misconf

Documentation

Index

• func CreateDataFS(dataPaths []string, options ...string) (fs.FS, []string, error)
• func CreatePolicyFS(policyPaths []string) (fs.FS, []string, error)
• func NewCauseWithCode(underlying scan.Result) types.CauseMetadata
• func ResultsToMisconf(configType string, scannerName string, results scan.Results) []types.Misconfiguration
• type Scanner
  • func NewAzureARMScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewCloudFormationScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewDockerfileScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewHelmScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewKubernetesScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformPlanScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func (s *Scanner) Scan(ctx context.Context, fsys fs.FS) ([]types.Misconfiguration, error)
• type ScannerOption
  • func (o *ScannerOption) Sort()

Functions

func CreateDataFS

func CreateDataFS(dataPaths []string, options ...string) (fs.FS, []string, error)

func CreatePolicyFS

func CreatePolicyFS(policyPaths []string) (fs.FS, []string, error)

func NewCauseWithCode

func NewCauseWithCode(underlying scan.Result) types.CauseMetadata

func ResultsToMisconf

func ResultsToMisconf(configType string, scannerName string, results scan.Results) []types.Misconfiguration

ResultsToMisconf is exported for vul-plugin-aqua purposes only

Types

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

func NewAzureARMScanner

func NewAzureARMScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewCloudFormationScanner

func NewCloudFormationScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewDockerfileScanner

func NewDockerfileScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewHelmScanner

func NewHelmScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewKubernetesScanner

func NewKubernetesScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformPlanScanner

func NewTerraformPlanScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformScanner

func NewTerraformScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func (*Scanner) Scan

func (s *Scanner) Scan(ctx context.Context, fsys fs.FS) ([]types.Misconfiguration, error)

type ScannerOption

type ScannerOption struct {
	Trace                    bool
	RegoOnly                 bool
	Namespaces               []string
	PolicyPaths              []string
	DataPaths                []string
	DisableEmbeddedPolicies  bool
	DisableEmbeddedLibraries bool

	HelmValues          []string
	HelmValueFiles      []string
	HelmFileValues      []string
	HelmStringValues    []string
	TerraformTFVars     []string
	TfExcludeDownloaded bool
	K8sVersion          string
}

func (*ScannerOption) Sort

func (o *ScannerOption) Sort()