scan

Documentation

Index

• Variables
• func RegistryConfigForImage(image string, registriesConfig map[string]*types.VulnProviderConfig) *types.VulnProviderConfig
• func ScanImage(image string, policy *types.Policy, config *types.VulnProviderConfig, ...) (*types.ImageScanResult, error)
• func ScanTask(pods []v1.Pod, policy *types.Policy, ...) (*types.ScanTaskResult, error)
• type ClusterScanner
  • func NewClusterScanner(clusterContext string, policy *types.Policy, ...) (*ClusterScanner, error)
  • func (cs *ClusterScanner) GetAdvisorReport() *advisor.AdvisorClusterReport
  • func (cs *ClusterScanner) Scan() (*types.ClusterScanReport, error)
• type ResultFilter
• type ScanFilter

Variables

var (
	RuntimeScanFilter   ScanFilter   = &scanFilter{}
	RuntimeResultFilter ResultFilter = &resultFilter{}
)

Functions

func RegistryConfigForImage

func RegistryConfigForImage(image string, registriesConfig map[string]*types.VulnProviderConfig) *types.VulnProviderConfig

func ScanImage

func ScanImage(image string, policy *types.Policy, config *types.VulnProviderConfig, flowControl flowcontrol.RateLimiter) (*types.ImageScanResult, error)

func ScanTask

func ScanTask(pods []v1.Pod, policy *types.Policy, registriesConfig map[string]*types.VulnProviderConfig, flowControl flowcontrol.RateLimiter) (*types.ScanTaskResult, error)

Types

type ClusterScanner

type ClusterScanner struct {
	Policy          *types.Policy
	ProvidersConfig types.VulnProvidersConfig
	// contains filtered or unexported fields
}

func NewClusterScanner

func NewClusterScanner(clusterContext string, policy *types.Policy, providersConfig *types.VulnProvidersConfig) (*ClusterScanner, error)

func (*ClusterScanner) GetAdvisorReport

func (cs *ClusterScanner) GetAdvisorReport() *advisor.AdvisorClusterReport

func (*ClusterScanner) Scan

func (cs *ClusterScanner) Scan() (*types.ClusterScanReport, error)

type ResultFilter

type ResultFilter interface {
	IncludeResult(policy *types.Policy, occurence *grafeas.Occurrence) bool
}

type ScanFilter

type ScanFilter interface {
	ShouldScan(policy *types.Policy, pod *v1.Pod, image string) bool
}