876 Commits

Author SHA1 Message Date
Masahiro Fujimura
b345342369 Add oracle linux support (#286)
* Add oracle

* Add oracle

* Add golden json

* Add integration test

* Update go.{mod,sum}

* go mod tidy

* Use k8s/utils clock.Clock interface

* Fix Detect vulnerability oracle
2019-11-19 17:18:25 +02:00
Teppei Fukuda
c2fdfab3ed fix(lockfile): files under vendor dir (#279) 2019-11-15 16:03:15 +02:00
knqyf263
852c47f677 chore(module): update a dependency 2019-11-12 21:52:49 +02:00
knqyf263
35a7d9bb15 chore(module): update dependencies 2019-11-01 22:19:54 +02:00
knqyf263
46c7ff7a83 test(db): add tests 2019-10-31 23:53:46 +02:00
Teppei Fukuda
ff873a274b Support Amazon Linux (#182)
* Support Amazon Linux

* amazon: Add tests for Scanner Detect functionality

* amazon: Add more test cases for unhappy paths.

This commit also asserts the logged output via observer.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Add a test case for invalid fixed pkg version

Signed-off-by: Simarpreet Singh <simar@linux.com>

* mod: go mod tidy

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Inject dependency seams for exposed db interface and logger.

This commit also exposes an interface for doing db operations.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Use injected logger for scanner.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon_test: Add a sample testdata dir

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Add tests for for Get() for amazon vulns.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* vulnsrc_test: Fix invocation call to SetVersion()

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon_test: Add a test for severirtyFromPriority

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon_test: Add tests for constructVersion()

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Refactor walkFunc outside for testability purposes

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Refactor walkFn and add tests for it.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* amazon: Refactor commitFunc closure and add tests

This commit also introduces an interface for the
vulnerability package to be used as a seam.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* Revert "amazon: Use injected logger for scanner."

This reverts commit 5a81e4d824a95f4de4aae2e2b903eedd0f7e241f.

* test(amazon): fix failed tests

* fix(vulnerability): trim references

* test(amazon): add integration test
2019-10-22 09:31:15 +03:00
Teppei Fukuda
f8509846cf test(integration): add integration tests (#201)
* divide into NewApp function

* sort scan results for idempotency

* chore(integration): add integration tests

* tar_input_test: strengthen assertions

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer_test: Add a happy path for TestReportWriter

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer_test: switch to table test cases

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer_test: Add more scenarios for TestReportWriter_Table

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer: Change back to []Results and add happy path for JSON writer

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer_test: Switch to a table driven format

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer_test: cleanup

Signed-off-by: Simarpreet Singh <simar@linux.com>

* scan: Go back to report.Result by value

Signed-off-by: Simarpreet Singh <simar@linux.com>

* Revert "scan: Go back to report.Result by value"

This reverts commit 03b6f7abd7d0d22d87c825d0ef3759cca200b9fc.

* switch back to by value for results

Signed-off-by: Simarpreet Singh <simar@linux.com>

* writer_test: document a behavior with template inputs

Signed-off-by: Simarpreet Singh <simar@linux.com>

* vulnerability: Add a failing test to show unexpected sorting behavior.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* report: Simplify []*Result to []Result.

Signed-off-by: Simarpreet Singh <simar@linux.com>

* test(template): add happy path

* test(vulnerability): fix expected values

* tar_input_test: Move gunzipDB

Signed-off-by: Simarpreet Singh <simar@linux.com>
2019-10-18 13:58:27 -07:00
Teppei Fukuda
0fff415c2a Support Kaniko (#171) 2019-10-02 08:49:30 +03:00
Teppei Fukuda
987538fc49 Display an error message when rpm not found (#167) 2019-09-26 14:31:15 +03:00
Teppei Fukuda
2642020398 Support distroless and ignore lock files under vendor dir (#166) 2019-09-25 16:40:24 +03:00
Teppei Fukuda
43568ccd69 Update xerrors version (#158) 2019-09-24 21:26:22 +03:00
knqyf263
a843682f7c Transfer repositoriy 2019-08-18 22:22:54 -10:00
Tomoya Amachi
75b944ff50 update go.mod (#86) 2019-07-07 14:24:01 +09:00
knqyf263
a8f7ecefae Update dependencies 2019-06-07 23:46:55 +09:00
Tomoya Amachi
6fa78df282 auth for private docker registry from ENV vars (#52)
* auth for private docker registry from env vars

* fix typo

* delete GCP and AWS ENV vars

* update TOC

* fix typo
2019-05-24 13:26:41 +09:00
Masahiro
76ee7291d6 Support Poetry (#49)
* Support Poetry

* Fix conflict

* Tidy go.sum
2019-05-22 08:40:10 +09:00
Tomoya Amachi
8d7c2e6d2a Fix yarn parser (#47)
* update go-dep-parser for yarn bugfix

* fixbug: yarn.lock parse error

* enhanced error messages : detect amazon linux and opensuse
2019-05-22 00:50:53 +09:00
Naoki Harima
e85e961af6 Update fanal version (#15)
* Update fanal version

* Update fanal version

* do go mod tidy
2019-05-17 19:00:22 +09:00
Tomoya Amachi
4d20d3f543 check yarn.lock in node scanner (#7)
* check yarn.lock in node scanner

* update README and go tidy
2019-05-16 11:14:10 +09:00
knqyf263
17b5a60247 Use src package 2019-05-14 16:44:23 +09:00
knqyf263
9006dd5d16 Update dependencies 2019-05-13 15:16:47 +09:00
knqyf263
6284def316 Aanalyze commands 2019-05-13 04:11:34 +09:00
Masahiro
0c11078302 Add Cargo scanner (#5) 2019-05-12 23:08:02 +09:00
knqyf263
abeeb37e75 Clear cache 2019-05-07 21:34:00 +09:00
Teppei Fukuda
1291b9a194 Display advisory information (#2)
* Use fork tablewriter

* Display advisory information

* Update README
2019-05-07 20:46:11 +09:00
Teppei Fukuda
84fec5ae12 Initial commit (#1)
* initial
2019-05-07 15:41:03 +09:00