Kota Kanbe
e788e6a5ad
Support Alpine Linux #194 ( #545 )
...
* Support Alpine Linux #194
* Fix testcase
* Fix README
* Fix dep files
* Fix changelog
* Bump up version
2017-12-01 23:17:28 +09:00
nashiox
e137ebb9c2
Fix package query fails on debian based container ( #519 ) ( #522 )
...
* Fix package query fails on debian based container (#519 )
* Fix executil test (#519 )
2017-10-25 18:49:47 +09:00
Kota Kanbe
5a0a6abf11
Fix OVAL detection on Debian and Ubuntu ( #509 )
...
* Add filter options to tui subcommand (#508 )
* Capture version of source packages on Debian based linux
* Change makefile, gofmt -s
* Refactoring
* Implement OVAL detection of source packages for Debian, Ubuntu
2017-10-13 17:22:11 +09:00
Xiuming Chen
e5eb8e42f5
Debian: Use --showformat flag to get status of packages and ignore n(not-inst… ( #484 )
...
* Use --showformat flag to get status of packages and ignore n(not-installed) and c(removed, only has config files remaining) packages.
* Ignoring all packages that are not in 'Installed' status.
* Simplify char escaping in the command.
* Fix typo.
2017-09-27 09:43:59 +09:00
kota kanbe
b5cb08ac43
Handle kernel's vulns using OVAL
2017-08-22 17:44:50 +09:00
kota kanbe
6129ac7bd4
Change model ScanResult.ScannedCves.AffectedPackages
2017-08-17 12:18:06 +09:00
kota kanbe
a233e08929
When scanning raspbian, always scan with deep scan mode
2017-08-09 16:18:09 +09:00
kota kanbe
2887dc0d36
Fix configtest to match fast and deep scan mode
2017-08-09 16:15:25 +09:00
kota kanbe
8b6a283114
Add a deep flag to scan
2017-08-09 16:15:25 +09:00
kota kanbe
4379b8bacf
Use version comparison logic when parsing change log (Ubuntu, Debian)
2017-08-09 16:15:25 +09:00
kota kanbe
1752736714
Fix nil pointer
2017-08-09 16:15:25 +09:00
Kota Kanbe
a9ebac3818
nosudo on CentOS and Fetch Changelogs on Amazon, RHEL ( #448 )
...
* Use repoquery for no sudo and avoid unintended line feed of yum or rpm. #444
* Change data type of enablerepo in config.toml. string to array
* Fetch yum changelogs at once then grep CVE-IDs
* Fix changelog parse logic and Update Gopkg
2017-08-09 16:15:25 +09:00
sadayuki-matsuno
7778783dd8
add db backend redis ( #445 )
2017-08-09 16:15:25 +09:00
Kota Kanbe
c442a433b0
Add OVAL HTTP health check
2017-08-09 16:15:24 +09:00
Kota Kanbe
997dd6022f
Kind error message when SSH connection fails
2017-08-09 16:15:24 +09:00
Kota Kanbe
7f8c975bd7
Avoid concurrent Map writes
2017-08-09 16:15:24 +09:00
Kota Kanbe
3be11cf52f
Implement format-short-text
2017-08-09 16:15:24 +09:00
Kota Kanbe
cfb848918f
Change structure of ScanResult.[]VulnInfo to Map
2017-08-09 16:15:24 +09:00
Kota Kanbe
b977558f38
Change structure of VulnInfo.Pacakges to []string
2017-08-09 16:15:24 +09:00
Kota Kanbe
210e3dc990
Change ScanResult.Packages structure to Map
2017-08-09 16:15:24 +09:00
Kota Kanbe
d626cc8a8b
Rename PackageInfoList to Packages
2017-08-09 16:15:24 +09:00
Kota Kanbe
23c177ed4a
-package-list-only for Debian
2017-08-09 16:15:23 +09:00
Kota Kanbe
d077c29716
Fix scan confidence on Ubuntu/Debian/Raspbian #362
2017-03-13 20:55:23 +09:00
Kota Kanbe
688cfd6872
Deprecate prepare subcommand to minimize the root authority #375
2017-03-13 13:21:01 +09:00
Kota Kanbe
a86035c0bf
Output changelog in report, TUI and JSON for Ubuntu/Debian/CentOS
2017-03-02 22:22:35 +09:00
Kota Kanbe
1b9aafbbaf
Output confidence ranking of detection accuracy to JSON or Reporting
2017-02-22 20:51:58 +09:00
Kota Kanbe
1d3ee6a241
Merge pull request #328 from federacy/leniant_changelog_parsing_for_debian
...
Add leniancy to the version matching for debian to account for versio…
2017-02-22 20:43:46 +09:00
Kota Kanbe
6e08bd23f4
Merge pull request #330 from knqyf263/support_raspbian
...
Support Raspbian
2017-02-14 12:15:28 +09:00
knqyf263
bee25f5aa2
Support Raspbian
2017-02-13 22:15:09 +09:00
Kota Kanbe
386b97d2be
Continue scanning even when some hosts have tech issues
...
see #264
2017-02-13 21:55:55 +09:00
Kota Kanbe
00660485b7
Merge pull request #324 from federacy/aptitude_changelog_more_to_cat
...
aptitude changelog defaults to using more, which is not interactive a…
2017-02-13 14:54:12 +09:00
James Sulinski
981631503a
Add leniancy to the version matching for debian to account for versions without the "+" when package maintainers aren't using them.
2017-02-10 11:38:46 -08:00
James Sulinski
b5c2718756
aptitude changelog defaults to using more, which is not interactive and breaks docker scans. Set PAGER=cat before running to default to cat.
2017-02-09 00:54:47 -08:00
James Sulinski
a03a803b89
Reduce privilege requirements for commands that don't need sudo
2017-02-09 00:47:08 -08:00
Kota Kanbe
42a6004c7d
Fix the changelog cache logic for ubuntu/debian
2017-01-28 04:08:57 +09:00
Kota Kanbe
20275a1063
Add local scan mode.
...
If the scan target server is localhost, Don't use SSH. #210
2017-01-17 00:16:46 +09:00
Kota Kanbe
155cadf901
Add report subcommand, change scan options. Bump up ver #239
2017-01-05 13:40:25 +09:00
Oliver Bristow
2310522806
Fix non-interactive apt-get install #251
2016-11-11 19:13:51 +00:00
Kota Kanbe
7681b277cf
Fix changelog cache bug on Ubuntu and Debian #235
2016-11-01 13:03:44 +09:00
Kota Kanbe
21beb396b4
Confirm before installing dependencies on prepare
2016-10-13 16:06:48 +09:00
Kota Kanbe
cf7990d444
Fix locale env var LANG to LANGUAGE
2016-10-12 08:59:05 +09:00
Kota Kanbe
e3fc3aa9d1
Fix not working changelog cache on Container
2016-09-20 20:29:02 +09:00
Kota Kanbe
dd1d3a05fa
High speed scan on Ubuntu/Debian
2016-09-12 21:10:21 +09:00
Kota Kanbe
c8a9bdc517
Merge pull request #152 from sadayuki-matsuno/delete_sqlite
...
delete sqlite3
2016-09-06 13:19:07 +09:00
Sadayuki Matsuno
595729cdf8
delete sqlite3
2016-09-06 12:25:47 +09:00
Kota Kanbe
a60a5d6eab
Remove deprecated options -use-unattended-upgrades,-use-yum-plugin-security
2016-08-30 12:37:03 +09:00
itchyny
7dfc9815b3
Reduce regexp compilation
...
- use regexp.MustCompile instead of regexp.Compile
- use strings.HasPrefix instead of regular expression when it is enough
2016-08-26 20:39:31 +09:00
Kota Kanbe
d8dc3650d3
Add testcases for #153
2016-08-23 19:26:34 +09:00
Takayuki Ushida
b1f5bdd8b2
Fix CVE-ID is truncated to 4 digits
2016-08-20 21:23:31 +09:00
kota kanbe
f939041606
Disable -ask-sudo-password for security reasons
2016-08-16 11:09:01 +09:00
