- Jan 19, 2022
-
-
Huang Huang authored
* Remove broken badges and add link for some badges * update badges in docs
-
- Sep 29, 2021
-
-
Jeff Robertson authored
Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
- Jun 09, 2021
-
-
Yoav Rotem authored
* Delete README.md * Edit readme and separate into different files * Update README.md * Update Running.md * Update CONTRIBUTING.md * Create Contributing.md * Add files via upload * Update Index.md * Rename Flags and Commands.md to Flags_and_commands.md * Rename Index.md to index.md * Create mkdocs.yml * Delete images directory * Update README.md * Update README.md * Update README.md * Update README.md * Update README.md * Update README.md * Create mkdocs-dev.yaml * Create mkdocs-latest.yaml * Update mkdocs.yml * Update mkdocs.yml * Update mkdocs.yml Add yamllint --- * Make it yamllint comply * Make Yamllint comply * Make Yamllint comply * Change description Co-authored-by:
Itay Shakury <itay@itaysk.com> * Fix syntax Co-authored-by:
Itay Shakury <itay@itaysk.com> * Update docs/Architecture.md Co-authored-by:
Itay Shakury <itay@itaysk.com> * Update docs/Architecture.md Co-authored-by:
Itay Shakury <itay@itaysk.com> * Update example for test files * Update contributing * Delete Contributing.md * Update Flags_and_commands.md * Change syntax and add source * Update Platforms.md * lower case file names * lower case file names * Lower case file names * Lower case file names * Lower case file names * Lower case file names * Add note about inspect master in some platforms * Add quick start * Lower case files names * Lower case files names * Fixing typo * Remove section about old ocp * Fix typos Co-authored-by:
Itay Shakury <itay@itaysk.com>
-
- May 11, 2021
-
-
Huang Huang authored
* Support CIS ACK 1.0.0 benchmark * fix yaml lint * Fix TestMakeSubsitutions may failed when order of map changed * Support auto-detect platform when running on ACK * Apply suggestions from code review Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com> Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
- Feb 23, 2021
-
-
Naoki Oketani authored
-
Liz Rice authored
* docs: remove references to deprecated subcommands Removing master / node since it's better to autodetect, or to use --target Signed-off-by:
Liz Rice <liz@lizrice.com> * docs: specifying kubernetes or benchmark version Signed-off-by:
Liz Rice <liz@lizrice.com>
-
- Jan 18, 2021
-
-
Huang Huang authored
-
- Dec 21, 2020
-
-
Liz Rice authored
* Add example IAM policy * Pass RotateKubeletServerCertificate related checks if it's not found (#767) * Allow for environment variables to be checked in tests (#755) * Initial commit for checking environment variables for etcd * Revert config changes * Remove redundant struct data * Fix issues with failing tests * Initial changes based on code review * Add option to disable envTesting + Update docs * Initial tests * Finished testing * Fix broken tests * Add a total summary and always show all tests. (#759) Whether the total summary is shown can be specified with an option. Fixes #528 Signed-off-by:
Christian Zunker <christian.zunker@codecentric.cloud> * Update Readme.md file with link to Contribution guide (#754) * Update License with the year and the owner name Please add this to make your license agreement strong * Updated Readme.md file with license and proper documentation links I have added a proper license agreement to the documentation. Also shortened the links to the issues so that it does not break in any on the forks. * Update LICENSE * Update README.md * Update README.md * Remove erroneous license info Co-authored-by:
Liz Rice <liz@lizrice.com> * Support auto-detect platform when running on EKS or GKE (#683) * Support auto-detect platform when running on EKS or GKE * Change to get platform name from `kubectl version` * fix regexp and add test * Update Server Version match for EKS * try to get version info from api sever at first * Refactor group skip changed group 'skip' from being a bool to be 'type' string as done in check * Change skip: true -> type: skip Co-authored-by:
Huang Huang <mozillazg101@gmail.com> Co-authored-by:
Wicked <jason_attwood@hotmail.co.uk> Co-authored-by:
Christian Zunker <827818+czunker@users.noreply.github.com> Co-authored-by:
Kaiwalya Koparkar <kaiwalyakoparkar@gmail.com> Co-authored-by:
Yoav Rotem <yoavrotems97@gmail.com>
-
Carol Valencia authored
* feat: github actions to publish ecr and docker * fix: yaml lint in build Co-authored-by:
Carol Valencia <krol3@users.noreply.github.com>
-
Greg DeKoenigsberg authored
The command you listed here did not work. The command from the official documentation did: https://docs.aws.amazon.com/AmazonECR/latest/userguide/getting-started-cli.html aws ecr get-login-password --region region | docker login --username AWS --password-stdin aws_account_id.dkr.ecr.region.amazonaws.com
-
- Dec 17, 2020
-
-
Liz Rice authored
-
- Nov 23, 2020
-
-
Brian Terry authored
* add aasf * add AASF format * credentials provider * add finding publisher * add finding publisher * add write AASF path * add testing * read config from file * update docker file * refactor * remove sample * add comments * Add comment in EKS config.yaml * Fix comment typo * Fix spelling of ASFF * Fix typo and other small code review suggestions * Limit length of Actual result field Avoids this message seen in testing: Message:Finding does not adhere to Amazon Finding Format. data.ProductFields['Actual result'] should NOT be longer than 1024 characters. * Add comment for ASFF schema * Add Security Hub documentation * go mod tidy * remove dupe lines in docs * support integration in any region * fix README link * fix README links Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- Oct 29, 2020
-
-
Eric Ho authored
-
- Oct 09, 2020
-
-
Borko authored
Added section on manually downloading and installing kube-bench
-
- Oct 03, 2020
-
-
Neha Viswanathan authored
-
- Sep 17, 2020
-
-
yoavrotems authored
* Add new cis version yamls Add new cis version yamls * Add new cis version yamls * Add cis-1.6 to versions table * support version mapping cis-1.6 * support version mapping cis-1.6 * Update controlplane.yaml * Update etcd.yaml * Update node.yaml * Update policies.yaml * Create job.data * Create job-node.data * Create job-master.data * Create add-tls-kind.yaml * Change node version to 1.15.0 * Add tests for cis-1.6 * Delete node_only.yaml * Change tests 1.1.19-1.1.21 Change 1.1.19-1.1.21 because failing tests * Update job.data * Update job-master.data * Update job-master.data * Update job.data * fix 1.2.35 remediation tabs instead of spaces * Update job-master.data * Remove extra space * Update job.data * Create node_only.yaml * Add tests for cis-1.6 Add tests for cis-1.6 and change some from 1,5 to 1.6 * Fix typo * Add mapping for cis-1.6 * Remove extra space in 1.2.35 remediation * Update job.data * Update job-master.data * Fix type 1.2.35 * Remove trailing spaces * Remove trailing spaces * Remove trailing spaces * Remove trailing spaces * Add version 1.19 kubernetes support * Add version 1.19 kubernetes support * Add version 1.19 kubernetes support
-
- Sep 14, 2020
-
-
Liz Rice authored
- Add note about why we don't support OCP 4.* - Move GKE & OpenShift sub-sections next to EKS and AKS - Minor corrections
-
- Sep 09, 2020
-
-
Huang Huang authored
-
- Sep 06, 2020
-
-
Liz Rice authored
-
- Aug 12, 2020
-
-
Huang Huang authored
-
- Jul 29, 2020
-
-
Matthieu ANTOINE authored
* Fix supported targets for EKS benchmark * docs: heading at wrong level in README * docs: remove duplicate TOC heading * Fix invalid argument for gem install Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- Jul 15, 2020
-
-
Liz Rice authored
* docs: add Troubleshooting Adding basic instructions for running with debug logs * docs: remember --logtostderr * docs: note about cfg requirement Note that installing a binary release is not sufficient - you also need the config and test files Fixes #613
-
- Jul 10, 2020
-
-
Paavan authored
* added eks-1.0 cfg and modified job-eks.yaml for node checks * fixed yamllint errors and README updates
-
- May 15, 2020
-
-
Neha Viswanathan authored
Co-authored-by:
Neha Viswanathan <nviswanathan@axway.com> Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- May 14, 2020
-
-
Craig Jellick authored
Co-authored-by:
Liz Rice <liz@lizrice.com>
-
Paul McCarthy authored
Looks like this project now uses Go modules so `dep` steps are not needed. Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- May 06, 2020
-
-
Liz Rice authored
Correct misleading comment about anticipated CIS benchmarks for every Kubernetes release - bad assumption!
-
- Apr 07, 2020
-
-
Liz Rice authored
Added a Please Note section to document common misunderstandings that often lead to incorrect issue filings
-
- Mar 11, 2020
-
-
Liz Rice authored
Also adds links to the Kubernetes benchmarks Fixes #596
-
- Mar 03, 2020
-
-
Abubakr-Sadik Nii Nai Davis authored
* Add initial commit for CIS GKE 1.0 benchmark * Update README with GKE instructions * Fix YAML linter issues * Set GKE benchmark k8s version to gke-1.0 * Add tests for gke-1.0 Co-authored-by:
Roberto Rojas <robertojrojas@gmail.com>
-
- Feb 12, 2020
-
-
Huang Huang authored
* Fixes issue #574: change the PATH in container And change to use `/usr/local/mount-from-host/bin` as mount path. Fixes #574 * Fix integration tests
-
- Jan 07, 2020
-
-
Murali Paluru authored
* remove always true for logtostderr * update README for log collection instructions Co-authored-by:
Liz Rice <liz@lizrice.com>
-
- Dec 20, 2019
-
-
Saurya Das authored
* Adding a section for Azure Kubernetes Service steps to run kube bench on AKS worker nodes * Update README.md * Update README.md Co-authored-by:
Roberto Rojas <robertojrojas@gmail.com> Co-authored-by:
Liz Rice <liz@lizrice.com>
-
Zeid Marouf authored
-
- Dec 05, 2019
-
-
Roberto Rojas authored
* Initial commit. * Add master and node config. * Add section 5 of CIS 1.5.1. * Split sections into section files * Fix YAML issues. * adds target translation * adds target translation * adds cis-1.5 mapping * fixed tests * fixes are per PR * fixed intergration test * integration kind test file to appropriate ks8 version * fixed etcd text * fixed README * fixed text * etcd: fixed grep path * etcd: fixes * fixed error message bug * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * fixes as per PR review
-
- Nov 06, 2019
-
-
Jonathan Rau authored
* Change EKS Readme * Fix readme formatting * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md
-
- Nov 05, 2019
-
-
Soumyadeep Sinha authored
* Fixed some typos * Fixed some typos * Fixed typo and capitalization of Kubernetes * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update docs/README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update docs/README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update docs/README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * docs: trivial, reinstate capital K * docs: trivial, reinstate backticks * docs: trivial, reinstate "in order" for clarity * docs: trivial, reinstate capital K
-
Roberto Rojas authored
* starting benchmark flag * Revert "starting benchmark flag" This reverts commit 58fc948626cb2f99a4f26e9cef3675b4d0938176. * fixes issue #269 * add more unit tests * fix bug * Update cmd/common.go Co-Authored-By:
Liz Rice <liz@lizrice.com> * fixes as per PR review * fixes as per PR review * adds more tests * fixed tests * changes as per PR Review * changes as per PR Review * updated README * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * Update README.md Co-Authored-By:
Liz Rice <liz@lizrice.com> * changes are per PR review
-
- Oct 24, 2019
-
-
Alexey Pyltsyn authored
-
- Oct 23, 2019
-
-
Mohan Sha authored
-