misconf

Documentation

Index

• func CreateDataFS(dataPaths []string, opts ...string) (fs.FS, []string, error)
• func CreatePolicyFS(policyPaths []string) (fs.FS, []string, error)
• func NewCauseWithCode(underlying scan.Result) types.CauseMetadata
• func ResultsToMisconf(configType types.ConfigType, scannerName string, results scan.Results) []types.Misconfiguration
• type Scanner
  • func NewAzureARMScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewCloudFormationScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewDockerfileScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewHelmScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewKubernetesScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformPlanJSONScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformPlanSnapshotScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func (s *Scanner) Scan(ctx context.Context, fsys fs.FS) ([]types.Misconfiguration, error)
• type ScannerOption
  • func (o *ScannerOption) Sort()

Functions

func CreateDataFS

func CreateDataFS(dataPaths []string, opts ...string) (fs.FS, []string, error)

func CreatePolicyFS

func CreatePolicyFS(policyPaths []string) (fs.FS, []string, error)

func NewCauseWithCode

func NewCauseWithCode(underlying scan.Result) types.CauseMetadata

func ResultsToMisconf

func ResultsToMisconf(configType types.ConfigType, scannerName string, results scan.Results) []types.Misconfiguration

ResultsToMisconf is exported for trivy-plugin-aqua purposes only

Types

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

func NewAzureARMScanner

func NewAzureARMScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewCloudFormationScanner

func NewCloudFormationScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewDockerfileScanner

func NewDockerfileScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewHelmScanner

func NewHelmScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewKubernetesScanner

func NewKubernetesScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformPlanJSONScanner

func NewTerraformPlanJSONScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformPlanSnapshotScanner

func NewTerraformPlanSnapshotScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformScanner

func NewTerraformScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func (*Scanner) Scan

func (s *Scanner) Scan(ctx context.Context, fsys fs.FS) ([]types.Misconfiguration, error)

type ScannerOption

type ScannerOption struct {
	Debug                    bool
	Trace                    bool
	RegoOnly                 bool
	Namespaces               []string
	PolicyPaths              []string
	DataPaths                []string
	DisableEmbeddedPolicies  bool
	DisableEmbeddedLibraries bool

	HelmValues              []string
	HelmValueFiles          []string
	HelmFileValues          []string
	HelmStringValues        []string
	HelmAPIVersions         []string
	HelmKubeVersion         string
	TerraformTFVars         []string
	CloudFormationParamVars []string
	TfExcludeDownloaded     bool
	K8sVersion              string
}

func (*ScannerOption) Sort

func (o *ScannerOption) Sort()