Kota Kanbe
3ffed18e02
Change GPL v3 to AGPL v3 because of aquasecurity/trivy dependency ( #897 )
2019-09-09 21:12:17 +09:00
Kota Kanbe
f54e7257d1
fix(report): fill cert alerts from NVD and JVN feeds ( #899 )
...
* fix(report): fill cert alerts from NVD and JVN feeds
* fix import alias cve to cvemodels
* fix import alias cve to cvemodels
* remove unnecessary func
2019-09-09 21:11:59 +09:00
Kota Kanbe
cc13b6a27c
fix(report): enable to report without NVD, exit if no OVAL data ( #900 )
...
* feat(report): enable to report without NVD
* fix(report): enable to report without NVD and exit if no OVAL data
* update deps
* go mod tidy
* fix err msg
2019-09-09 21:00:34 +09:00
Kota Kanbe
8877db1979
udpate deps, go 1.13 ( #901 )
2019-09-09 20:26:26 +09:00
Tomoya Amachi
af58122c91
for Amazon Linux image ( #896 )
...
* fit amazon linux image's version to OVAL
* add Arch to SrcPackage
* lint go.mod
* make fmt
2019-09-06 10:34:14 +09:00
Kota Kanbe
b7ca5e5590
feat(scan): add -wordpress-only and -libs-only flag ( #898 )
2019-09-06 10:33:03 +09:00
Tomoya Amachi
69b6d875e6
scanVuln => GetScanResults and writeScanResults ( #891 )
2019-09-04 13:28:34 +09:00
Kota Kanbe
1fbd516b83
fix(report): fix too many variables while reporting ( #888 )
2019-08-25 17:56:47 +09:00
DjinnS
dec5d3b165
No warning(s) in the output file with -quiet option. Report command ( #885 )
2019-08-25 10:56:42 +09:00
DjinnS
d5e2040cef
awk is useless because ps already formats the output. Also, this syntaxe isn't correct when the command is excuted on a container because of the ' . ( #883 )
2019-08-25 10:13:58 +09:00
wagdez
4326befdec
Allow Offline scanning on Alpine ( #877 )
2019-07-30 17:47:01 +09:00
Kota Kanbe
3d4a5d9917
fix(report): Unsupport family: centos ( #876 )
...
* fix(report): Unsupport family: centos
* go mod tidy
2019-07-25 12:47:41 +09:00
Shigechika AIKAWA
d770034788
fix centos yum makecache --assumeyes ( #872 )
2019-07-17 11:10:20 +09:00
Masahiro Fujimura
a977533c78
Fix performance and bug ( #867 )
...
* Fix performance
* Update goval-dictionary
* Go mod tidy
2019-07-15 21:20:01 +09:00
Kota Kanbe
c5e13dd5e4
fix(configtest): remove yum-plugin-ps check on Amazon Linux ( #870 )
2019-07-12 07:25:47 +09:00
Kota Kanbe
a8040fe4d2
fix(wordpress): add --allow-root to wp cmd for docker based wp ( #865 )
2019-07-07 19:15:17 +09:00
Tomoya Amachi
9e066008c3
fix go module problems & update trivy version ( #864 )
...
* update trivy version
* use goval-dictionary@v0.1.4
2019-07-07 17:04:52 +09:00
Kota Kanbe
22c6601526
make fmt
2019-07-06 23:25:46 +09:00
Kota Kanbe
425464fd76
fix(scan): allow exit 1 for no match lsof | grep ( #863 )
2019-07-06 23:15:34 +09:00
Kota Kanbe
ccb0751ffd
fix(scan): show listening ip:port of procs ( #862 )
2019-07-06 14:10:08 +09:00
Kota Kanbe
f832de81b7
feat(saas): log.info done after uploading
2019-07-05 17:30:31 +09:00
Tomoya Amachi
8a37de0686
Add ips flag to scan ( #861 )
...
* add scan -ips flag
* fix usage
2019-07-04 18:42:12 +09:00
Kota Kanbe
836e4704f8
feat(scan): Display listen port of affected procs for each vulnerable pkgs ( #859 )
...
* refactor(redhat): move rpmQa and rpmQf to redhatbase.go
* feat(scan): Display listen port of affected procs
2019-07-03 23:01:59 +09:00
Kota Kanbe
3e5390309c
feat(redhat): ignore will not fix vulns ( #858 )
2019-07-03 20:59:23 +09:00
Kota Kanbe
f8c0b38716
feat(fast-root): get running procs for each pkgs (all RHEL, CentOS, AmazonLinux, Ubuntu, Debian) ( #855 )
...
* fix(scan): exec yum-plugin-ps on RHEL6 and 7
* feat(yumps): get affected procs on RHEL6 and RHEL8
* feat(scan): get affected processes for each packages
* tuning
* feat(scan): get running procs for each pkgs on Debian, Ubuntu
2019-07-02 14:55:46 +09:00
Masahiro Fujimura
65e6070e5f
Fix race condition in server mode ( #857 )
2019-07-02 10:11:36 +09:00
Tomoya Amachi
7b78ebbc42
retrieve ips(deep security) identifiers ( #852 )
...
* retrieve ips identifiers
* fix golangci
* use IPS type
* fix log message
* fix lockfiles config
* change label
* IPS : only work with fast-root mode
2019-07-02 10:06:30 +09:00
Masahiro Fujimura
03c3189c02
Changes don't required config.toml in server mode ( #853 )
2019-06-26 21:21:17 +09:00
Masahiro Fujimura
4a34dfe0e9
Support amazonlinux via http text/plain ( #850 )
2019-06-25 10:00:54 +09:00
Kota Kanbe
4cf9a723fe
set GO111MODULE=on in .goreleaser.yml
2019-06-18 10:15:42 +09:00
Kota Kanbe
bd1b135db3
Add vulsrepo issue template
2019-06-17 14:15:23 +09:00
alfe
8c3b305149
fix(readme): typo in news ( #841 )
2019-06-15 18:39:00 +09:00
Kota Kanbe
a3719038b8
fix(scan): scan Amazon Linux with offline mode ( #840 )
2019-06-14 19:10:07 +09:00
Kota Kanbe
c68a261c0b
Update README.md
2019-06-14 19:02:21 +09:00
Kota Kanbe
75fea79ac1
feat(scan): Support RHEL8 ( #813 )
...
* feat(scan): Support RHEL8
* fix(scan): check if `dnf-uils` is installed
2019-06-14 12:28:16 +09:00
Kota Kanbe
eb9f9680ec
refactor(scan): remove yum-security related code ( #836 )
...
* refactor(scan): remove yum-security related code
* fix(reporting): error if no OVAL entry
2019-06-14 11:42:38 +09:00
Tomoya Amachi
3634afdb81
enhance issue_template ( #837 )
2019-06-14 11:34:36 +09:00
Sajan Alexander
77b5df896a
update goval-dictionary dependency to valid version ( #839 )
2019-06-14 09:28:39 +09:00
Kota Kanbe
b81f64058c
fix(report): remove extra check logic #802 ( #835 )
2019-06-13 21:45:22 +09:00
Kota Kanbe
a8a90d7c63
refactor(report): speed up oval reporting #833 ( #834 )
2019-06-13 17:47:36 +09:00
Kota Kanbe
17bb575002
fix(scan): enable to report if some warnings occured on scanning ( #805 )
...
* fix(scan): enable to report if some warnings occured on scanning
* alpine, debian, freebsd, suse
* -format-full-text, -format-list, -format-one-line-text
* implement slack.go
* implement tui.go
* go fmt
2019-06-12 21:35:21 +09:00
Tomoya Amachi
abcea1a14d
add Library Scan (with image scan) ( #829 )
...
* add static container image scan
* server has many staticContainers
* use go module
* for staticContainer
* fix typo
* fix setErrs error
* change name : StaticContainer -> Image
* add scan -images-only flag
* fix makefile
* fix makefile for go module
* use rpmcmd instead of rpm
* add scrutinizer.yml
* change scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* fix scrutinizer.yml
* delete scrutinizer
* add report test
* add sourcePackages and Arch
* fix for sider
* fix staticContainer -> image
* init scan library
* add library scan for servers
* fix tui bug
* fix lint error
* divide WpPackageFixStats and LibraryPackageFixedIns
* fix error
* Delete libManager_test.go
* stop use alpine os if err occurred in container
* merge upstream/master
* Delete libManager.go
* update goval-dictionary
* fix go.mod
* update Readme
* add feature : auto detect lockfiles
2019-06-12 18:50:07 +09:00
Kota Kanbe
10942f7c08
fix(scan): fetch only updatable package changelogs ( #815 )
2019-06-12 15:08:03 +09:00
Kota Kanbe
87ee829e80
fix(scan): exec yum makecache to update metadata on RedHat based linux ( #810 )
...
* fix(scan): exec `yum makecache` to update metadata on RedHat based linux
* sudo
2019-06-12 14:44:42 +09:00
Chandrapal Badshah
fcc2c1e4c7
Changing the scannedAt time in the original result ( #823 )
2019-06-12 07:55:29 +09:00
Kota Kanbe
269095d034
feat(report): support Amazon OVAL scanning ( #824 )
...
* feat(report): support Amazon OVAL scanning
* add distroAdvisories
* see goval/master
2019-06-10 23:20:39 +09:00
Neal McBurnett
40492ee00a
fix typos, extraneous text ( #831 )
2019-06-10 09:55:17 +09:00
Shigechika AIKAWA
64cdd5aedc
fix(report): WordPress(WPVULNDB API) 429 Too Many Requests ( #826 )
...
* fix(report): WordPress(WPVULNDB API) 429 Too Many Requests
* fix(report): WordPress(WPVULNDB API) 429 Too Many Requests
2019-06-04 12:11:40 +09:00
Kota Kanbe
3bb650cb77
fix(report-redhat): fix false negative of affected vulns #827 ( #828 )
2019-06-04 09:55:32 +09:00
Kota Kanbe
774544c975
fix(report): warning only if the kernel version is unknown ( #822 )
2019-05-24 10:09:11 +09:00
