cloudsploit

Documentation

Index

• Constants
• type CloudsploitConfig
  • func NewCloudsploitConfig(resultDir string, configDir string, cloudsploitDir string, region string, ...) *CloudsploitConfig
• type EmptyOutputError
  • func (e EmptyOutputError) Error() string
• type SecurityGroupMetaData
• type SqsHandler
  • func NewSqsHandler(fc finding.FindingServiceClient, ac alert.AlertServiceClient, ...) (*SqsHandler, error)
  • func (s *SqsHandler) CallAnalyzeAlert(ctx context.Context, projectID uint32) error
  • func (s *SqsHandler) HandleMessage(ctx context.Context, sqsMsg *types.Message) error

Constants

const (
	DEFAULT_SCAN_TIMEOUT_MINUTES             = 20
	DEFAULT_SCAN_TIMEOUT_ALL_PLUGINS_MINUTES = 90
)

const (
	WARN_MESSAGE                   = "UNKNOWN status detected. Some scans may have failed. Please take action if you don't have enough permissions."
	STATUS_DETAIL_LENGTH_THRESHOLD = 30000
	LOW_SCORE                      = 3.0
)

const (
	REGION_US_EAST_1 = "us-east-1"
	API_RETRY_NUM    = 10
)

const (
	CLOUDSPLOIT_FILE = "yaml/cloudsploit.yaml"
)

Types

type CloudsploitConfig

type CloudsploitConfig struct {
	ResultDir       string
	ConfigDir       string
	CloudsploitDir  string
	ConfigPath      string
	MaxMemSizeMB    int
	ParallelScanNum int
	ScanTimeout     time.Duration
	ScanTimeoutAll  time.Duration
	// contains filtered or unexported fields
}

func NewCloudsploitConfig

func NewCloudsploitConfig(
	resultDir string,
	configDir string,
	cloudsploitDir string,
	region string,
	maxMem int,
	parallelScanNum int,
	scanTimeoutMinutes int,
	scanTimeoutAllMinutes int,
	l logging.Logger,
) *CloudsploitConfig

type EmptyOutputError

type EmptyOutputError struct {
	// contains filtered or unexported fields
}

EmptyOutputError sometimes happen caused by cloudsploit bug(#557). It will may be recovered by re-scanninng. ref https://github.com/aquasecurity/cloudsploit/issues/557

func (EmptyOutputError) Error

func (e EmptyOutputError) Error() string

type SecurityGroupMetaData

type SecurityGroupMetaData struct {
	SecurityGroupAttachedResources []string
	AliasResourceName              string
}

type SqsHandler

type SqsHandler struct {
	// contains filtered or unexported fields
}

func NewSqsHandler

func NewSqsHandler(
	fc finding.FindingServiceClient,
	ac alert.AlertServiceClient,
	awsc awsClient.AWSServiceClient,
	csConfig *CloudsploitConfig,
	settingYamlPath string,
	l logging.Logger,
) (*SqsHandler, error)

func (*SqsHandler) CallAnalyzeAlert

func (s *SqsHandler) CallAnalyzeAlert(ctx context.Context, projectID uint32) error

func (*SqsHandler) HandleMessage

func (s *SqsHandler) HandleMessage(ctx context.Context, sqsMsg *types.Message) error