vulnerabilities

Documentation

Index

• type Scanner
  • func NewScanner(scheme *runtime.Scheme, clientset kubernetes.Interface, ...) *Scanner
  • func (s *Scanner) GetCredentials(ctx context.Context, spec corev1.PodSpec, ns string) (map[string]docker.Auth, error)
  • func (s *Scanner) GetVulnerabilityReportsByScanJob(ctx context.Context, job *batchv1.Job, owner metav1.Object) ([]v1alpha1.VulnerabilityReport, error)
  • func (s *Scanner) PrepareScanJob(workload kube.Object, spec corev1.PodSpec, credentials map[string]docker.Auth) (*batchv1.Job, []*corev1.Secret, error)
  • func (s *Scanner) Scan(ctx context.Context, workload kube.Object) ([]v1alpha1.VulnerabilityReport, error)

Types

type Scanner

type Scanner struct {
	kube.SecretsReader
	// contains filtered or unexported fields
}

func NewScanner

func NewScanner(
	scheme *runtime.Scheme,
	clientset kubernetes.Interface,
	config starboard.TrivyConfig,
	opts kube.ScannerOpts,
) *Scanner

NewScanner constructs a new vulnerability Scanner with the specified options and Kubernetes client Interface.

func (*Scanner) GetCredentials

func (s *Scanner) GetCredentials(ctx context.Context, spec corev1.PodSpec, ns string) (map[string]docker.Auth, error)

func (*Scanner) GetVulnerabilityReportsByScanJob

func (s *Scanner) GetVulnerabilityReportsByScanJob(ctx context.Context, job *batchv1.Job, owner metav1.Object) ([]v1alpha1.VulnerabilityReport, error)

func (*Scanner) PrepareScanJob

func (s *Scanner) PrepareScanJob(workload kube.Object, spec corev1.PodSpec, credentials map[string]docker.Auth) (*batchv1.Job, []*corev1.Secret, error)

func (*Scanner) Scan

func (s *Scanner) Scan(ctx context.Context, workload kube.Object) ([]v1alpha1.VulnerabilityReport, error)