GeezerVison is showing github.com — Remove deprecated kubeaudit scanner · secureCodeBox/secureCodeBox@33d1369
File treeExpand file treeCollapse file tree Open diff view settings contributing/integrating-a-scanner
operator/internal/telemetry examples/github-secureCodeBox-scan
nikto/examples/demo-juice-shop zap-automation-framework/parser
Some content is hiddenLarge Commits have some content hidden by default. Use the searchbox below for content that may be hidden. Dismiss bannerExpand file treeCollapse file tree Open diff view settings Collapse file Copy file name to clipboardExpand all lines: .github/workflows/ci.yaml -1Lines changed: 0 additions & 1 deletion | Original file line number | Diff line number | Diff line change |
|---|
@@ -424,7 +424,6 @@ jobs: | 424 | 424 | - ffuf | 425 | 425 | - git-repo-scanner | 426 | 426 | - gitleaks | 427 | | - - kubeaudit | 428 | 427 | - kube-hunter | 429 | 428 | - ncrack | 430 | 429 | - nikto | |
Collapse file Copy file name to clipboardExpand all lines: .github/workflows/release-build.yaml -2Lines changed: 0 additions & 2 deletions | Original file line number | Diff line number | Diff line change |
|---|
@@ -329,7 +329,6 @@ jobs: | 329 | 329 | - git-repo-scanner | 330 | 330 | - gitleaks | 331 | 331 | - kube-hunter | 332 | | - - kubeaudit | 333 | 332 | - ncrack | 334 | 333 | - nikto | 335 | 334 | - nmap | @@ -415,7 +414,6 @@ jobs: | 415 | 414 | - cmseek | 416 | 415 | - ffuf | 417 | 416 | - kube-hunter | 418 | | - - kubeaudit | 419 | 417 | - ncrack | 420 | 418 | - nmap | 421 | 419 | - nikto | |
Collapse file Copy file name to clipboardExpand all lines: .github/workflows/scb-bot.yaml -1Lines changed: 0 additions & 1 deletion | Original file line number | Diff line number | Diff line change |
|---|
| 33 | 33 | - ffuf | 34 | 34 | - gitleaks | 35 | 35 | - kube-hunter | 36 | | - - kubeaudit | 37 | 36 | - ncrack | 38 | 37 | - nuclei | 39 | 38 | - semgrep | |
Collapse file Copy file name to clipboardExpand all lines: bin/release-note-grouper.js -2Lines changed: 0 additions & 2 deletions | Original file line number | Diff line number | Diff line change |
|---|
@@ -13,7 +13,6 @@ Example Usage: `pbpaste | release-version-grouper.js` | 13 | 13 |
| 14 | 14 | E.g. turn this: | 15 | 15 | ```md | 16 | | - [SCB-Bot] Upgraded kubeaudit from 0.22.0 to 0.22.1 @secureCodeBoxBot (#2111) | 17 | 16 | [SCB-Bot] Upgraded semgrep from 1.50.0 to 1.51.0 @secureCodeBoxBot (#2112) | 18 | 17 | [SCB-Bot] Upgraded nuclei from v3.0.4 to v3.1.0 @secureCodeBoxBot (#2114) | 19 | 18 | [SCB-Bot] Upgraded gitleaks from v8.18.0 to v8.18.1 @secureCodeBoxBot (#2103) | @@ -23,7 +22,6 @@ E.g. turn this: | 23 | 22 | into this: | 24 | 23 | ```md | 25 | 24 | - Upgraded gitleaks from v8.18.0 to v8.18.1 @secureCodeBoxBot (#2103) | 26 | | - - Upgraded kubeaudit from 0.22.0 to 0.22.1 @secureCodeBoxBot (#2111) | 27 | 25 | - Upgraded nuclei from v3.0.3 to v3.1.0 @secureCodeBoxBot (#2114, #2104) | 28 | 26 | - Upgraded semgrep from 1.48.0 to 1.51.0 @secureCodeBoxBot (#2112, #2101) | 29 | 27 | ``` | |
Collapse file Copy file name to clipboardExpand all lines: documentation/docs/contributing/integrating-a-scanner/makefile.md +6-8Lines changed: 6 additions & 8 deletions - Display the source diff
- Display the rich diff
| Original file line number | Diff line number | Diff line change |
|---|
@@ -56,7 +56,7 @@ This adds the old-wordpress demo-target to your integration tests. You can find | 56 | 56 | ```makefile | 57 | 57 | #!/usr/bin/make -f | 58 | 58 | include_guard = set | 59 | | -scanner = kubeaudit | | 59 | +scanner = nmap | 60 | 60 | custom_scanner = set | 61 | 61 |
| 62 | 62 | include ../../scanners.mk | @@ -67,18 +67,16 @@ deploy-with-scanner: | 67 | 67 | --set="parser.image.repository=docker.io/$(IMG_NS)/$(parser-prefix)-$(scanner)" \ | 68 | 68 | --set="parser.image.tag=$(IMG_TAG)" \ | 69 | 69 | --set="scanner.image.repository=docker.io/$(IMG_NS)/$(scanner-prefix)-$(scanner)" \ | 70 | | - --set="scanner.image.tag=$(IMG_TAG)" \ | 71 | | - --set="kubeauditScope=cluster" | | 70 | + --set="scanner.image.tag=$(IMG_TAG)" | 72 | 71 |
| 73 | 72 | deploy-test-deps: | 74 | 73 | # If not exists create namespace where the tests will be executed | 75 | | - kubectl create namespace kubeaudit-tests --dry-run=client -o yaml | kubectl apply -f - | 76 | | - # Install jshop in kubeaudit-tests namespace | 77 | | - helm -n kubeaudit-tests upgrade --install juice-shop ../../demo-targets/juice-shop/ --wait | | 74 | + kubectl create namespace nmap-tests --dry-run=client -o yaml | kubectl apply -f - | | 75 | + # Install jshop in nmap-tests namespace | | 76 | + helm -n nmap-tests upgrade --install juice-shop ../../demo-targets/juice-shop/ --wait | 78 | 77 | ``` | 79 | 78 |
| 80 | | -This makefile overrides the deploy-with-scanner target such that the `kubeauditScope` can be overwritten. | 81 | | -Furthermore, it overrides the deploy-test-deps target such that juice-shop is installed in the correct namespace (kubeaudit-tests). | | 79 | +Furthermore, it overrides the deploy-test-deps target such that juice-shop is installed in the correct namespace (nmap-tests). | 82 | 80 |
| 83 | 81 | ### Reusing components from other scanners | 84 | 82 |
| |
Collapse file Copy file name to clipboardExpand all lines: documentation/docs/getting-started/upgrading.md +1Lines changed: 1 addition & 0 deletions - Display the source diff
- Display the rich diff
| Original file line number | Diff line number | Diff line change |
|---|
@@ -15,6 +15,7 @@ sidebar_position: 3 | 15 | 15 | ### Removed / Replaced ScanTypes | 16 | 16 |
| 17 | 17 | * `typo3scan` was removed as the scanner itself [isn't maintaned anymore](https://github.com/whoot/Typo3Scan?tab=readme-ov-file#unsupported). Most security aspects of typo3 are now hard to verify from the outside as it requires authentication (which is really good). Some typo3 security aspects (e.g. a incomplete installation) can be verified by [nuclei](https://www.securecodebox.io/docs/scanners/nuclei). | | 18 | +* `kubeaudit` was removed as the scanner itself [isn't maintaned anymore](https://github.com/Shopify/kubeaudit?tab=readme-ov-file#-deprecation-notice-). As a replacement you can use the `trivy` with it's `k8s` scanning mode, see [trivy ScanType k8s example](https://www.securecodebox.io/docs/scanners/trivy#k8s). | 18 | 19 |
| 19 | 20 | ➡️ [Reference: #2670](https://github.com/secureCodeBox/secureCodeBox/issues/2670) | 20 | 21 |
| |
Collapse file Copy file name to clipboardExpand all lines: operator/internal/telemetry/telemetry.go +1-1Lines changed: 1 addition & 1 deletion | Original file line number | Diff line number | Diff line change |
|---|
@@ -31,7 +31,7 @@ var officialScanTypes map[string]bool = map[string]bool{ | 31 | 31 | "git-repo-scanner": true, | 32 | 32 | "gitleaks": true, | 33 | 33 | "kube-hunter": true, | 34 | | - "kubeaudit": true, | | 34 | + "kubeaudit": true, // deprecated. we'll keep it in this list to still recieve telemetry data from older versions | 35 | 35 | "ncrack": true, | 36 | 36 | "nikto": true, | 37 | 37 | "nmap": true, | |
Collapse file Copy file name to clipboardExpand all lines: scanners/git-repo-scanner/examples/github-secureCodeBox-scan/findings.yaml -21Lines changed: 0 additions & 21 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 487 | 487 | "archived": false, | 488 | 488 | }, | 489 | 489 | }, | 490 | | - { | 491 | | - "name": "GitHub Repo", | 492 | | - "description": "A GitHub repository", | 493 | | - "category": "Git Repository", | 494 | | - "osi_layer": "APPLICATION", | 495 | | - "severity": "INFORMATIONAL", | 496 | | - "attributes": | 497 | | - { | 498 | | - "id": "303349727", | 499 | | - "web_url": "https://github.com/secureCodeBox/kubeaudit", | 500 | | - "full_name": "secureCodeBox/kubeaudit", | 501 | | - "owner_type": "Organization", | 502 | | - "owner_id": "34573705", | 503 | | - "topics": [], | 504 | | - "owner_name": "secureCodeBox", | 505 | | - "created_at": "2020-10-12T09:58:26Z", | 506 | | - "last_activity_at": "2020-10-12T09:58:28Z", | 507 | | - "visibility": "public", | 508 | | - "archived": false, | 509 | | - }, | 510 | | - }, | 511 | 490 | { | 512 | 491 | "name": "GitHub Repo", | 513 | 492 | "description": "A GitHub repository", | |
Collapse file Copy file name to clipboardExpand all lines: scanners/git-repo-scanner/parser/__testFiles__/git-scanner-test-findings.json -18Lines changed: 0 additions & 18 deletions | Original file line number | Diff line number | Diff line change |
|---|
| 520 | 520 | "last_activity_at": "2020-10-21T15:11:56Z", | 521 | 521 | "visibility": "private" | 522 | 522 | } | 523 | | - }, | 524 | | - { | 525 | | - "name": "GitHub Repo", | 526 | | - "description": "A GitHub repository", | 527 | | - "category": "Git Repository", | 528 | | - "osi_layer": "APPLICATION", | 529 | | - "severity": "INFORMATIONAL", | 530 | | - "attributes": { | 531 | | - "id": 303349727, | 532 | | - "web_url": "https://github.com/secureCodeBox/kubeaudit", | 533 | | - "full_name": "secureCodeBox/kubeaudit", | 534 | | - "owner_type": "Organization", | 535 | | - "owner_id": 34573705, | 536 | | - "owner_name": "secureCodeBox", | 537 | | - "created_at": "2020-10-12T09:58:26Z", | 538 | | - "last_activity_at": "2020-10-12T09:58:28Z", | 539 | | - "visibility": "public" | 540 | | - } | 541 | 523 | } | 542 | 524 | ] |
Collapse file Copy file name to clipboardExpand all lines: scanners/git-repo-scanner/parser/parser.test.js -18Lines changed: 0 additions & 18 deletions | Original file line number | Diff line number | Diff line change |
|---|
@@ -554,24 +554,6 @@ test("should properly parse git-scanner json file", async () => { | 554 | 554 | "osi_layer": "APPLICATION", | 555 | 555 | "severity": "INFORMATIONAL", | 556 | 556 | }, | 557 | | - Object { | 558 | | - "attributes": Object { | 559 | | - "created_at": "2020-10-12T09:58:26Z", | 560 | | - "full_name": "secureCodeBox/kubeaudit", | 561 | | - "id": 303349727, | 562 | | - "last_activity_at": "2020-10-12T09:58:28Z", | 563 | | - "owner_id": 34573705, | 564 | | - "owner_name": "secureCodeBox", | 565 | | - "owner_type": "Organization", | 566 | | - "visibility": "public", | 567 | | - "web_url": "https://github.com/secureCodeBox/kubeaudit", | 568 | | - }, | 569 | | - "category": "Git Repository", | 570 | | - "description": "A GitHub repository", | 571 | | - "name": "GitHub Repo", | 572 | | - "osi_layer": "APPLICATION", | 573 | | - "severity": "INFORMATIONAL", | 574 | | - }, | 575 | 557 | ] | 576 | 558 | `); | 577 | 559 | }); |
|