mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-12 15:50:15 -08:00
18b80e3781
* refactor(docker_conf): rename and remove unnecessary options * feat(rpc): define new API * fix(cli): change default timeout * fix(import): fix package names * refactor(vulnerability): remove old mock * refactor(utils): remove un-needed functions * feat(cache): implement cache communicating with a server * refactor(scan): separate scan function as local scanner * test(scanner): add tests for ScanImage * refactor(scan): remove unused options * test(vulnerability): generate mock * refactor(server): split a file * feat(server): implement new RPC server * feat(client): implement new RPC client * fix(cache): use new cache interface * fix(standalone): use new scanner * fix(client): use new scanner * fix(server): pass cache * test(integration): make sure an error is not nil before calling the method * fix(mod): update dependencies * test(integration): ensure the image load finishes * feat(docker): support DOCKER_HOST and DOCKER_CERT_PATH * chore(mod): update dependencies * refactor(rpc): remove old client * feat(server): support old API for backward compatibility * fix(server): check a schema version of JSON cache * fix(rpc): add a version to packages * feat(rpc): add PutImage * test: rename expectations * refactor(cache): rename LayerCache to ImageCache * refactor: rename ImageInfo to ImageReference * fix(applier): pass image_id to ApplyLayer * feat(cache): handle image cache * chore(mod): update dependencies * refactor(server): pass only config * feat(cli): add -removed-pkgs option * refactor(err): wrap errors
87 lines
2.3 KiB
Go
87 lines
2.3 KiB
Go
package ospkg
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/google/wire"
|
|
"golang.org/x/xerrors"
|
|
|
|
fos "github.com/aquasecurity/fanal/analyzer/os"
|
|
ftypes "github.com/aquasecurity/fanal/types"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/alpine"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/amazon"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/debian"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/oracle"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/photon"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/redhat"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/suse"
|
|
"github.com/aquasecurity/trivy/pkg/detector/ospkg/ubuntu"
|
|
"github.com/aquasecurity/trivy/pkg/log"
|
|
"github.com/aquasecurity/trivy/pkg/types"
|
|
)
|
|
|
|
var (
|
|
ErrUnsupportedOS = xerrors.New("unsupported os")
|
|
|
|
SuperSet = wire.NewSet(
|
|
wire.Struct(new(Detector)),
|
|
wire.Bind(new(Operation), new(Detector)),
|
|
)
|
|
)
|
|
|
|
type Operation interface {
|
|
Detect(string, string, string, time.Time, []ftypes.Package) ([]types.DetectedVulnerability, bool, error)
|
|
}
|
|
|
|
type Driver interface {
|
|
Detect(string, []ftypes.Package) ([]types.DetectedVulnerability, error)
|
|
IsSupportedVersion(string, string) bool
|
|
}
|
|
|
|
type Detector struct{}
|
|
|
|
func (d Detector) Detect(_, osFamily, osName string, _ time.Time, pkgs []ftypes.Package) ([]types.DetectedVulnerability, bool, error) {
|
|
driver := newDriver(osFamily, osName)
|
|
if driver == nil {
|
|
return nil, false, ErrUnsupportedOS
|
|
}
|
|
|
|
eosl := !driver.IsSupportedVersion(osFamily, osName)
|
|
|
|
vulns, err := driver.Detect(osName, pkgs)
|
|
if err != nil {
|
|
return nil, false, xerrors.Errorf("failed detection: %w", err)
|
|
}
|
|
|
|
return vulns, eosl, nil
|
|
}
|
|
|
|
func newDriver(osFamily, osName string) Driver {
|
|
// TODO: use DI and change struct names
|
|
var d Driver
|
|
switch osFamily {
|
|
case fos.Alpine:
|
|
d = alpine.NewScanner()
|
|
case fos.Debian:
|
|
d = debian.NewScanner()
|
|
case fos.Ubuntu:
|
|
d = ubuntu.NewScanner()
|
|
case fos.RedHat, fos.CentOS:
|
|
d = redhat.NewScanner()
|
|
case fos.Amazon:
|
|
d = amazon.NewScanner()
|
|
case fos.Oracle:
|
|
d = oracle.NewScanner()
|
|
case fos.OpenSUSELeap:
|
|
d = suse.NewScanner(suse.OpenSUSE)
|
|
case fos.SLES:
|
|
d = suse.NewScanner(suse.SUSEEnterpriseLinux)
|
|
case fos.Photon:
|
|
d = photon.NewScanner()
|
|
default:
|
|
log.Logger.Warnf("unsupported os : %s", osFamily)
|
|
return nil
|
|
}
|
|
return d
|
|
}
|