Skip to content
Snippets Groups Projects
Select Git revision
0 results
Search by author
  • Any Author
0 authors
  1. May 02, 2021
  3. Apr 29, 2021
  5. Apr 08, 2021
  7. Mar 24, 2021
    • Yoav Rotem's avatar
      Update ocp 3.11 (#849) · f2386c03
      Yoav Rotem authored 
      * Add OCP auto-detection

* Add test for openshift

* update and fix bugs

update file to match with new kube-bench features and fix bugs

* Update file and fix bugs

update file to match with new kube-bench features and fix bugs

* Remove specific configs

Those configs could be set in main config.yaml

* Update to include openshift files

* fix typos

* fix typo

* Remove trailing spaces

* Update util.go

* Add tests for getOcpValidVersion
      f2386c03
  9. Mar 22, 2021
    • Yoav Rotem's avatar
      Add logging (#822) · 0cb30276
      Yoav Rotem authored 
      
* Add more logging

The old logging could was lacking and in some cases misleading

* Add Logging

Add more logs and change some old messages, the important part is make each test log more readable by adding ------ test id ------ section in logs

* Fix typos

* more info

add more info in comment about the function and it use cases

Co-authored-by: default avatarLiz Rice <liz@lizrice.com>

* Use switch case

Change the logic from if to switch and tidy up the code
      0cb30276
  11. Mar 21, 2021
  13. Mar 02, 2021
    • Yoav Rotem's avatar
      Fix fallback to default version (#834) · 50fce51d
      Yoav Rotem authored 
      * Fix fallback to default version

In some cases kube-bench will crush instead of fallback to default version. 
Fix it to only log that couldn't auto-detect version and used default.

* Fix case with fallback to default version
      50fce51d
  15. Feb 23, 2021
  17. Feb 22, 2021
  19. Feb 11, 2021
  21. Feb 10, 2021
  23. Jan 21, 2021
  25. Jan 20, 2021
  27. Jan 18, 2021
  29. Jan 13, 2021
  31. Jan 04, 2021
  33. Dec 27, 2020
  35. Dec 24, 2020
    • Liz Rice's avatar
      Expected result pattern not always shows (#784) · 6452df7c
      Liz Rice authored 
      
* Add expectedResultPattern to invalid test

when testing and try convert to numeric we didn't set expectedResultPattern value.

* check for auditconfig before using it

The current state is that when ever audit output is not what we search for we check for auditConfig output which is sometime empty and therefore create empty expected result as described in #694

* Fix issue about expectedResultPattern

expectedResultPattern not always shown and wasn't accurate enough 
Issue #705

* Add tests for ExpectedResult and fixes

Add tests for ExpectedResult with the new output and the verify that the fix is working

* Add missing flags

In some cases not having audit or audit_config flag would fail the test.
So added just a simple commands like echo something to solve this issue 
Also add bitmask checks

* Add example IAM policy

* Pass RotateKubeletServerCertificate related checks if it's not found (#767)

* Allow for environment variables to be checked in tests (#755)

* Initial commit for checking environment variables for etcd

* Revert config changes

* Remove redundant struct data

* Fix issues with failing tests

* Initial changes based on code review

* Add option to disable envTesting + Update docs

* Initial tests

* Finished testing

* Fix broken tests

* Add a total summary and always show all tests. (#759)

Whether the total summary is shown can be specified with an option.

Fixes #528

Signed-off-by: default avatarChristian Zunker <christian.zunker@codecentric.cloud>

* Update Readme.md file with link to Contribution guide (#754)

* Update License with the year and the owner name

Please add this to make your license agreement strong

* Updated Readme.md file with license and proper documentation links

I have added a proper license agreement to the documentation. Also shortened the links to the issues so that it does not break in any on the forks.

* Update LICENSE

* Update README.md

* Update README.md

* Remove erroneous license info

Co-authored-by: default avatarLiz Rice <liz@lizrice.com>

* Support auto-detect platform when running on EKS or GKE (#683)

* Support auto-detect platform when running on EKS or GKE

* Change to get platform name from `kubectl version`

* fix regexp and add test

* Update Server Version match for EKS

* try to get version info from api sever at first

* Change expected expectedResultPattern

Now expectedResultPattern is more verbose

* Update ops tests

* Fix unit tests

* Fix bitmask output syntax

* Changes to be committed:
	modified:   check/check.go
	modified:   check/test.go
	modified:   check/test_test.go
fix unit testing and test.go to resolve conflicts.

* Change found to flagFound

* add missing }

* change found to flag found

Co-authored-by: default avataryoavrotems <yoavrotems97@gmail.com>
      6452df7c
  37. Dec 23, 2020
    • Liz Rice's avatar
      GitHub Actions in correct directory (#787) · b6f619cd
      Liz Rice authored 
      * Rename workflow to workflows

* Add integration tests to Actions

* Upload code coverage after unit test

* don't need code coverage when we do a release

* Use same Go version as in go.mod

* Use same Go version as go.mod
      b6f619cd
  39. Dec 21, 2020
  41. Dec 17, 2020
  43. Nov 23, 2020
    • Brian Terry's avatar
      Aws asff (#770) · c3f94dd8
      Brian Terry authored 
      
* add aasf

* add AASF format

* credentials provider

* add finding publisher

* add finding publisher

* add write AASF path

* add testing

* read config from file

* update docker file

* refactor

* remove sample

* add comments

* Add comment in EKS config.yaml

* Fix comment typo

* Fix spelling of ASFF

* Fix typo and other small code review suggestions

* Limit length of Actual result field

Avoids this message seen in testing:
  Message:Finding does not adhere to Amazon Finding Format. data.ProductFields['Actual result'] should NOT be longer than 1024 characters.

* Add comment for ASFF schema

* Add Security Hub documentation

* go mod tidy

* remove dupe lines in docs

* support integration in any region

* fix README link

* fix README links

Co-authored-by: default avatarLiz Rice <liz@lizrice.com>
      c3f94dd8
  45. Nov 16, 2020
  47. Nov 02, 2020
  49. Oct 29, 2020