shopper
34e2f033d8
add kernelnames ubuntu20.04 ( #982 )
2020-05-22 12:19:07 +09:00
kazuminn
420825cacc
remove append ( #978 )
2020-05-20 13:55:07 +09:00
Kota Kanbe
466ec93d8e
bump up version
2020-05-08 17:15:25 +09:00
Kota Kanbe
3f5bb6ab29
fix(scan): alpine detection #965 ( #966 )
...
* fix(scan): alpine detection #965
* use knqyf263/go-apk-version
2020-05-08 16:12:01 +09:00
Kota Kanbe
ebe5f858c8
update trivy, and unsupport image scanning feature ( #971 )
...
* update trivy, fanal. unsupport image scanning
* Update models/library.go
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
* add -no-progress flag to report/tui cmd
* Display trivy vuln info to tui/report
* add detection method to vulninfo detected by trivy
* fix(uuid): change uuid lib to go-uuid #929 (#969 )
* update trivy, fanal. unsupport image scanning
* Update models/library.go
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
* add -no-progress flag to report/tui cmd
* Display trivy vuln info to tui/report
* add detection method to vulninfo detected by trivy
* unique ref links in TUI
* download trivy DB only when lock file is specified in config.toml
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
2020-05-08 15:24:39 +09:00
Kota Kanbe
9dd025437b
fix(uuid): change uuid lib to go-uuid #929 ( #969 )
2020-05-06 14:14:07 +09:00
Wagde Zabit
c0ebac305a
composer.lock insteaad of composer.json ( #973 )
...
Co-authored-by: Wagde Zabit <wagde@orcasecurity.io >
2020-05-01 15:20:33 +09:00
Kota Kanbe
1f23ab7ba4
Bump up version
2020-04-28 14:27:46 +09:00
Kota Kanbe
ea3b63998d
fix(report): GitHub Security Alerts Integration ( #970 )
2020-04-28 14:26:37 +09:00
Kota Kanbe
3093426458
fix(logging): panic if no write permission #949 ( #968 )
2020-04-27 17:37:30 +09:00
Kota Kanbe
37716feac7
refactor(lint): fix lint warnings ( #967 )
2020-04-27 17:02:27 +09:00
Kota Kanbe
56b12c38d2
fix(config): not working with empty config #962 ( #963 )
2020-04-23 10:50:35 +09:00
Kota Kanbe
749ead5d4a
update go mod ( #960 )
2020-04-20 21:33:11 +09:00
Kota Kanbe
3be50ab8da
bump up version
2020-04-19 09:06:01 +09:00
Kota Kanbe
649f4a6991
fix(report): kernel vulns detection BUG in Ubuntu ( #958 )
...
* fix(report): kernel vulns detection in Ubuntu
* fix(ubuntu): remove linux-* to detect only running kernel vulns
2020-04-19 09:04:08 +09:00
Kota Kanbe
0ff7641471
feat(report): display "fixed" when updatable even in fast mode ( #957 )
2020-04-13 18:20:32 +09:00
Kota Kanbe
1679bfae20
Update FUNDING.yml
2020-04-10 21:25:10 +09:00
Kota Kanbe
45aa364436
Update FUNDING.yml
2020-04-10 21:24:24 +09:00
Kota Kanbe
778516c4d9
Create FUNDING.yml
2020-04-10 21:21:30 +09:00
Kota Kanbe
464d523c42
Display fixed-in version for each package in report ( #801 )
...
* refactor(model): PackageFixStatus.Name to BinName
* refacotr(oval): change var name
* feat(report): Add FixedIn in JSON
* refactor(tui): chage args
* display fixedin in report
* refactor(model): change fileld name
* remove unused field of PackageFixStatus
2020-04-08 21:26:34 +09:00
Kota Kanbe
0f6a1987d4
fix(configtest): yum-utils instead of dnf-utils on RHEL8, Cent8 ( #948 )
2020-04-06 19:40:05 +09:00
Shigechika AIKAWA
20c6247ce5
fix CentOS8 configtest always failed ( #947 )
2020-04-06 15:47:08 +09:00
gy741
a10dd67e0f
Fix typo in models/scanresults.go ( #942 )
2020-04-06 15:00:43 +09:00
segatomo
5729ad6026
Add CWE Top25 and SANS Top25 ( #925 )
...
* add top25 rank
* add CweTop25 and SansTop25
* fix report
* add cwetop25 and sanstop25 url
* fix condition branch
* fix condition branch
2020-03-03 17:33:06 +09:00
Tomoya Amachi
9aa0d87a21
feat : scan with image digest ( #939 )
2020-03-03 16:51:06 +09:00
ishiDACo
fe3f1b9924
Update OWASP Dependency Check parser for dependency-check.2.2.xsd schema ( #936 )
2020-02-27 10:08:26 +09:00
Kota Kanbe
00e52a88fa
Update README.md
2020-02-01 09:27:17 +09:00
Kota Kanbe
5811dffe7a
fix(report): Support CVSS 3.1 for Red Hat OVAL #930 ( #932 )
2020-01-30 22:48:04 +09:00
sadayuki-matsuno
7278982af4
update fanal ( #931 )
2020-01-30 20:40:49 +09:00
nyao
c17b4154ec
fix(config): fix double checking ResultsDir Path ( #927 )
2019-12-12 09:29:12 +09:00
Kota Kanbe
d6e74cce08
bump up version ( #923 )
2019-11-26 09:54:30 +09:00
Kota Kanbe
3f80749241
Merge branch 'master' of github.com:future-architect/vuls
2019-11-26 09:44:10 +09:00
Kota Kanbe
7f72b6ac69
Warn no ip ( #922 )
...
* fix(scan): ignore wp-cli stderr messages (#825 ) (#915 )
* fix(scan): warn if unable to get ip address on the scan tareget server
* fix test case
2019-11-26 09:40:38 +09:00
Kota Kanbe
03e7b90b9f
Merge branch 'master' of github.com:future-architect/vuls
2019-11-26 08:53:03 +09:00
Kota Kanbe
7936b3533b
Fill Red Hat CVE data for all distros ( #920 )
...
* fix(scan): ignore wp-cli stderr messages (#825 ) (#915 )
* refactor
* feat(report): fill Red Hat CVE data for all distros
* fix lint err
* fix cve judgment (#921 )
2019-11-25 17:01:18 +09:00
Shigechika AIKAWA
bd7e61d7cc
fix(scan): ignore wp-cli stderr messages ( #825 ) ( #915 )
2019-11-22 20:58:24 +09:00
Shigechika AIKAWA
69214e0c22
fix(scan): ignore wp-cli stderr messages ( #825 ) ( #915 )
2019-11-01 10:01:50 +09:00
Wagde Zabit
45bff26558
Consider grep return value 1 as success ( #907 )
...
* Allow Offline scanning on Alpine
* Consider grep return value 1 as success
2019-09-18 23:26:37 +09:00
Kota Kanbe
b2e429ccc6
fix(log): add .log extension to vuls logfile ( #910 )
2019-09-18 23:21:06 +09:00
Kota Kanbe
76363c227b
fix(report): enable to report when the sshkey not exist ( #909 )
2019-09-18 22:40:36 +09:00
Kota Kanbe
d5a3e5c2c5
fix(report): fix cert key in result json ja to jp ( #908 )
2019-09-18 19:30:32 +09:00
Kota Kanbe
2b02807ef0
fix(report): ignore exploits of no-cve-id vulns ( #906 )
2019-09-13 12:49:57 +09:00
Kota Kanbe
be659ae094
fix(docker): add git to image ( #905 )
2019-09-13 01:10:27 +09:00
Kota Kanbe
b2c105adbc
fix(tui): enable to exec tui mode without cve.sqlite3 ( #904 )
2019-09-12 18:35:21 +09:00
Kota Kanbe
c61f462948
fix(report): show POC, CERT in tui and format-list. use vendor summary over NVD ( #902 )
...
* fix(report): show POC, CERT in tui and format-list. show vendor summary
* fix test case
2019-09-10 10:00:17 +09:00
Kota Kanbe
3ffed18e02
Change GPL v3 to AGPL v3 because of aquasecurity/trivy dependency ( #897 )
2019-09-09 21:12:17 +09:00
Kota Kanbe
f54e7257d1
fix(report): fill cert alerts from NVD and JVN feeds ( #899 )
...
* fix(report): fill cert alerts from NVD and JVN feeds
* fix import alias cve to cvemodels
* fix import alias cve to cvemodels
* remove unnecessary func
2019-09-09 21:11:59 +09:00
Kota Kanbe
cc13b6a27c
fix(report): enable to report without NVD, exit if no OVAL data ( #900 )
...
* feat(report): enable to report without NVD
* fix(report): enable to report without NVD and exit if no OVAL data
* update deps
* go mod tidy
* fix err msg
2019-09-09 21:00:34 +09:00
Kota Kanbe
8877db1979
udpate deps, go 1.13 ( #901 )
2019-09-09 20:26:26 +09:00
Tomoya Amachi
af58122c91
for Amazon Linux image ( #896 )
...
* fit amazon linux image's version to OVAL
* add Arch to SrcPackage
* lint go.mod
* make fmt
2019-09-06 10:34:14 +09:00
