kube-bench

Commit Graph

Author	SHA1	Message	Date
rhtenhove	ebdfba55cc	fix: fully qualified image names (#1206 )	2 years ago
chenk	d190cbcaf6	release: prepare v0.6.8 (#1160 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
chenk	fbc89e1275	release: prepare v0.6.8-rc1 (#1159 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
chenk	10ab72abfb	release: v0.6.7 (#1137 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
chenk	faa1e88d0d	release: prepare v0.6.7-rc1 (#1136 ) Signed-off-by: chenk <hen.keinan@gmail.com>	2 years ago
Shubham Deshmukh	e73c07d86f	Update kube bench docker image tag to v0.6.6 (#1085 ) Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	2 years ago
Yoav Rotem	25ba9e2fad	New integration testing (#947 ) * Fix Junit missing testsuites Fix issue https://github.com/aquasecurity/kube-bench/issues/883 but also bug with overriding output when --outputfile is effective and only write the last controls * test new integration * Update build.yml * add wait for job to be ready * Update build.yml * Update build.yml * Update build.yml * test * Update job.yaml * Add wait * test for logs * Update job.yaml * Create Expected_output.data * Update build.yml * Update build.yml * remove empty line * Add new line at the end * add --- * Delete docker.go * Delete integration.go * Delete integration_test.go * Delete integration/testdata/cis-1.20 directory * Delete integration/testdata/cis-1.6 directory * Update integration testing * Remove integration tests Removed integration testing to github action * Update build.yml	3 years ago
Dmytro Oboznyi	d528400881	Fix file permissions false positive (#800 ) * Fix file permissions false positive Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added kops files to config path list Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Automated CNI files checks Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed linting Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed to right folder CNI test Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed Automated to manual Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Removed changes from remediation Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added path to config files Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Update cfg/cis-1.6/master.yaml Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com> Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix to job.yaml Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Add extra mountpoints Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Revert audit scripts changes Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	3 years ago
Huang Huang	17cd104788	Fixes issue #574 : change the PATH in container (#577 ) * Fixes issue #574: change the PATH in container And change to use `/usr/local/mount-from-host/bin` as mount path. Fixes #574 * Fix integration tests	4 years ago
Nick Smith	77f66511e7	Set all host-mounted volumes to be read-only. (#569 ) By setting all host-mounted volumes to be read-only we reduce the likelihood any host filesystem is modified by running kube-bench.	4 years ago
James Ward	5f34058dc7	Support Linting YAML as part of Travis CI build (#554 ) * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon	4 years ago
Cyril Tovena	5baf81a70a	Adds master node detection and a root command that automatically detect checks to run. The root command will run node checks and if possible master checks. I've also added some Makefile targets to improve local testing and improve the documentation.	5 years ago

12 Commits (ebdfba55ccba3f3fc9b32db3203b11e3ac1c66e4)