reimage

package module

Go to main page

Versions in this module

v0

v0.9.2

Jul 18, 2024

v0.9.1

Mar 5, 2024

v0.9.0

Feb 6, 2024

Changes in this version

+ func ProcessK8s(w io.Writer, r io.Reader, u Updater) error

+ func ProcessRawYAML(w io.Writer, r io.Reader, u Updater) error

type ImagesFinder

+ FindK8sImages func(obj *unstructured.Unstructured) (map[string]ImageSetters, error)

+ type RawYAML struct

+ Object any

type RenameUpdater

+ ImagesFinder ImagesFinder

v0.8.0

Jan 25, 2024

v0.7.2

Dec 8, 2023

v0.7.1

Dec 8, 2023

v0.7.0

Dec 8, 2023

Changes in this version

+ type GrafeasVulnGetter struct

+ Grafeas GrafeasClient

+ Parent string

+ RetryDelay time.Duration

+ RetryMax int

+ func (vc *GrafeasVulnGetter) GetVulnerabilities(ctx context.Context, dig name.Digest) ([]ImageVulnerability, error)

+ type ImageVulnerability struct

+ CVSS float32

+ ID string

+ type TrivyVulnGetter struct

+ Command []string

+ func (vc *TrivyVulnGetter) GetVulnerabilities(ctx context.Context, dig name.Digest) ([]ImageVulnerability, error)

+ type VulnCheckResult struct

+ Found []string

+ Ignored []string

+ type VulnChecker struct

+ CVEIgnoreList []string

+ Getter VulnGetter

+ IgnoreImages *regexp.Regexp

+ MaxCVSS float32

+ func (vc *VulnChecker) Check(ctx context.Context, dig name.Digest) (*VulnCheckResult, error)

+ type VulnGetter interface

+ GetVulnerabilities func(ctx context.Context, dig name.Digest) ([]ImageVulnerability, error)

v0.6.0

Nov 29, 2023

Changes in this version

+ var ErrSkip = errors.New("skip further processing")

+ type IgnoreRemapper struct

+ Ignore *regexp.Regexp

+ func (t *IgnoreRemapper) ReMap(h *History) error

type RenameUpdater

+ Ignore *regexp.Regexp

v0.5.1

Oct 13, 2023

v0.5.0

Oct 13, 2023

v0.4.0

Oct 2, 2023

v0.3.0

Oct 2, 2023

v0.2.0

Sep 22, 2023

Changes in this version

+ var ErrAttestationNotFound = errors.New("attestation not found in response")

+ var ErrDiscoverNotFinished = errors.New("vulnerability checking not completed")

+ var ErrDiscoveryNotFound = errors.New("discovery not found in response")

+ type CheckRes struct

+ Found []string

+ Ignored []string

+ type EnsureRemapper struct

+ DryRun bool

+ NoClobber bool

+ func (t *EnsureRemapper) ReMap(h *History) error

+ type GCPBinAuthzConcisePayload struct

+ DockerManifestDigest string

+ DockerReference string

+ func (pl *GCPBinAuthzConcisePayload) MarshalJSON() ([]byte, error)

+ type GCPBinAuthzPayload struct

+ Critical struct{ ... }

+ type GrafeasAttester struct

+ Grafeas GrafeasClient

+ Keys Keyer

+ NoteRef string

+ Parent string

+ func (t *GrafeasAttester) Attest(ctx context.Context, dig name.Digest) error

+ func (t *GrafeasAttester) Check(ctx context.Context, dig name.Digest) (bool, error)

+ func (t *GrafeasAttester) Get(ctx context.Context, dig name.Digest, noteRef string) ([]*grafeaspb.AttestationOccurrence, error)

+ type GrafeasClient interface

+ CreateOccurrence func(ctx context.Context, req *grafeaspb.CreateOccurrenceRequest, ...) (*grafeaspb.Occurrence, error)

+ ListOccurrences func(ctx context.Context, req *grafeaspb.ListOccurrencesRequest, ...) *grafeas.OccurrenceIterator

+ type GrafeasVulnChecker struct

+ CVEIgnoreList []string

+ Grafeas GrafeasClient

+ IgnoreImages *regexp.Regexp

+ MaxCVSS float32

+ Parent string

+ RetryDelay time.Duration

+ RetryMax int

+ func (vc *GrafeasVulnChecker) Check(ctx context.Context, dig name.Digest) (*CheckRes, error)

type History

+ DigestStr string

+ Refs []name.Reference

+ func (h *History) AddDigest(ref name.Digest)

+ func (h *History) LatestDigest() (name.Digest, error)

+ func (h *History) OriginalDigest() (name.Digest, error)

+ type ImageCheckError struct

+ CVEs map[string]float32

+ Image string

+ MaxCVSS float32

+ func (ice *ImageCheckError) Error() string

+ type KMS struct

+ Client KMSClient

+ Key string

+ func (ks *KMS) Sign(ctx context.Context, bs []byte) ([]byte, string, error)

+ func (ks *KMS) Verify(ctx context.Context, bs []byte, data []byte) error

+ type KMSClient interface

+ AsymmetricSign func(ctx context.Context, req *kmspb.AsymmetricSignRequest, opts ...gax.CallOption) (*kmspb.AsymmetricSignResponse, error)

+ GetPublicKey func(ctx context.Context, req *kmspb.GetPublicKeyRequest, opts ...gax.CallOption) (*kmspb.PublicKey, error)

+ type Keyer interface

+ Sign func(ctx context.Context, bs []byte) ([]byte, string, error)

+ Verify func(ctx context.Context, bs []byte, sig []byte) error

+ type QualifiedImage struct

+ Digest string

+ FoundCVEs []string

+ IgnoredCVEs []string

+ Tag string

+ type RecorderRemapper struct

+ func (r *RecorderRemapper) Mappings() (map[string]QualifiedImage, error)

+ func (r *RecorderRemapper) ReMap(h *History) error

+ type RenameRemapper struct

+ Ignore *regexp.Regexp

+ RemotePath string

+ RemoteTmpl *template.Template

+ func (t *RenameRemapper) ReMap(h *History) error

+ type RenameUpdater struct

+ ForceDigests bool

+ Remapper Remapper

+ UnstructuredImagesFinder ImagesFinder

+ func (s *RenameUpdater) Update(obj runtime.Object) error

+ type StaticRemapper struct

+ AllowMissing bool

+ Mappings map[string]QualifiedImage

+ func NewStaticRemapper(mps map[string]QualifiedImage, confirmDigest bool) (*StaticRemapper, error)

+ func (s *StaticRemapper) ReMap(h *History) error

+ type VulnCheckerResult struct

+ Found map[string][]string

+ Ignored map[string][]string

+ func (vcr VulnCheckerResult) AnnotateMappings(mappings map[string]QualifiedImage)

v0.1.0

Aug 22, 2023

Changes in this version

+ var DefaultLogger = Logger(slog.Default())

+ var DefaultRulesConfig = []JSONImageFinderConfig

+ var DefaultTemplateStr = `{{ .RemotePath }}/{{ .Registry }}/{{ .Repository }}:{{ .DigestHex }}`

+ func Process(w io.Writer, r io.Reader, u Updater) error

+ type History []HistoryItem

+ func NewHistory(ref name.Reference) *History

+ func (h *History) Add(ref name.Reference, log string)

+ func (h *History) Latest() HistoryItem

+ func (h *History) LatestRef() name.Reference

+ func (h *History) Original() HistoryItem

+ func (h *History) OriginalRef() name.Reference

+ type HistoryItem struct

+ Log string

+ Ref name.Reference

+ type ImageSetters []Setter

+ func (ss ImageSetters) Set(img string)

+ type ImagesFinder interface

+ FindImages func(obj *unstructured.Unstructured) (map[string]ImageSetters, error)

+ func CompileJSONImageFinders(jmCfgs []JSONImageFinderConfig) (ImagesFinder, error)

+ type JSONImageFinderConfig struct

+ APIVersion string

+ ImageJSONP []string

+ Kind string

+ type Logger interface

+ Debug func(msg string, args ...any)

+ Info func(msg string, args ...any)

+ type MultiRemapper []Remapper

+ func (t MultiRemapper) ReMap(h *History) error

+ type RemapUpdater struct

+ Ignore *regexp.Regexp

+ Remapper Remapper

+ UnstructuredImagesFinder ImagesFinder

+ func (s *RemapUpdater) Update(obj runtime.Object) error

+ type Remapper interface

+ ReMap func(ref *History) error

+ type RepoRemapper struct

+ DryRun bool

+ NoClobber bool

+ RemotePath string

+ RemoteTmpl *template.Template

+ func (t *RepoRemapper) ReMap(h *History) error

+ type RepoTemplateInput struct

+ Digest string

+ DigestAlgo string

+ DigestHex string

+ Registry string

+ RemotePath string

+ Repository string

+ Tag string

+ type Setter func(img string)

+ type TagRemapper struct

+ CheckOnly bool

+ func (t *TagRemapper) ReMap(h *History) error

+ type Updater interface

+ Update func(obj runtime.Object) error

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL