Kota Kanbe
03579126fd
refactor(config): localize config used like a global variable ( #1179 )
...
* refactor(report): LocalFileWriter
* refactor -format-json
* refacotr: -format-one-email
* refactor: -format-csv
* refactor: -gzip
* refactor: -format-full-text
* refactor: -format-one-line-text
* refactor: -format-list
* refacotr: remove -to-* from config
* refactor: IgnoreGitHubDismissed
* refactor: GitHub
* refactor: IgnoreUnsocred
* refactor: diff
* refacotr: lang
* refacotr: cacheDBPath
* refactor: Remove config references
* refactor: ScanResults
* refacotr: constant pkg
* chore: comment
* refactor: scanner
* refactor: scanner
* refactor: serverapi.go
* refactor: serverapi
* refactor: change pkg structure
* refactor: serverapi.go
* chore: remove emtpy file
* fix(scan): remove -ssh-native-insecure option
* fix(scan): remove the deprecated option `keypassword`
2021-02-25 05:54:17 +09:00
Kota Kanbe
51099f42c3
fix(tui): runtime panic when tui with docker-base-setup ( #1148 )
...
* fix(tui): runtime panic when tui with docker-base-setup
* pass test case
2021-01-26 09:40:26 +09:00
Kota Kanbe
1100c133ba
feat(config): Default values for WordPress scanning to be set in config.toml ( #1140 )
...
* chore: update go mod
* fix(wordpress): set default if defined in config.toml
2021-01-21 06:22:25 +09:00
Kota Kanbe
554b6345a2
chore: go mod update ( #1127 )
2021-01-14 08:12:47 +09:00
Kota Kanbe
b5506a1368
chore: go mod update ( #1125 )
2021-01-13 11:56:35 +09:00
Kota Kanbe
0b55f94828
Improve implementation around config ( #1122 )
...
* refactor config
* fix saas config
* feat(config): scanmodule for each server in config.toml
* feat(config): enable to specify containersOnly in config.toml
* add new keys of config.toml to discover.go
* fix summary output, logging
2021-01-13 08:46:27 +09:00
Kota Kanbe
d7a613b710
chore: go mod update ( #1118 )
2021-01-07 08:02:29 +09:00
Kota Kanbe
b13f93a2d3
feat(scan): support dnf modules ( #1114 )
...
* feat(scan): support dnf modules
* change dnf module list --installed to --enabled
* chore: refactor
* feat(report): detect logic for dnf modularity label
* fix func name
* chore: update go mods
2021-01-06 11:36:41 +09:00
Kota Kanbe
fb1fbf8f95
feat(report): Add NVD as a source for mitigations, primarySrc URL and Patch URL ( #1097 )
...
* feat(report): Add NVD as a src for mitigations.
* feat(report): display "Vendor Advisory" URL in NVD
* feat(report): display patch urls in report, tui
2020-12-24 08:37:10 +09:00
Kota Kanbe
43ed904db1
fix(deps): update dependencies ( #1094 )
...
* fix(dpes): update dependencies
* update go ver
* update go ver
* update go
* update go
2020-12-15 04:32:23 +09:00
sadayuki-matsuno
9497365758
update pkg ( #1087 )
2020-12-04 15:57:02 +09:00
Kota Kanbe
d02535d053
fix(debian): false negative of kernel cves with rdb backend ( #1075 )
...
* fix(debian): false negative of kernel cves with rdb backend
* update golangci.yml
* add --timeout=10m to golangci.yml
2020-11-18 10:32:37 +09:00
Kota Kanbe
2fc3462d35
fix(libscan): update trivy deps ( #1070 )
2020-11-05 15:38:12 +09:00
shopper
425c585e47
Support for smtp LOGIN authentication ( #1048 )
...
* finished to implement new mail client
* delete email_test.go
2020-09-04 15:45:29 +09:00
Kota Kanbe
58cf1f4c8e
refactor(typo): fix typos ( #1041 )
2020-08-24 16:34:32 +09:00
Kota Kanbe
a0e592b934
fix(report): fix segfault while uploading to s3 ( #1033 )
2020-08-07 10:31:43 +09:00
Kota Kanbe
7eccc538bb
fix(msfdb): udpate go-msfdb-deps ( #1032 )
2020-08-06 16:54:14 +09:00
takuzoo
11a7a0c934
Display metasploit module information for each detected CVE-IDs ( #1011 )
...
* add metasploit
* fix go deps
* fix msf report
* fix msfdb server port number
* delete non-unique msfdb url from fulltext report
* fix(report): validate msfdb config on report (#1 )
* fix(msfdb): update deps (go-msfdb)
* version up go-msfdb v0.1.0
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com >
2020-07-03 14:05:07 +09:00
Kota Kanbe
c11ba27509
fix(libscan): include a lockfile path of libs ( #1012 )
2020-06-24 10:46:00 +09:00
Kota Kanbe
4d8599e4fc
update deps ( #1006 )
...
see https://github.com/knqyf263/go-apk-version/pull/1
2020-06-16 07:48:07 +09:00
sadayuki-matsuno
d18e7a751d
add trivy parser ( #981 )
...
* add trivy parser
* fix test
* format
* add title and summary
* add trivy parse command
* add uploader
* set args by env
* add README
* add err check
* fix
* fix
* fix
* fix test
* update trivy
* refactor
* delete require uuid
* delete uuid from trivy parser
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com >
2020-05-29 18:06:45 +09:00
kazuminn
8d5ea98e50
add -wp-ignore-inactive flag which ignores inactive plugin or themes ( #974 )
...
* command
* config
* ignore inactive
* fix
* add test
* fmt
* add unset test
* rename
* add test
* refactor
* fix
* refactor
* refactor
* fix golangci-lint error
2020-05-29 15:27:47 +09:00
Kota Kanbe
3f5bb6ab29
fix(scan): alpine detection #965 ( #966 )
...
* fix(scan): alpine detection #965
* use knqyf263/go-apk-version
2020-05-08 16:12:01 +09:00
Kota Kanbe
ebe5f858c8
update trivy, and unsupport image scanning feature ( #971 )
...
* update trivy, fanal. unsupport image scanning
* Update models/library.go
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
* add -no-progress flag to report/tui cmd
* Display trivy vuln info to tui/report
* add detection method to vulninfo detected by trivy
* fix(uuid): change uuid lib to go-uuid #929 (#969 )
* update trivy, fanal. unsupport image scanning
* Update models/library.go
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
* add -no-progress flag to report/tui cmd
* Display trivy vuln info to tui/report
* add detection method to vulninfo detected by trivy
* unique ref links in TUI
* download trivy DB only when lock file is specified in config.toml
Co-authored-by: Teppei Fukuda <teppei@elab.ic .i.u-tokyo.ac.jp>
2020-05-08 15:24:39 +09:00
Kota Kanbe
9dd025437b
fix(uuid): change uuid lib to go-uuid #929 ( #969 )
2020-05-06 14:14:07 +09:00
Kota Kanbe
3093426458
fix(logging): panic if no write permission #949 ( #968 )
2020-04-27 17:37:30 +09:00
Kota Kanbe
56b12c38d2
fix(config): not working with empty config #962 ( #963 )
2020-04-23 10:50:35 +09:00
Kota Kanbe
749ead5d4a
update go mod ( #960 )
2020-04-20 21:33:11 +09:00
sadayuki-matsuno
7278982af4
update fanal ( #931 )
2020-01-30 20:40:49 +09:00
Kota Kanbe
76363c227b
fix(report): enable to report when the sshkey not exist ( #909 )
2019-09-18 22:40:36 +09:00
Kota Kanbe
8877db1979
udpate deps, go 1.13 ( #901 )
2019-09-09 20:26:26 +09:00
Tomoya Amachi
af58122c91
for Amazon Linux image ( #896 )
...
* fit amazon linux image's version to OVAL
* add Arch to SrcPackage
* lint go.mod
* make fmt
2019-09-06 10:34:14 +09:00
Kota Kanbe
b7ca5e5590
feat(scan): add -wordpress-only and -libs-only flag ( #898 )
2019-09-06 10:33:03 +09:00
Kota Kanbe
1fbd516b83
fix(report): fix too many variables while reporting ( #888 )
2019-08-25 17:56:47 +09:00
Kota Kanbe
3d4a5d9917
fix(report): Unsupport family: centos ( #876 )
...
* fix(report): Unsupport family: centos
* go mod tidy
2019-07-25 12:47:41 +09:00
Masahiro Fujimura
a977533c78
Fix performance and bug ( #867 )
...
* Fix performance
* Update goval-dictionary
* Go mod tidy
2019-07-15 21:20:01 +09:00
Tomoya Amachi
9e066008c3
fix go module problems & update trivy version ( #864 )
...
* update trivy version
* use goval-dictionary@v0.1.4
2019-07-07 17:04:52 +09:00
Kota Kanbe
3e5390309c
feat(redhat): ignore will not fix vulns ( #858 )
2019-07-03 20:59:23 +09:00
Sajan Alexander
77b5df896a
update goval-dictionary dependency to valid version ( #839 )
2019-06-14 09:28:39 +09:00
Kota Kanbe
a8a90d7c63
refactor(report): speed up oval reporting #833 ( #834 )
2019-06-13 17:47:36 +09:00
Tomoya Amachi
abcea1a14d
add Library Scan (with image scan) ( #829 )
...
* add static container image scan
* server has many staticContainers
* use go module
* for staticContainer
* fix typo
* fix setErrs error
* change name : StaticContainer -> Image
* add scan -images-only flag
* fix makefile
* fix makefile for go module
* use rpmcmd instead of rpm
* add scrutinizer.yml
* change scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* delete scrutinizer
* add report test
* add sourcePackages and Arch
* fix for sider
* fix staticContainer -> image
* init scan library
* add library scan for servers
* fix tui bug
* fix lint error
* divide WpPackageFixStats and LibraryPackageFixedIns
* fix error
* Delete libManager_test.go
* stop use alpine os if err occurred in container
* merge upstream/master
* Delete libManager.go
* update goval-dictionary
* fix go.mod
* update Readme
* add feature : auto detect lockfiles
2019-06-12 18:50:07 +09:00
