplement fetch() with errgroup
...
This adds context support to a few more functions in the update process.
This makes progress towards to goal of having cancellable updates.
5 years ago
Jimmy Zelinskie
6c5be7e1c6
updater: refactor to use errgroup
...
This addresses a race condition and makes this code much more
understandable.
5 years ago
Jimmy Zelinskie
399deab100
database: remove FindLock()
5 years ago
Jimmy Zelinskie
effe1552fb
Merge pull request #679 from kubeshield/master
...
Fix cert and key file mix up
5 years ago
Jimmy Zelinskie
45ecf18815
pkg/timeutil: init
5 years ago
Jimmy Zelinskie
b08ad9b8e6
Merge pull request #506 from openSUSE/reintroduce-suse-opensuse
...
Reintroduce image scanning for openSUSE and SLE
5 years ago
Flavio Castelli
1105102b84
Update documentation: talk about SUSE support
...
Expand the documentation about the available data sources to mention
openSUSE and SLE.
Signed-off-by: Flavio Castelli <fcastelli@suse.com>
5 years ago
Flavio Castelli
5a4d4913c1
Reintroduce image scanning for openSUSE and SLE
...
Handle scanning of openSUSE and SUSE Linux Enterprise images.
Signed-off-by: Flavio Castelli <fcastelli@suse.com>
5 years ago
Jimmy Zelinskie
5cd6a8cc92
Merge pull request #681 from Allda/rhel_severity
...
Vulnsrc rhel: handle "none" CVE impact
6 years ago
Tamal Saha
0ed4126240
Fix cert and key file mix up
...
Signed-off-by: Tamal Saha <tamal@appscode.com>
6 years ago
Ales Raszka
bd7102d963
Vulnsrc rhel: handle "none" CVE impact
...
Some RHEL CVEs [1] contains "none" string in impact field. This is throwing
warning message when fetching vulnerabilities. The new code handles this
case and it uses advisory severity instead.
[1] https://www.redhat.com/security/data/oval/com.redhat.rhsa-20080038.xml
6 years ago
Jimmy Zelinskie
3947073b9e
Merge pull request #667 from travelaudience/helm-tolerations
...
HELM: add tolerations
6 years ago
Jeff Knurek
81430ffbb2
HELM: also add option for nodeSelector
6 years ago
Jeff Knurek
6a94d8ccd2
HELM: add option for tolerations
6 years ago
Jimmy Zelinskie
300bb52696
database: add FindLock dbutil
6 years ago
Jimmy Zelinskie
4fbeb9ced5
database: add (Acquire|Release)Lock dbutils
6 years ago
Jimmy Zelinskie
504f0f3af3
Merge pull request #656 from glb/elsa_CVEID
...
vulnsrc_oracle: one vulnerability per CVE
6 years ago
Geoff Baskwill
3503ddb96f
vulnsrc_oracle: one vulnerability per CVE
...
Get one vulnerability per CVE for Oracle instead of one per ELSA so we
can have NVD metadata added to the vulnerabilities.
Related: #495 , #499 .
6 years ago
Jimmy Zelinskie
93e7a4cfa8
Merge pull request #650 from Katee/add-ubuntu-cosmic
...
Add database mapping for Ubuntu Cosmic (18.10)
6 years ago
Jimmy Zelinskie
4c08c8f959
Merge pull request #653 from brosander/helm-dep
...
Pinning helm postgres dep to the working 1.0.0
6 years ago
Bryan Rosander
00db964497
Pinning helm postgres dep to the working 1.0.0
6 years ago
Kate Murphy
6c682da3e1
database: add mapping for Ubuntu Cosmic (18.10)
6 years ago
Jimmy Zelinskie
c123c95590
Merge pull request #648 from HaraldNordgren/go_versions
...
Bump Go versions and use '.x' to always get latest patch versions
6 years ago
Harald Nordgren
be24096183
Bump Go versions and use '.x' to always get latest patch versions
6 years ago
Sida Chen
05cbf328aa
Merge pull request #647 from KeyboardNerd/spkg/cvrf
...
vulnsrc: Refactor debian and alpine sources
6 years ago
Sida Chen
4106322107
vendor: Update gopkg.in/yaml.v2 package
...
* Update gopkg.in/yaml.v2 package and glide setting
* Update other packages
6 years ago
Sida Chen
72674ca871
vulnsrc: Refactor vulnerability sources to use utility functions
6 years ago
Sida Chen
a3f7387ff1
database: Add FindKeyValue function wrapper
6 years ago
Sida Chen
c3904c9696
pkg: Add fsutil to contian file system utility functions
6 years ago
Sida Chen
1ee1b95afc
Merge pull request #644 from KeyboardNerd/bug/git
...
gitutil: Fix git pull on non-git repository directory
6 years ago
Jimmy Zelinskie
0c2e5e73c2
Merge pull request #645 from Katee/include-cvssv3
...
Switch to NVD JSON feed and include CVSSv3
6 years ago
Kate Murphy
081ae34af1
ext: remove duplicate vectorValuesToLetters definition
6 years ago
Kate Murphy
4f0da12b12
ext: pass through CVSSv3 impact and exploitability score
6 years ago
Jimmy Zelinskie
8efc3e4038
ext: remove unneeded use of init()
6 years ago
Jimmy Zelinskie
699d1143e5
ext: fixup incorrect copyright year
6 years ago
Sida Chen
335cb65917
Merge pull request #646 from KeyboardNerd/spkg/model
6 years ago
Sida Chen
2236b0a5c9
updater: Add vulnsrc affected feature type
...
Each vulnerability source has a specific type of feature that it affects
We assume the following:
* Alpine: Binary Package
* Debian: Source Package
* Ubuntu: Source Package
* Oracle OVAL: Binary Package
* RHEL OVAL: Binary Package
6 years ago
Sida Chen
00fadfc3e3
database: Add affected feature type
...
Affected feature type is for determining either the source feature or
the binary feature that an vulnerability affects.
6 years ago
Sida Chen
11b67e612c
gitutil: Fix git pull on non-git repository directory
...
* Add conditional check: if the git repo directory is newly created, we
clone.
* Add tests
Fixes #641
6 years ago
Kate Murphy
b81e4454fb
ext: Parse CVSSv3 data from JSON NVD feed
6 years ago
Kate Murphy
14277a8f5d
ext: Add JSON NVD parsing tests
6 years ago
Kate Murphy
aab46f5658
ext: Parse NVD JSON feed instead of XML
...
The JSON feed provides some values that are not available in the XML
feed such as CVSSv3.
6 years ago
Sida Chen
17539bda60
Merge pull request #640 from KeyboardNerd/sourcePackage
...
database: Replace Parent Feature with source metadata
6 years ago
Sida Chen
f759dd54c0
database: Replace Parent Feature with source metadata
...
Feature's source feature string is directly stored in the database
instead of having the parent pointer to simplify the database.
6 years ago
Jimmy Zelinskie
2ac088dd0f
Merge pull request #639 from Katee/update-sha1-to-sha256
...
Use SHA256 instead of SHA1 for fingerprinting
6 years ago
Sida Chen
fe614f2b01
Merge pull request #638 from KeyboardNerd/featureTree
...
Parse Source package from package information databases
6 years ago
Kate Murphy
8d5a0131c4
ext: Use SHA256 instead of SHA1 for fingerprinting
...
To make static analysis tools happy.
The current use of SHA1 for fingerprinting is safe. However, there is very
little downside to switching to SHA256.
6 years ago
Sida Chen
2cc61f9fc0
ext/featurefmt/apk: Extract origin package information from database
...
"o" field is used to extract the Package Origin from the APK database.
6 years ago
Sida Chen
a057e4a943
ext/featurefmt/rpm: Extract source package from rpm database
...
Source package is now extracted from the RPM database by using
${SourceRPM} option in the rpm --qf argument.
6 years ago