Kota Kanbe
e788e6a5ad
Support Alpine Linux #194 ( #545 )
...
* Support Alpine Linux #194
* Fix testcase
* Fix README
* Fix dep files
* Fix changelog
* Bump up version
2017-12-01 23:17:28 +09:00
Kota Kanbe
00c690f516
Add pseudo server type for non-ssh scanning (only cpe scan) #512 ( #531 )
...
* Add pseudo server type for non-ssh scanning (only cpe scan) #512
* Don't check hostname for pseudo type
* Update README.md
2017-11-02 17:02:06 +09:00
sadayuki-matsuno
eb2acaff22
send slack msg by api ( #525 )
2017-10-26 13:30:01 +09:00
shimojomasatsugummm
84d0655c52
fix typo Privious -> Previous ( #523 )
2017-10-25 18:51:29 +09:00
Kota Kanbe
5798e3af83
Add filter options to tui subcommand ( #508 )
2017-09-29 08:37:32 +09:00
Kota Kanbe
7a1f132c1f
Add -ignore-unfixed option to report subcommand #485 ( #507 )
2017-09-28 17:29:47 +09:00
Kota Kanbe
132432dce6
Support SUSE Enterprise Linux ( #487 )
...
* Support SUSE Enterprise Linux
* Implement Reboot Required detection on SLES
* Fix query OVAL because SUSE provides OVAL data each major.minor version
* Update README
* Support SUSE Enterprise 11
2017-09-28 12:23:19 +09:00
Kota Kanbe
820831fa5d
Fix sort order of servers on TUI ( #481 )
2017-09-05 15:54:13 +09:00
sadayuki-matsuno
ec92f7797f
add windows type ( #470 )
2017-08-28 18:49:34 +08:00
sadayuki-matsuno
21f13b55eb
export fill cve info ( #467 )
2017-08-23 18:09:22 +09:00
kota kanbe
58b0d03e28
No escape on details view in TUI
2017-08-23 12:02:58 +09:00
kota kanbe
3790197699
Fix ignoreCves option
2017-08-22 20:28:24 +09:00
kota kanbe
b5cb08ac43
Handle kernel's vulns using OVAL
2017-08-22 17:44:50 +09:00
kota kanbe
93f741da35
Show Not Fixed Yet in report, tui
2017-08-19 00:21:11 +09:00
kota kanbe
648a999514
Include config in json result
2017-08-18 22:39:45 +09:00
kota kanbe
6129ac7bd4
Change model ScanResult.ScannedCves.AffectedPackages
2017-08-17 12:18:06 +09:00
kota kanbe
c66898e608
Set actually affected package's name only to vulnInfo.PackageNames
2017-08-13 20:50:26 +09:00
sadayuki-matsuno
95eb980f58
export FillWithOval ( #462 )
2017-08-11 17:27:10 +09:00
kota kanbe
774c78add0
Fix oval-db existence check on reporting
2017-08-09 16:18:09 +09:00
sadayuki-matsuno
cbd1c12773
add s3 dirctory option ( #457 )
2017-08-09 16:18:08 +09:00
kota kanbe
5f49e7da8e
Refactoring
2017-08-09 16:15:25 +09:00
kota kanbe
9e0032b258
Fix cvss link in slack notification
2017-08-09 16:15:25 +09:00
kota kanbe
008da49b83
Imlement OVAL scan on Oracle Linux
2017-08-09 16:15:25 +09:00
kota kanbe
9899cba816
Display summary of advisory when no entry in NVD, OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
27724a2faf
Use CVSS seveirty of distro advisory when no entiry in NVD and OVAL
2017-08-09 16:15:25 +09:00
kota kanbe
8b6a283114
Add a deep flag to scan
2017-08-09 16:15:25 +09:00
kota kanbe
56603dcfae
Fix a bug of lower limit of cursor movement in TUI
2017-08-09 16:15:25 +09:00
kota kanbe
9b6d84def6
Fix false positive detection on RHEL, Amazon and Oracle
2017-08-09 16:15:25 +09:00
kota kanbe
ed162d7d6e
Display the information of yum updateinfo on TUI (for RHEL, Amazon, Oracle)
2017-08-09 16:15:25 +09:00
kota kanbe
1aae425945
Undisplay the number of CVEs at the end of 'scan --package-list-only'
2017-08-09 16:15:25 +09:00
kota kanbe
26e447f11a
Check existence and last modified time of local OVAL database when reporting
2017-08-09 16:15:25 +09:00
Kota Kanbe
a9ebac3818
nosudo on CentOS and Fetch Changelogs on Amazon, RHEL ( #448 )
...
* Use repoquery for no sudo and avoid unintended line feed of yum or rpm. #444
* Change data type of enablerepo in config.toml. string to array
* Fetch yum changelogs at once then grep CVE-IDs
* Fix changelog parse logic and Update Gopkg
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
738e9fb119
change logrus package to lowercase and update other packages ( #446 )
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
7778783dd8
add db backend redis ( #445 )
2017-08-09 16:15:25 +09:00
Kota Kanbe
c442a433b0
Add OVAL HTTP health check
2017-08-09 16:15:24 +09:00
Kota Kanbe
f7aa85746d
Add retry-max to HTTP access
2017-08-09 16:15:24 +09:00
Kota Kanbe
1883da3b2a
Implement HTTP access to oval-dictionary
2017-08-09 16:15:24 +09:00
Kota Kanbe
997dd6022f
Kind error message when SSH connection fails
2017-08-09 16:15:24 +09:00
Kota Kanbe
63394a2400
Fix error handling while loading JSON in reporting
2017-08-09 16:15:24 +09:00
Kota Kanbe
a662b038dc
Fix CVSS2 in TUI
2017-08-09 16:15:24 +09:00
Kota Kanbe
e9df2bfa01
Convert null to empty in JSON
2017-08-09 16:15:24 +09:00
Kota Kanbe
a7951b727c
Remove commented out code
2017-08-09 16:15:24 +09:00
Kota Kanbe
c6ad9ea57a
Fix tui
2017-08-09 16:15:24 +09:00
Kota Kanbe
a14810bbd4
Fix -to-slack
2017-08-09 16:15:24 +09:00
Kota Kanbe
bc5a95ebb3
Fix -to-email
2017-08-09 16:15:24 +09:00
Kota Kanbe
ad096196ee
Add vendor links to -format-shor-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
af66e44427
SHow Vendor Links in text report
2017-08-09 16:15:24 +09:00
Kota Kanbe
0a012273ec
Fix -ignore-unscored-cves
2017-08-09 16:15:24 +09:00
Kota Kanbe
73b011eba7
Sort results order by CVSS score, CVE-ID
2017-08-09 16:15:24 +09:00
Kota Kanbe
d9bc4499a4
Refactoring
2017-08-09 16:15:24 +09:00
