kota kanbe
27724a2faf
Use CVSS seveirty of distro advisory when no entiry in NVD and OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
8b6a283114
Add a deep flag to scan
2017-08-09 16:15:25 +09:00
kota kanbe
4379b8bacf
Use version comparison logic when parsing change log (Ubuntu, Debian)
2017-08-09 16:15:25 +09:00
kota kanbe
56603dcfae
Fix a bug of lower limit of cursor movement in TUI
2017-08-09 16:15:25 +09:00
kota kanbe
1752736714
Fix nil pointer
2017-08-09 16:15:25 +09:00
kota kanbe
b1428b6758
Fix a bug of fill oval information of Ubuntu
2017-08-09 16:15:25 +09:00
kota kanbe
9b6d84def6
Fix false positive detection on RHEL, Amazon and Oracle
2017-08-09 16:15:25 +09:00
kota kanbe
ed162d7d6e
Display the information of yum updateinfo on TUI (for RHEL, Amazon, Oracle)
2017-08-09 16:15:25 +09:00
kota kanbe
1aae425945
Undisplay the number of CVEs at the end of 'scan --package-list-only'
2017-08-09 16:15:25 +09:00
kota kanbe
26e447f11a
Check existence and last modified time of local OVAL database when reporting
2017-08-09 16:15:25 +09:00
Kota Kanbe
ffbaa0a508
Extract Advisory.Description on RHEL, Amazon, Oracle ( #450 )
2017-08-09 16:15:25 +09:00
Kota Kanbe
a9ebac3818
nosudo on CentOS and Fetch Changelogs on Amazon, RHEL ( #448 )
...
* Use repoquery for no sudo and avoid unintended line feed of yum or rpm. #444
* Change data type of enablerepo in config.toml. string to array
* Fetch yum changelogs at once then grep CVE-IDs
* Fix changelog parse logic and Update Gopkg
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
738e9fb119
change logrus package to lowercase and update other packages ( #446 )
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
7778783dd8
add db backend redis ( #445 )
2017-08-09 16:15:25 +09:00
Kota Kanbe
c442a433b0
Add OVAL HTTP health check
2017-08-09 16:15:24 +09:00
Kota Kanbe
f7aa85746d
Add retry-max to HTTP access
2017-08-09 16:15:24 +09:00
Kota Kanbe
1883da3b2a
Implement HTTP access to oval-dictionary
2017-08-09 16:15:24 +09:00
Kota Kanbe
997dd6022f
Kind error message when SSH connection fails
2017-08-09 16:15:24 +09:00
Kota Kanbe
63394a2400
Fix error handling while loading JSON in reporting
2017-08-09 16:15:24 +09:00
Kota Kanbe
a662b038dc
Fix CVSS2 in TUI
2017-08-09 16:15:24 +09:00
Kota Kanbe
e9df2bfa01
Convert null to empty in JSON
2017-08-09 16:15:24 +09:00
Kota Kanbe
a7951b727c
Remove commented out code
2017-08-09 16:15:24 +09:00
Kota Kanbe
c6ad9ea57a
Fix tui
2017-08-09 16:15:24 +09:00
Kota Kanbe
a14810bbd4
Fix -to-slack
2017-08-09 16:15:24 +09:00
Kota Kanbe
bc5a95ebb3
Fix -to-email
2017-08-09 16:15:24 +09:00
Kota Kanbe
306182e2ae
Fix test cases
2017-08-09 16:15:24 +09:00
Kota Kanbe
ad096196ee
Add vendor links to -format-shor-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
af66e44427
SHow Vendor Links in text report
2017-08-09 16:15:24 +09:00
Kota Kanbe
0a012273ec
Fix -ignore-unscored-cves
2017-08-09 16:15:24 +09:00
Kota Kanbe
73b011eba7
Sort results order by CVSS score, CVE-ID
2017-08-09 16:15:24 +09:00
Kota Kanbe
a31974a3c0
Use Severity ranking in OVAL when the CVSS scores are empty.
2017-08-09 16:15:24 +09:00
Kota Kanbe
eb02bdd95a
Add test cases of models.Packages
2017-08-09 16:15:24 +09:00
Kota Kanbe
74805c6be8
Add test cases of CveContents
2017-08-09 16:15:24 +09:00
Kota Kanbe
d9bc4499a4
Refactoring
2017-08-09 16:15:24 +09:00
Kota Kanbe
9128e2748b
Refactoring
2017-08-09 16:15:24 +09:00
Kota Kanbe
7f8c975bd7
Avoid concurrent Map writes
2017-08-09 16:15:24 +09:00
Kota Kanbe
8b6c841b1e
Fix TestCase
2017-08-09 16:15:24 +09:00
Kota Kanbe
4fcdea3ccb
Implement -format-full-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
3be11cf52f
Implement format-short-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
b285cb0e57
Remove CRUD funcs of CveContents
2017-08-09 16:15:24 +09:00
Kota Kanbe
dd5a7920e5
Add JSON Version
2017-08-09 16:15:24 +09:00
Kota Kanbe
cfb848918f
Change structure of ScanResult.[]VulnInfo to Map
2017-08-09 16:15:24 +09:00
Kota Kanbe
b977558f38
Change structure of VulnInfo.Pacakges to []string
2017-08-09 16:15:24 +09:00
Kota Kanbe
210e3dc990
Change ScanResult.Packages structure to Map
2017-08-09 16:15:24 +09:00
Kota Kanbe
f36671784e
Fix testcase
2017-08-09 16:15:24 +09:00
Kota Kanbe
d626cc8a8b
Rename PackageInfoList to Packages
2017-08-09 16:15:24 +09:00
Kota Kanbe
f26b61d773
Change CveContents data type to map
2017-08-09 16:15:24 +09:00
Kota Kanbe
12c2d3cbc6
Fix test cases
2017-08-09 16:15:24 +09:00
Kota Kanbe
209ca704de
Fixed a bug caused by capturing epoch number on RedHat.go
2017-08-09 16:15:24 +09:00
Kota Kanbe
2e37d3adc1
Improve sort logics
2017-08-09 16:15:24 +09:00
