kube-bench

Commit Graph

Author	SHA1	Message	Date
chenk	abfa7d9613	release: prepare v0.7.2 (#1578 ) Signed-off-by: chenk <hen.keinan@gmail.com>	3 months ago
Andrey Polovov	faeceb5dfa	job.yaml: Adding /var/lib/cni mounts for proper CIS 1.1.9 and 1.1.0 checking (#1547 ) Signed-off-by: Andrey Polovov <andrey.polovov@flant.com> Signed-off-by: Andrey Pavlov <andrey.pavlov@flant.com> Co-authored-by: Andrey Pavlov <andrey.pavlov@flant.com> Co-authored-by: chenk <hen.keinan@gmail.com>	3 months ago
chenk	445c1160cf	release: prepare v0.7.1 (#1559 ) Signed-off-by: chenk <hen.keinan@gmail.com>	4 months ago
chenk	58a49da713	release: prepare v0.7.0 (#1543 ) Signed-off-by: chenk <hen.keinan@gmail.com>	5 months ago
chenk	55a18aed87	release: prepare-0.6.19 (#1511 ) Signed-off-by: chenk <hen.keinan@gmail.com>	7 months ago
chenk	18f8456abd	release: prepare v0.6.18 (#1509 ) Signed-off-by: chenk <hen.keinan@gmail.com>	7 months ago
chenk	8bc4daae10	release: prepare v0.6.18-rc (#1508 ) Signed-off-by: chenk <hen.keinan@gmail.com>	7 months ago
chenk	456684462a	release: prepare v0.6.17 (#1480 ) Signed-off-by: chenk <hen.keinan@gmail.com>	10 months ago
Guille Vigil	c8cabc4b14	Update job.yaml (#1477 ) * Update job.yaml Fix on typo for image version * chore: sync with upstream Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com> Co-authored-by: chenk <hen.keinan@gmail.com>	10 months ago
chenk	8c6915c478	release: prepare v0.6.16 official (#1479 ) Signed-off-by: chenk <hen.keinan@gmail.com>	10 months ago
chenk	9363cdf8ef	release: prepare v0.6.16-rc (#1476 ) * release: prepare v0.6.16-rc Signed-off-by: chenk <hen.keinan@gmail.com> * release: prepare v0.6.16-rc Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>	10 months ago
chenk	76c25b2db2	release: prepare v0.6.15 (#1455 ) Signed-off-by: chenk <hen.keinan@gmail.com>	12 months ago
chenk	c2880848f0	release: prepare v0.6.14 (#1446 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	29c8f16167	release: prepare v0.6.14-rc (#1442 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	8098489433	release: prepare v0.6.13 (#1429 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	dd6573f3ed	release: prepare v0.6.13-rc2 (#1426 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	124a8b3a5a	release: prepare v0.6.13-rc (#1416 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	7d0d8ca993	release: prepare v0.6.12 (#1387 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	823f3e1064	release: prepare v0.6.12-rc (#1385 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	c17b4dd2ba	release: prepare v0.6.11 (#1371 ) Signed-off-by: chenk <hen.keinan@gmail.com>	1 year ago
chenk	55688aa62d	release: v0.6.10 (#1306 ) Signed-off-by: chenk <hen.keinan@gmail.com> Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
Jose Donizetti	93a167a917	release: prepare v0.6.9 (#1241 ) Signed-off-by: Jose Donizetti <jdbjunior@gmail.com> Signed-off-by: Jose Donizetti <jdbjunior@gmail.com>	2 years ago
rhtenhove	ebdfba55cc	fix: fully qualified image names (#1206 )	2 years ago
chenk	d190cbcaf6	release: prepare v0.6.8 (#1160 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
chenk	fbc89e1275	release: prepare v0.6.8-rc1 (#1159 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
chenk	10ab72abfb	release: v0.6.7 (#1137 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
chenk	faa1e88d0d	release: prepare v0.6.7-rc1 (#1136 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
Shubham Deshmukh	e73c07d86f	Update kube bench docker image tag to v0.6.6 (#1085 ) Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	2 years ago
Yoav Rotem	25ba9e2fad	New integration testing (#947 ) * Fix Junit missing testsuites Fix issue https://github.com/aquasecurity/kube-bench/issues/883 but also bug with overriding output when --outputfile is effective and only write the last controls * test new integration * Update build.yml * add wait for job to be ready * Update build.yml * Update build.yml * Update build.yml * test * Update job.yaml * Add wait * test for logs * Update job.yaml * Create Expected_output.data * Update build.yml * Update build.yml * remove empty line * Add new line at the end * add --- * Delete docker.go * Delete integration.go * Delete integration_test.go * Delete integration/testdata/cis-1.20 directory * Delete integration/testdata/cis-1.6 directory * Update integration testing * Remove integration tests Removed integration testing to github action * Update build.yml	3 years ago
Dmytro Oboznyi	d528400881	Fix file permissions false positive (#800 ) * Fix file permissions false positive Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added kops files to config path list Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Automated CNI files checks Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed linting Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed to right folder CNI test Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed Automated to manual Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Removed changes from remediation Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added path to config files Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Update cfg/cis-1.6/master.yaml Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com> Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix to job.yaml Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Add extra mountpoints Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Revert audit scripts changes Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	3 years ago
Huang Huang	17cd104788	Fixes issue #574 : change the PATH in container (#577 ) * Fixes issue #574: change the PATH in container And change to use `/usr/local/mount-from-host/bin` as mount path. Fixes #574 * Fix integration tests	4 years ago
Nick Smith	77f66511e7	Set all host-mounted volumes to be read-only. (#569 ) By setting all host-mounted volumes to be read-only we reduce the likelihood any host filesystem is modified by running kube-bench.	4 years ago
James Ward	5f34058dc7	Support Linting YAML as part of Travis CI build (#554 ) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon	4 years ago
Cyril Tovena	5baf81a70a	Adds master node detection and a root command that automatically detect checks to run. The root command will run node checks and if possible master checks. I've also added some Makefile targets to improve local testing and improve the documentation.	5 years ago

34 Commits (abfa7d9613f0f5f9e628a3ec87fea3443fe57805)