kota kanbe
774c78add0
Fix oval-db existence check on reporting
2017-08-09 16:18:09 +09:00
sadayuki-matsuno
cbd1c12773
add s3 dirctory option ( #457 )
2017-08-09 16:18:08 +09:00
kota kanbe
5f49e7da8e
Refactoring
2017-08-09 16:15:25 +09:00
kota kanbe
9e0032b258
Fix cvss link in slack notification
2017-08-09 16:15:25 +09:00
kota kanbe
008da49b83
Imlement OVAL scan on Oracle Linux
2017-08-09 16:15:25 +09:00
kota kanbe
9899cba816
Display summary of advisory when no entry in NVD, OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
27724a2faf
Use CVSS seveirty of distro advisory when no entiry in NVD and OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
8b6a283114
Add a deep flag to scan
2017-08-09 16:15:25 +09:00
kota kanbe
56603dcfae
Fix a bug of lower limit of cursor movement in TUI
2017-08-09 16:15:25 +09:00
kota kanbe
9b6d84def6
Fix false positive detection on RHEL, Amazon and Oracle
2017-08-09 16:15:25 +09:00
kota kanbe
ed162d7d6e
Display the information of yum updateinfo on TUI (for RHEL, Amazon, Oracle)
2017-08-09 16:15:25 +09:00
kota kanbe
1aae425945
Undisplay the number of CVEs at the end of 'scan --package-list-only'
2017-08-09 16:15:25 +09:00
kota kanbe
26e447f11a
Check existence and last modified time of local OVAL database when reporting
2017-08-09 16:15:25 +09:00
Kota Kanbe
a9ebac3818
nosudo on CentOS and Fetch Changelogs on Amazon, RHEL ( #448 )
...
* Use repoquery for no sudo and avoid unintended line feed of yum or rpm. #444
* Change data type of enablerepo in config.toml. string to array
* Fetch yum changelogs at once then grep CVE-IDs
* Fix changelog parse logic and Update Gopkg
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
738e9fb119
change logrus package to lowercase and update other packages ( #446 )
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
7778783dd8
add db backend redis ( #445 )
2017-08-09 16:15:25 +09:00
Kota Kanbe
c442a433b0
Add OVAL HTTP health check
2017-08-09 16:15:24 +09:00
Kota Kanbe
f7aa85746d
Add retry-max to HTTP access
2017-08-09 16:15:24 +09:00
Kota Kanbe
1883da3b2a
Implement HTTP access to oval-dictionary
2017-08-09 16:15:24 +09:00
Kota Kanbe
997dd6022f
Kind error message when SSH connection fails
2017-08-09 16:15:24 +09:00
Kota Kanbe
63394a2400
Fix error handling while loading JSON in reporting
2017-08-09 16:15:24 +09:00
Kota Kanbe
a662b038dc
Fix CVSS2 in TUI
2017-08-09 16:15:24 +09:00
Kota Kanbe
e9df2bfa01
Convert null to empty in JSON
2017-08-09 16:15:24 +09:00
Kota Kanbe
a7951b727c
Remove commented out code
2017-08-09 16:15:24 +09:00
Kota Kanbe
c6ad9ea57a
Fix tui
2017-08-09 16:15:24 +09:00
Kota Kanbe
a14810bbd4
Fix -to-slack
2017-08-09 16:15:24 +09:00
Kota Kanbe
bc5a95ebb3
Fix -to-email
2017-08-09 16:15:24 +09:00
Kota Kanbe
ad096196ee
Add vendor links to -format-shor-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
af66e44427
SHow Vendor Links in text report
2017-08-09 16:15:24 +09:00
Kota Kanbe
0a012273ec
Fix -ignore-unscored-cves
2017-08-09 16:15:24 +09:00
Kota Kanbe
73b011eba7
Sort results order by CVSS score, CVE-ID
2017-08-09 16:15:24 +09:00
Kota Kanbe
d9bc4499a4
Refactoring
2017-08-09 16:15:24 +09:00
Kota Kanbe
4fcdea3ccb
Implement -format-full-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
3be11cf52f
Implement format-short-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
d626cc8a8b
Rename PackageInfoList to Packages
2017-08-09 16:15:24 +09:00
Kota Kanbe
a2c364f9eb
Refacotring
2017-08-09 16:15:23 +09:00
Kota Kanbe
17a4e532c1
Fix testcase
2017-08-09 16:15:23 +09:00
Kota Kanbe
c103b79ec2
Change models structure
2017-08-09 16:15:23 +09:00
Kota Kanbe
b545b5d0a3
Unify the models of NVD, JVN, OVAL
2017-08-09 16:15:23 +09:00
Kota Kanbe
342a1c6cff
Refactoring
2017-08-09 16:15:23 +09:00
Kota Kanbe
ec092501c3
[BreakingChange]Remove models.ScanHistory
2017-08-09 16:15:23 +09:00
Kota Kanbe
703c142659
Change NVD URL to new one ( #419 )
2017-04-06 18:08:24 +09:00
Kota Kanbe
b33cd54916
Update deps, Change deps tool from glide to dep ( #412 )
2017-04-01 20:06:28 +09:00
Teppei Fukuda
c7019debb9
Notify the difference from the previous scan result ( #392 )
...
add diff option
2017-03-23 23:58:05 +09:00
Avi Miller
986762ca85
Add Oracle Linux support ( #386 )
...
Adding support for Oracle Linux
2017-03-16 17:07:43 +09:00
Kota Kanbe
e1de8ab626
Merge pull request #370 from ohsawa0515/support_iam_role
...
Support IAM role for report to S3.
2017-03-07 14:07:32 +09:00
Kota Kanbe
732d95098a
Fix updatalbe packages count #373
2017-03-07 13:49:25 +09:00
Shuichi Ohsawa
52f0943207
Add ec2 roles credentials.
2017-03-07 12:37:31 +09:00
Kota Kanbe
a86035c0bf
Output changelog in report, TUI and JSON for Ubuntu/Debian/CentOS
2017-03-02 22:22:35 +09:00
Kota Kanbe
b4be11775e
Fix candidate to confidence.
2017-02-23 12:05:13 +09:00
