MaineK00n
96c3592db1
breaking-change(go-cve-dict): support new go-cve-dictionary ( #1277 )
...
* feat(model): change CveContents(map[string]CveContent) to map[string][]CveContent
* fix(cpescan): use CveIDSource
* chore: check Nvd, Jvn data
* chore: go-cve-dictionary update
* chore: add to cveDetails as is, since CveID is embedded in the response
2021-08-13 18:00:55 +09:00
kazuminn
ff83cadd6e
feat(os) : support Alma Linux ( #1261 )
...
* support Alma Linux
* fix miss
* feat(os) : support Rocky linux (#1260 )
* support rocky linux scan
* fix miss
* lint
* fix : like #1266 and error Failed to parse CentOS
* pass make test
* fix miss
* fix pointed out with comment
* fix golangci-lint error
2021-08-02 04:36:43 +09:00
Norihiro NAKAOKA
0bf12412d6
fix(rocky): fix Scan in Rocky Linux ( #1266 )
...
* fix(rocky): fix OVAL scan in Rocky Linux
* chore: add FreeBSD13 EOL, fix #1245
* chore(rocky): add Rocky Linux EOL tests
* feat(rocky): implement with reference to CentOS
* feat(raspbian): add Raspbian to Server mode
* feat(rocky): support gost scan
* fix(rocky): rocky support lessThan
* chore: update doc and comment
2021-07-08 05:39:48 +09:00
Shigechika AIKAWA
0e0e5ce4be
feat: Support Ubuntu21 ( #1231 )
2021-06-28 10:28:54 +09:00
Norihiro NAKAOKA
8e6351a9e4
feat(oval): goval-dictionary update ( #1259 )
...
* feat(oval): err check for GetLastModified
* feat(oval): goval-dictionary update
2021-06-25 14:08:50 +09:00
Norihiro NAKAOKA
b8db2e0b74
feat(report): Change the priority of CVE information in Debian ( #1202 )
...
* fix (bug) : using ScanResults refs #1019
* feat(gost): WIP change priority of CVE Info in Debian
* feat(report): change priority of CVE Info in Debian
* refactor: move RemoveRaspbianPackFromResult
* style: remove comment
* fix: lint error
* style: change coding style
* feat(report): support reporting with gost alone
* fix: merge error
* refactor(debian): change code to be simple
2021-06-21 15:14:41 +09:00
Kota Kanbe
2a9aebe059
fix(report): improve cpe match logic ( #1251 )
...
* fix(report): improve cpe match logic
https://github.com/kotakanbe/go-cve-dictionary/pull/189
* fix vet error
2021-06-11 14:39:41 +09:00
Kota Kanbe
0095c40e69
fix(vet): go vet err of make build-scanner ( #1248 )
2021-06-09 08:00:52 +09:00
Kota Kanbe
82c1abfd3a
fix(report): detection logic bugs for Oracle Linux ( #1247 )
...
* fix(report): continue detecting if arch is emtpy for Oracle Linux
* fix test case
* fix(report): a bug of `Not Fixed Yet` of Oracle linux scanning
2021-06-09 05:46:42 +09:00
Kota Kanbe
ab0e950800
fix(oracle): extracting only advisory ID from OVAL.title ( #1232 )
2021-04-29 12:54:36 +09:00
Kota Kanbe
17ae386d1e
chore: add a test case #1227 ( #1228 )
2021-04-28 12:18:18 +09:00
Kota Kanbe
2d369d0cfe
Fix false positive for Oracle Linux ( #1227 )
...
* fix(oracle): false-positive(handle arch of pkgs)
* fix(oracle): false positive kernel-related CVEs
* add a test case for ksplice1
* fix(scan): handle uek kernel for Oracle linux
* fix(scan): hanlde uek kernel for reboot required
* fix(oracle): false-positive for redis-backend
2021-04-27 20:38:45 +09:00
Kota Kanbe
27b3e17b79
feat(saas): delete json dir automatically after upload ( #1212 )
...
* feat(saas): delete json dir automatically after upload
* fix lint err
2021-04-15 05:58:41 +09:00
Kota Kanbe
740781af56
feat(logging): add -log-to-file and don't output to file by default ( #1209 )
...
* feat(logging): add -log-to-file and don't output to file by default
* update go-cve-dict
* fix lint err
2021-04-05 17:41:07 +09:00
Kota Kanbe
6fef4db8a0
fix .goreleaser.yml ( #1204 )
...
* fix .goreleaser.yml
* chore: fix lint warnings
2021-04-01 17:43:54 +09:00
Kota Kanbe
9bfe0627ae
refactor: don't use global Config in private func ( #1197 )
...
* refactor: cve_client.go
* refactor: don't use global Config in private func
* remove import alias for config
* refactor: dbclient
* refactor: resultDir
* refactor: resultsDir
* refactor
* refactor: gost
* refactor: db client
* refactor: cveDB
* refactor: cvedb
* refactor: exploitDB
* refactor: remove detector/dbclient.go
* refactor: writer
* refactor: syslog writer
* refactor: ips
* refactor: ensureResultDir
* refactor: proxy
* fix(db): call CloseDB
* add integration test
* feat(report): sort array in json
* sort func for json diff
* add build-int to makefile
* add int-rds-redis to makefile
* fix: test case, makefile
* fix makefile
* show cve count after diff
* make diff
* diff -c
* sort exploits in json for diff
* sort metasploit, exploit
2021-04-01 13:36:24 +09:00
Kota Kanbe
3f2ac45d71
Refactor logger ( #1185 )
...
* refactor: logger
* refactor: logging
* refactor: rename func
* refactor: logging
* refactor: logging format
2021-02-26 10:36:58 +09:00
Kota Kanbe
03579126fd
refactor(config): localize config used like a global variable ( #1179 )
...
* refactor(report): LocalFileWriter
* refactor -format-json
* refacotr: -format-one-email
* refactor: -format-csv
* refactor: -gzip
* refactor: -format-full-text
* refactor: -format-one-line-text
* refactor: -format-list
* refacotr: remove -to-* from config
* refactor: IgnoreGitHubDismissed
* refactor: GitHub
* refactor: IgnoreUnsocred
* refactor: diff
* refacotr: lang
* refacotr: cacheDBPath
* refactor: Remove config references
* refactor: ScanResults
* refacotr: constant pkg
* chore: comment
* refactor: scanner
* refactor: scanner
* refactor: serverapi.go
* refactor: serverapi
* refactor: change pkg structure
* refactor: serverapi.go
* chore: remove emtpy file
* fix(scan): remove -ssh-native-insecure option
* fix(scan): remove the deprecated option `keypassword`
2021-02-25 05:54:17 +09:00
Richard Alloway
aeaf308679
Add test-case to verify proper version comparison in lessThan() ( #1178 )
...
* Add test-case to verify proper version comparison when either/both/neither of newVer and ovalmodels.Package contain "_<minor version>"
* Rename vera to newVer in Test_lessThan()
* Fix oval/util_test.go formatting (make fmt)
Co-authored-by: Richard Alloway (OpenLogic) <ralloway@perforce.com >
2021-02-14 05:30:07 +09:00
Kota Kanbe
f5e47bea40
chore: add a test-case to #1176 ( #1177 )
2021-02-12 13:46:29 +09:00
Richard Alloway
50cf13a7f2
Pass packInOVAL.Version through centOSVersionToRHEL() to remove the "_<point release>" portion so that packInOVAL.Version strings like 1.8.23-10.el7_9.1 become 1.8.23-10.el7.1 (same behavior as newVer, which now allows packInOVAL.Version and newVer to be directly compared). ( #1176 )
...
Co-authored-by: Richard Alloway (OpenLogic) <ralloway@perforce.com >
2021-02-12 13:33:36 +09:00
Kota Kanbe
4dcbd865cc
fix(report): set http timeout 10 sec ( #1154 )
...
* fix(report): set http timeout 10 sec
* fix: add an error handling
2021-01-30 09:40:33 +09:00
Kota Kanbe
63f170cc7a
fix(report): set severity in Red Hat OVAL to both CVSS v3 and v2 #1146 ( #1147 )
2021-01-26 07:58:59 +09:00
Kota Kanbe
88899f0e89
refactor: around CheckHTTPHealth ( #1139 )
2021-01-20 07:41:29 +09:00
Kota Kanbe
6eff6a9329
feat(report): display EOL information to scan summary ( #1120 )
...
* feat(report): display EOL information to scan summary
* detect Amazon linux EOL
2021-01-09 07:58:55 +09:00
Kota Kanbe
4359503484
fix(redhat): possibility of false positives on RHEL ( #1115 )
2021-01-06 13:33:08 +09:00
Kota Kanbe
b13f93a2d3
feat(scan): support dnf modules ( #1114 )
...
* feat(scan): support dnf modules
* change dnf module list --installed to --enabled
* chore: refactor
* feat(report): detect logic for dnf modularity label
* fix func name
* chore: update go mods
2021-01-06 11:36:41 +09:00
Kota Kanbe
d576b6c6c1
refactor(report): around FillCveInfo ( #1095 )
...
* refactor(report): around FillCveInfo
* refacotr(report): around FillCveInfo
2020-12-15 15:48:23 +09:00
Kota Kanbe
9a32a94806
refactor: fix build warnings ( #1090 )
2020-12-11 06:45:39 +09:00
Kota Kanbe
5fea4eaef8
feat(nocgo): enable to build with CGO_ENABLED=0 ( #1080 )
2020-11-27 09:55:09 +09:00
Kota Kanbe
4f1578b2d6
[WIP]fix(scan): collect a running version of kernel-devel ( #1044 )
...
* fix(scan): collect a running kernel-devel version
* refactor
2020-09-01 14:37:40 +09:00
Norihiro NAKAOKA
7969b343b0
Raspberry Pi OS(Raspbian) scanning using OVAL DB ( #1019 )
...
* change: never refer to ChangeLog
* change raspberry pi os use debian oval at report
* change do not use r.Family
* change gost do not use r.Family
* change use r.Family because family has a large impact
* change replace MaineK00n/goval-dictionary@raspberrypi-oval
* note Raspbian Scan Policy
* add Raspbian Changelog support policy
* change grep Package for Raspbian at fast-scan mode
* add changelog preprocessing for Raspbian
* add take note of TODO
* change Changelog fetch part to function
* change error handling
* change solve one TODO
* change make ChangelogDir once
* add comment
* fix oval support Amazon Linux :refs #824
* change to useScannedCves from ovalSupproted
* change confidence for Raspbian
* change skip package for raspbian in OVAL DB
* change separate raspbian implementation from util
* change error, log format
* change print format
* change log format(delete newline)
* change support changelog.(Debian.)gz
* Revert "change support changelog.(Debian.)gz"
This reverts commit 2265a72c67
2020-08-25 14:11:34 +09:00
Kota Kanbe
59daa8570a
fix(gost): suppress err logging when unsupported debian ( #1031 )
2020-08-05 20:05:50 +09:00
Kota Kanbe
62c9409fe9
add a github actions config ( #985 )
...
* add a github actions config
* fix(log): Don't create a log dir when testing
* remove a meaningless test case
* Thanks for everything, Mr, Travys.
* add golangci
* add goreleaser.yml
* add tidy.yml
* add golang-ci
* fix many lint warnings
2020-05-27 20:11:24 +09:00
shopper
34e2f033d8
add kernelnames ubuntu20.04 ( #982 )
2020-05-22 12:19:07 +09:00
Kota Kanbe
3f5bb6ab29
fix(scan): alpine detection #965 ( #966 )
...
* fix(scan): alpine detection #965
* use knqyf263/go-apk-version
2020-05-08 16:12:01 +09:00
Kota Kanbe
749ead5d4a
update go mod ( #960 )
2020-04-20 21:33:11 +09:00
Kota Kanbe
649f4a6991
fix(report): kernel vulns detection BUG in Ubuntu ( #958 )
...
* fix(report): kernel vulns detection in Ubuntu
* fix(ubuntu): remove linux-* to detect only running kernel vulns
2020-04-19 09:04:08 +09:00
Kota Kanbe
464d523c42
Display fixed-in version for each package in report ( #801 )
...
* refactor(model): PackageFixStatus.Name to BinName
* refacotr(oval): change var name
* feat(report): Add FixedIn in JSON
* refactor(tui): chage args
* display fixedin in report
* refactor(model): change fileld name
* remove unused field of PackageFixStatus
2020-04-08 21:26:34 +09:00
Kota Kanbe
5811dffe7a
fix(report): Support CVSS 3.1 for Red Hat OVAL #930 ( #932 )
2020-01-30 22:48:04 +09:00
Kota Kanbe
3ffed18e02
Change GPL v3 to AGPL v3 because of aquasecurity/trivy dependency ( #897 )
2019-09-09 21:12:17 +09:00
Tomoya Amachi
af58122c91
for Amazon Linux image ( #896 )
...
* fit amazon linux image's version to OVAL
* add Arch to SrcPackage
* lint go.mod
* make fmt
2019-09-06 10:34:14 +09:00
Masahiro Fujimura
a977533c78
Fix performance and bug ( #867 )
...
* Fix performance
* Update goval-dictionary
* Go mod tidy
2019-07-15 21:20:01 +09:00
Kota Kanbe
eb9f9680ec
refactor(scan): remove yum-security related code ( #836 )
...
* refactor(scan): remove yum-security related code
* fix(reporting): error if no OVAL entry
2019-06-14 11:42:38 +09:00
Kota Kanbe
269095d034
feat(report): support Amazon OVAL scanning ( #824 )
...
* feat(report): support Amazon OVAL scanning
* add distroAdvisories
* see goval/master
2019-06-10 23:20:39 +09:00
Kota Kanbe
774544c975
fix(report): warning only if the kernel version is unknown ( #822 )
2019-05-24 10:09:11 +09:00
Kota Kanbe
299805a726
[WIP]fix(scan): false negative of kernel related vulns on Ubuntu 16 ( #819 )
...
* fix(scan): a bug of detect kernel vulns on Ubuntu 16
* fix(scan): support Ubuntu 14
2019-05-23 23:52:00 +09:00
Kota Kanbe
276363e793
fix(scan): a bug of kernel Vulns detection on Ubuntu18 ( #818 )
...
* fix(scan): a bug of kernel Vulns detection on Ubuntu18
* fix the test case
2019-05-23 17:00:33 +09:00
kazuminn
99c65eff48
feat(scan): WordPress Vulnerability Scan (core, plugin, theme) ( #769 )
...
https://github.com/future-architect/vuls/pull/769
2019-04-08 17:27:44 +09:00
Kota Kanbe
7585f9d537
fix(report): fix cvedb-url, add -cvedb-type=http ( #734 )
...
* fix(report): fix cvedb-url, add -cvedb-type=http
* feat(report): support go-exploitdb server mode
* update deps
* implement tui
* fix server mode
* fix(tui): default value of cvedb-type to ""
* update deps
2018-11-16 21:22:18 +09:00
