Documentation ¶
Index ¶
- Constants
- Variables
- func AggregateResourcesByAPIServerPod(k8sObjects []workloadinterface.IMetadata) workloadinterface.IMetadata
- func AggregateResourcesBySubjects(k8sObjects []workloadinterface.IMetadata) ([]workloadinterface.IMetadata, error)
- func DeepCopyMap(m map[string]interface{}) (map[string]interface{}, error)
- func GetRuntimePods() string
- func GetUniqueResources(k8sResources []map[string]interface{}) []map[string]interface{}
- func GetUniqueResourcesIDs(k8sResourcesList []string) []string
- func MockExternalFacingService() string
- func MockRegoPrivilegedPods() string
- func MockTemp() string
- func RegoResourcesAggregator(rule *PolicyRule, k8sObjects []workloadinterface.IMetadata) ([]workloadinterface.IMetadata, error)
- func SetDefaultScore(frameworkReport *FrameworkReport)
- func SetUniqueResourcesCounter(frameworkReport *FrameworkReport)
- func StringInSlice(strSlice []string, str string) bool
- func TrimUniqueIDs(origin, trimFrom []string) []string
- type AlertObject
- type AlertScore
- type AttackTrackCategories
- type Category
- type Control
- func (control *Control) GetActionRequiredAttribute() string
- func (control *Control) GetAttackTrackCategories(attackTrackName string) []string
- func (control *Control) GetControlId() string
- func (control *Control) GetControlTypeTags() []string
- func (control *Control) GetScore() float64
- func (control *Control) GetSeverity() int
- type ControlConfigInputs
- type ControlReport
- func (controlReport *ControlReport) Failed() bool
- func (controlReport *ControlReport) GetID() string
- func (controlReport *ControlReport) GetNumberOfFailedResources() int
- func (controlReport *ControlReport) GetNumberOfResources() int
- func (controlReport *ControlReport) GetNumberOfWarningResources() int
- func (controlReport *ControlReport) GetStatus() string
- func (controlReport *ControlReport) ListControlsInputKinds() []string
- func (controlReport *ControlReport) ListResourcesIDs() *ResourcesIDs
- func (controlReport *ControlReport) Passed() bool
- func (controlReport *ControlReport) RemoveData(keepFields, keepMetadataFields []string)
- func (controlReport *ControlReport) SetDefaultScore()
- func (controlReport *ControlReport) SetNumberOfFailedResources(n int)
- func (controlReport *ControlReport) SetNumberOfResources(n int)
- func (controlReport *ControlReport) SetNumberOfWarningResources(n int)
- func (controlReport *ControlReport) SetResourcesCounters()
- func (controlReport *ControlReport) Warning() bool
- type Framework
- type FrameworkReport
- func (frameworkReport *FrameworkReport) Failed() bool
- func (frameworkReport *FrameworkReport) GetNumberOfFailedResources() int
- func (frameworkReport *FrameworkReport) GetNumberOfResources() int
- func (frameworkReport *FrameworkReport) GetNumberOfWarningResources() int
- func (frameworkReport *FrameworkReport) GetStatus() string
- func (frameworkReport *FrameworkReport) ListResourcesIDs() *ResourcesIDs
- func (frameworkReport *FrameworkReport) Passed() bool
- func (frameworkReport *FrameworkReport) RemoveData(keepFields, keepMetadataFields []string)
- func (frameworkReport *FrameworkReport) SetDefaultScore()
- func (frameworkReport *FrameworkReport) SetNumberOfFailedResources(n int)
- func (frameworkReport *FrameworkReport) SetNumberOfResources(n int)
- func (frameworkReport *FrameworkReport) SetNumberOfWarningResources(n int)
- func (frameworkReport *FrameworkReport) SetResourcesCounters()
- func (frameworkReport *FrameworkReport) Warning() bool
- type FrameworkSubSection
- type ICloudMetadata
- type IReportStatus
- type IReportSummary
- type IResource
- type LastCommit
- type PolicyRule
- type PostureReport
- type RelatedObject
- type Resource
- func (r *Resource) GetApiVersion() string
- func (r *Resource) GetID() string
- func (r *Resource) GetKind() string
- func (r *Resource) GetName() string
- func (r *Resource) GetNamespace() string
- func (r *Resource) GetObject() map[string]interface{}
- func (r *Resource) GetObjectType() workloadinterface.ObjectType
- func (r *Resource) GetSource() *Source
- func (r *Resource) GetWorkload() map[string]interface{}
- func (r *Resource) SetApiVersion(s string)
- func (r *Resource) SetKind(s string)
- func (r *Resource) SetName(s string)
- func (r *Resource) SetNamespace(s string)
- func (r *Resource) SetObject(m map[string]interface{})
- func (r *Resource) SetSource(s *Source)
- func (r *Resource) SetWorkload(m map[string]interface{})
- type ResourceUniqueCounter
- type ResourcesIDs
- type RuleDependency
- type RuleLanguages
- type RuleMatchObjects
- type RuleReport
- func (ruleReport *RuleReport) Failed() bool
- func (ruleReport *RuleReport) GetAllResourcesIDs() []string
- func (ruleReport *RuleReport) GetFailedResources() []map[string]interface{}
- func (ruleReport *RuleReport) GetNumberOfFailedResources() int
- func (ruleReport *RuleReport) GetNumberOfResources() int
- func (ruleReport *RuleReport) GetNumberOfWarningResources() int
- func (ruleReport *RuleReport) GetStatus() string
- func (ruleReport *RuleReport) GetWarnignResources() []map[string]interface{}
- func (ruleReport *RuleReport) ListResourcesIDs() *ResourcesIDs
- func (ruleReport *RuleReport) Passed() bool
- func (ruleReport *RuleReport) RemoveData(keepFields, keepMetadataFields []string)
- func (ruleReport *RuleReport) SetNumberOfFailedResources(n int)
- func (ruleReport *RuleReport) SetNumberOfResources(n int)
- func (ruleReport *RuleReport) SetNumberOfWarningResources(n int)
- func (ruleReport *RuleReport) SetResourcesCounters()
- func (ruleReport *RuleReport) Warning() bool
- type RuleResponse
- func (ruleResponse *RuleResponse) Failed() bool
- func (ruleResponse *RuleResponse) GetFailedResources() []map[string]interface{}
- func (ruleResponse *RuleResponse) GetStatus() string
- func (ruleResponse *RuleResponse) GetWarnignResources() []map[string]interface{}
- func (ruleResponse *RuleResponse) Passed() bool
- func (ruleResponse *RuleResponse) RemoveData(keepFields, keepMetadataFields []string)
- func (ruleResponse *RuleResponse) Warning() bool
- type RuleStatus
- type ScanningScope
- type ScanningScopeType
- type Source
- type SubCategory
- type UpdatedControl
- type UpdatedFramework
Constants ¶
const ( ControlAttributeKeyTypeTag = "controlTypeTags" ControlAttributeKeyAttackTracks = "attackTracks" )
const ( StatusPassed string = "success" StatusWarning string = "warning" StatusIgnore string = "ignore" StatusFailed string = "failed" )
const ( SourceTypeJson string = "JSON" SourceTypeYaml string = "YAML" SourceTypeHelmChart string = "Helm Chart" SourceTypeKustomizeDirectory string = "Kustomize Directory" )
const ActionRequiredAttribute string = "actionRequired"
Variables ¶
var ( AMockCustomerGUID = "5d817063-096f-4d91-b39b-8665240080af" AMockJobID = "36b6f9e1-3b63-4628-994d-cbe16f81e9c7" AMockReportID = "2c31e4da-c6fe-440d-9b8a-785b80c8576a" AMockClusterName = "clusterA" AMockFrameworkName = "testFrameworkA" AMockControlName = "testControlA" AMockRuleName = "testRuleA" AMockPortalBase = *armotypes.MockPortalBase(AMockCustomerGUID, "", nil) )
Mock A
Functions ¶
func AggregateResourcesByAPIServerPod ¶
func AggregateResourcesByAPIServerPod(k8sObjects []workloadinterface.IMetadata) workloadinterface.IMetadata
Create custom object of apiserver pod. Has required fields + cmdline
func AggregateResourcesBySubjects ¶
func AggregateResourcesBySubjects(k8sObjects []workloadinterface.IMetadata) ([]workloadinterface.IMetadata, error)
func DeepCopyMap ¶
DeepCopyMap performs a deep copy of the given map m.
func GetRuntimePods ¶
func GetRuntimePods() string
func GetUniqueResources ¶
GetUniqueResources the list of resources can contain duplications, this function removes the resource duplication based on workloadinterface.GetID
func GetUniqueResourcesIDs ¶
GetUniqueResourcesIDs yields the list of unique resource IDs. Duplicates are removed, based on the workload.GetID() interface method.
NOTE: the input slice is modified in-place.
func MockExternalFacingService ¶
func MockExternalFacingService() string
func MockRegoPrivilegedPods ¶
func MockRegoPrivilegedPods() string
func RegoResourcesAggregator ¶
func RegoResourcesAggregator(rule *PolicyRule, k8sObjects []workloadinterface.IMetadata) ([]workloadinterface.IMetadata, error)
func SetDefaultScore ¶
func SetDefaultScore(frameworkReport *FrameworkReport)
SetDefaultScore sets the framework,control default score
func SetUniqueResourcesCounter ¶
func SetUniqueResourcesCounter(frameworkReport *FrameworkReport)
SetDefaultScore sets the framework,control,rule resource counter
func StringInSlice ¶
func TrimUniqueIDs ¶
TrimUniqueResources trims the origin list to contain only elements that are NOT already present in the trimFrom list.
This is used to cover the case when the same resource appears in the warning list and in the failed list ¶
NOTE: the origin slice is modified in-place.
Types ¶
type AlertObject ¶
type AlertScore ¶
type AlertScore float32
type AttackTrackCategories ¶ added in v0.0.187
type Category ¶ added in v0.0.261
type Category struct { Name string `json:"name" bson:"name"` ID string `json:"id" bson:"id"` SubCategory *SubCategory `json:"subCategory,omitempty" bson:"subCategory,omitempty"` }
type Control ¶
type Control struct { FixedInput map[string][]string `json:"fixedInput,omitempty"` RulesIDs *[]string `json:"rulesIDs,omitempty" bson:"rulesIDs,omitempty"` armotypes.PortalBase `json:",inline" bson:"inline"` Control_ID string `json:"id,omitempty" bson:"id,omitempty" ` ControlID string `json:"controlID" bson:"controlID"` CreationTime string `json:"creationTime" bson:"creationTime"` Description string `json:"description" bson:"description"` Remediation string `json:"remediation" bson:"remediation"` Rules []PolicyRule `json:"rules" bson:"rules,omitempty"` FrameworkNames []string `json:"frameworkNames,omitempty" bson:"frameworkNames,omitempty"` BaseScore float32 `json:"baseScore,omitempty" bson:"baseScore,omitempty"` ARMOImprovementFactor float32 `json:"ARMOImprovementFactor,omitempty" bson:"ARMOImprovementFactor,omitempty"` ScanningScope *ScanningScope `json:"scanningScope,omitempty" bson:"scanningScope,omitempty"` Category *Category `json:"category,omitempty" bson:"category,omitempty"` }
Control represents a collection of rules which are combined together to single purpose
func (*Control) GetActionRequiredAttribute ¶ added in v0.0.227
func (*Control) GetAttackTrackCategories ¶ added in v0.0.187
func (*Control) GetControlId ¶ added in v0.0.187
func (*Control) GetControlTypeTags ¶ added in v0.0.187
func (*Control) GetSeverity ¶ added in v0.0.187
type ControlConfigInputs ¶
type ControlReport ¶
type ControlReport struct { armotypes.PortalBase `json:",inline"` Control_ID string `json:"id,omitempty"` // to be Deprecated ControlID string `json:"controlID"` Name string `json:"name"` RuleReports []RuleReport `json:"ruleReports"` Remediation string `json:"remediation"` Description string `json:"description"` Score float32 `json:"score"` BaseScore float32 `json:"baseScore,omitempty"` ARMOImprovement float32 `json:"ARMOImprovement,omitempty"` ResourceUniqueCounter `json:",inline"` }
func (*ControlReport) Failed ¶
func (controlReport *ControlReport) Failed() bool
func (*ControlReport) GetID ¶
func (controlReport *ControlReport) GetID() string
func (*ControlReport) GetNumberOfFailedResources ¶
func (controlReport *ControlReport) GetNumberOfFailedResources() int
func (*ControlReport) GetNumberOfResources ¶
func (controlReport *ControlReport) GetNumberOfResources() int
func (*ControlReport) GetNumberOfWarningResources ¶
func (controlReport *ControlReport) GetNumberOfWarningResources() int
func (*ControlReport) GetStatus ¶
func (controlReport *ControlReport) GetStatus() string
func (*ControlReport) ListControlsInputKinds ¶
func (controlReport *ControlReport) ListControlsInputKinds() []string
func (*ControlReport) ListResourcesIDs ¶
func (controlReport *ControlReport) ListResourcesIDs() *ResourcesIDs
GetResourcesPerControl - return unique lists of resource IDs: all,warning,failed
func (*ControlReport) Passed ¶
func (controlReport *ControlReport) Passed() bool
func (*ControlReport) RemoveData ¶
func (controlReport *ControlReport) RemoveData(keepFields, keepMetadataFields []string)
func (*ControlReport) SetDefaultScore ¶
func (controlReport *ControlReport) SetDefaultScore()
func (*ControlReport) SetNumberOfFailedResources ¶
func (controlReport *ControlReport) SetNumberOfFailedResources(n int)
func (*ControlReport) SetNumberOfResources ¶
func (controlReport *ControlReport) SetNumberOfResources(n int)
func (*ControlReport) SetNumberOfWarningResources ¶
func (controlReport *ControlReport) SetNumberOfWarningResources(n int)
func (*ControlReport) SetResourcesCounters ¶
func (controlReport *ControlReport) SetResourcesCounters()
func (*ControlReport) Warning ¶
func (controlReport *ControlReport) Warning() bool
type Framework ¶
type Framework struct { armotypes.PortalBase `json:",inline" bson:"inline"` CreationTime string `json:"creationTime" bson:"creationTime"` Description string `json:"description" bson:"description"` TypeTags []string `json:"typeTags" bson:"typeTags"` Controls []Control `json:"controls" bson:"-"` // for new list of controls in POST/UPADTE requests ControlsIDs *[]string `json:"controlsIDs,omitempty" bson:"controlsIDs,omitempty"` SubSections map[string]*FrameworkSubSection `json:"subSections,omitempty" bson:"subSections,omitempty"` ScanningScope *ScanningScope `json:"scanningScope,omitempty" bson:"scanningScope,omitempty"` }
Framework represents a collection of controls which are combined together to expose comprehensive behavior
func MockFrameworkA ¶
func MockFrameworkA() *Framework
type FrameworkReport ¶
type FrameworkReport struct { Name string `json:"name"` ControlReports []ControlReport `json:"controlReports"` Score float32 `json:"score,omitempty"` ARMOImprovement float32 `json:"ARMOImprovement,omitempty"` WCSScore float32 `json:"wcsScore,omitempty"` ResourceUniqueCounter `json:",inline"` }
func MockFrameworkReportA ¶
func MockFrameworkReportA() *FrameworkReport
func (*FrameworkReport) Failed ¶
func (frameworkReport *FrameworkReport) Failed() bool
func (*FrameworkReport) GetNumberOfFailedResources ¶
func (frameworkReport *FrameworkReport) GetNumberOfFailedResources() int
func (*FrameworkReport) GetNumberOfResources ¶
func (frameworkReport *FrameworkReport) GetNumberOfResources() int
func (*FrameworkReport) GetNumberOfWarningResources ¶
func (frameworkReport *FrameworkReport) GetNumberOfWarningResources() int
func (*FrameworkReport) GetStatus ¶
func (frameworkReport *FrameworkReport) GetStatus() string
func (*FrameworkReport) ListResourcesIDs ¶
func (frameworkReport *FrameworkReport) ListResourcesIDs() *ResourcesIDs
GetResourcesPerControl - return unique lists of resource IDs: all,warning,failed
func (*FrameworkReport) Passed ¶
func (frameworkReport *FrameworkReport) Passed() bool
func (*FrameworkReport) RemoveData ¶
func (frameworkReport *FrameworkReport) RemoveData(keepFields, keepMetadataFields []string)
func (*FrameworkReport) SetDefaultScore ¶
func (frameworkReport *FrameworkReport) SetDefaultScore()
func (*FrameworkReport) SetNumberOfFailedResources ¶
func (frameworkReport *FrameworkReport) SetNumberOfFailedResources(n int)
func (*FrameworkReport) SetNumberOfResources ¶
func (frameworkReport *FrameworkReport) SetNumberOfResources(n int)
func (*FrameworkReport) SetNumberOfWarningResources ¶
func (frameworkReport *FrameworkReport) SetNumberOfWarningResources(n int)
func (*FrameworkReport) SetResourcesCounters ¶
func (frameworkReport *FrameworkReport) SetResourcesCounters()
func (*FrameworkReport) Warning ¶
func (frameworkReport *FrameworkReport) Warning() bool
type FrameworkSubSection ¶
type FrameworkSubSection struct { armotypes.PortalBase `json:",inline" bson:"inline"` ID string `json:"id" bson:"id"` // unique id inside the framework. SubSections map[string]*FrameworkSubSection `json:"subSections,omitempty" bson:"subSections,omitempty"` // inner subsection ControlIDs []string `json:"controlsIDs,omitempty" bson:"controlsIDs,omitempty"` // control ids. Controls []*Control `json:"-" bson:"-"` // controls list for fast access }
type ICloudMetadata ¶ added in v0.0.217
type ICloudMetadata interface { // Get the suffix of the name. For example, for a cluster named "gke_project_zone_my-cluster" in GKE, the suffix is "my-cluster" GetName() string // Get full name as it appears in the config file GetFullName() string // Get provider name GetProvider() string // Get the prefix of the name. For example, for a cluster named "gke_project_zone_my-cluster" in GKE, the prefix is "gke_project_zone" GetPrefix() string }
type IReportStatus ¶
type IReportSummary ¶
type IResource ¶
type IResource interface { workloadinterface.IMetadata // GetSource() *Source SetSource(s *Source) }
IResource is an extension for IMetadata so we can include the source and other file metadata
type LastCommit ¶
type LastCommit struct { Hash string `json:"hash,omitempty"` // commit hash Date time.Time `json:"date,omitempty"` // commit date CommitterName string `json:"committerName,omitempty"` // committer name CommitterEmail string `json:"committerEmail,omitempty"` // committer email Message string `json:"message,omitempty"` // commit message }
LastCommit - file in git repo last commit metadata
type PolicyRule ¶
type PolicyRule struct { armotypes.PortalBase `json:",inline" bson:"inline"` CreationTime string `json:"creationTime" bson:"creationTime"` Rule string `json:"rule" bson:"rule"` // multiline string of raw.rego ResourceEnumerator string `json:"resourceEnumerator" bson:"resourceEnumerator"` // multiline string of filter.rego, if exists RuleLanguage RuleLanguages `json:"ruleLanguage" bson:"ruleLanguage"` // default "rego" Match []RuleMatchObjects `json:"match" bson:"match"` // k8s resources this rule needs as inputs DynamicMatch []RuleMatchObjects `json:"dynamicMatch,omitempty" bson:"dynamicMatch,omitempty"` // NON-k8s resources this rule needs as inputs, acquired by host-scanner RuleDependencies []RuleDependency `json:"ruleDependencies" bson:"ruleDependencies"` // packages this rule uses ConfigInputs []string `json:"configInputs" bson:"configInputs"` // DEPRECATED ControlConfigInputs []ControlConfigInputs `json:"controlConfigInputs" bson:"controlConfigInputs" ` // list of inputs from postureControlInputs in customerConfig for this rule Description string `json:"description" bson:"description"` Remediation string `json:"remediation" bson:"remediation"` RuleQuery string `json:"ruleQuery" bson:"ruleQuery" ` // default "armo_builtins" - DEPRECATED RelevantCloudProviders []string `json:"relevantCloudProviders" bson:"relevantCloudProviders"` // rule is relevant only to clusters in these cloud providers }
PolicyRule represents single rule, the fundamental executable block of policy
func MockRuleA ¶
func MockRuleA() *PolicyRule
func MockRuleB ¶
func MockRuleB() *PolicyRule
func MockRuleUntrustedRegistries ¶
func MockRuleUntrustedRegistries() *PolicyRule
type PostureReport ¶
type PostureReport struct { CustomerGUID string `json:"customerGUID"` ClusterName string `json:"clusterName"` ClusterAPIServerInfo *version.Info `json:"clusterAPIServerInfo"` ClusterCloudProvider string `json:"clusterCloudProvider"` ReportID string `json:"reportID"` JobID string `json:"jobID"` ReportGenerationTime time.Time `json:"generationTime"` FrameworkReports []FrameworkReport `json:"frameworks"` // DEPRECATED RBACObjects rbacutils.RbacObjects `json:"rbacObjects,omitempty"` // all rbac objects in cluster - roles, clusterroles, rolebindings, clusterrolebindings Resources []Resource `json:"resource,omitempty"` }
PostureReport
func MockPostureReportA ¶
func MockPostureReportA() *PostureReport
func (*PostureReport) NKeys ¶
func (file *PostureReport) NKeys() int
func (*PostureReport) RemoveData ¶
func (postureReport *PostureReport) RemoveData(keepFields, keepMetadataFields []string)
TODO - receive list full json paths
func (*PostureReport) UnmarshalJSONObject ¶
func (r *PostureReport) UnmarshalJSONObject(dec *gojay.Decoder, key string) (err error)
responsible on fast unmarshaling of various COMMON containerscan structures and substructures
UnmarshalJSONObject - File inside a pkg
type RelatedObject ¶ added in v0.0.253
type RelatedObject struct { Object map[string]interface{} `json:"object"` FailedPaths []string `json:"failedPaths"` // path in yaml that led to failure of this resource FixPaths []armotypes.FixPath `json:"fixPaths"` // path in yaml to be added to fix this resource FixCommand string `json:"fixCommand,omitempty"` // command to fix this resource }
RelatedObjects - resource that is related to the failure of the main resource
type Resource ¶
type Resource struct { ResourceID string `json:"resourceID"` Object interface{} `json:"object"` IMetadata ik8s.IMetadata `json:"-"` Source *Source `json:"source,omitempty"` }
func NewResource ¶
func NewResourceIMetadata ¶
func NewResourceIMetadata(obj workloadinterface.IMetadata) *Resource
func (*Resource) GetApiVersion ¶
func (*Resource) GetNamespace ¶
func (*Resource) GetObjectType ¶
func (r *Resource) GetObjectType() workloadinterface.ObjectType
func (*Resource) GetWorkload ¶
func (*Resource) SetApiVersion ¶
func (*Resource) SetNamespace ¶
func (*Resource) SetWorkload ¶
type ResourceUniqueCounter ¶
type ResourcesIDs ¶
type ResourcesIDs struct {
// contains filtered or unexported fields
}
func (*ResourcesIDs) GetAllResources ¶
func (r *ResourcesIDs) GetAllResources() []string
func (*ResourcesIDs) GetFailedResources ¶
func (r *ResourcesIDs) GetFailedResources() []string
func (*ResourcesIDs) GetPassedResources ¶
func (r *ResourcesIDs) GetPassedResources() []string
func (*ResourcesIDs) GetWarningResources ¶
func (r *ResourcesIDs) GetWarningResources() []string
type RuleDependency ¶
type RuleDependency struct {
PackageName string `json:"packageName" bson:"packageName"`
}
type RuleLanguages ¶
type RuleLanguages string
const ( RegoLanguage RuleLanguages = "Rego" RegoLanguage2 RuleLanguages = "rego" )
type RuleMatchObjects ¶
type RuleMatchObjects struct { APIGroups []string `json:"apiGroups" bson:"apiGroups"` // apps APIVersions []string `json:"apiVersions" bson:"apiVersions"` // v1/ v1beta1 / * Resources []string `json:"resources" bson:"resources"` // dep.., pods, FieldSelector []string `json:"fieldSelector,omitempty" bson:"fieldSelector,omitempty"` // fields selector for example metadata.name==nginx,metadata.namespace==ns1 }
RuleMatchObjects defines which objects this rule applied on
type RuleReport ¶
type RuleReport struct { Name string `json:"name"` Remediation string `json:"remediation"` RuleStatus RuleStatus `json:"ruleStatus"` // did we run the rule or not (if there where compile errors, the value will be failed) RuleResponses []RuleResponse `json:"ruleResponses"` ListInputKinds []string `json:"listInputIDs"` ResourceUniqueCounter `json:",inline"` }
func (*RuleReport) Failed ¶
func (ruleReport *RuleReport) Failed() bool
func (*RuleReport) GetAllResourcesIDs ¶
func (ruleReport *RuleReport) GetAllResourcesIDs() []string
func (*RuleReport) GetFailedResources ¶
func (ruleReport *RuleReport) GetFailedResources() []map[string]interface{}
DO NOT USE!
func (ruleReport *RuleReport) GetAllResources() []map[string]interface{} { return ruleReport.ListInputResources }
func (*RuleReport) GetNumberOfFailedResources ¶
func (ruleReport *RuleReport) GetNumberOfFailedResources() int
func (*RuleReport) GetNumberOfResources ¶
func (ruleReport *RuleReport) GetNumberOfResources() int
func (*RuleReport) GetNumberOfWarningResources ¶
func (ruleReport *RuleReport) GetNumberOfWarningResources() int
func (*RuleReport) GetStatus ¶
func (ruleReport *RuleReport) GetStatus() string
func (*RuleReport) GetWarnignResources ¶
func (ruleReport *RuleReport) GetWarnignResources() []map[string]interface{}
func (*RuleReport) ListResourcesIDs ¶
func (ruleReport *RuleReport) ListResourcesIDs() *ResourcesIDs
func (*RuleReport) Passed ¶
func (ruleReport *RuleReport) Passed() bool
func (*RuleReport) RemoveData ¶
func (ruleReport *RuleReport) RemoveData(keepFields, keepMetadataFields []string)
func (*RuleReport) SetNumberOfFailedResources ¶
func (ruleReport *RuleReport) SetNumberOfFailedResources(n int)
func (*RuleReport) SetNumberOfResources ¶
func (ruleReport *RuleReport) SetNumberOfResources(n int)
func (*RuleReport) SetNumberOfWarningResources ¶
func (ruleReport *RuleReport) SetNumberOfWarningResources(n int)
func (*RuleReport) SetResourcesCounters ¶
func (ruleReport *RuleReport) SetResourcesCounters()
func (*RuleReport) Warning ¶
func (ruleReport *RuleReport) Warning() bool
type RuleResponse ¶
type RuleResponse struct { AlertMessage string `json:"alertMessage"` FailedPaths []string `json:"failedPaths"` // path in yaml that led to failure of this resource FixPaths []armotypes.FixPath `json:"fixPaths"` // path in yaml to be added to fix this resource FixCommand string `json:"fixCommand,omitempty"` // command to fix this resource RuleStatus string `json:"ruleStatus"` PackageName string `json:"packagename"` AlertScore AlertScore `json:"alertScore"` AlertObject AlertObject `json:"alertObject"` RelatedObjects []RelatedObject `json:"relatedObjects,omitempty"` Context []string `json:"context,omitempty"` // TODO - Remove Rulename string `json:"rulename,omitempty"` // TODO - Remove Exception *armotypes.PostureExceptionPolicy `json:"exception,omitempty"` }
RegoResponse the expected response of single run of rego policy
func MockRuleResponseA ¶
func MockRuleResponseA() *RuleResponse
func ParseRegoResult ¶
func ParseRegoResult(regoResult *rego.ResultSet) ([]RuleResponse, error)
func RemoveResponse ¶
func RemoveResponse(slice []RuleResponse, index int) []RuleResponse
func (*RuleResponse) Failed ¶
func (ruleResponse *RuleResponse) Failed() bool
func (*RuleResponse) GetFailedResources ¶
func (ruleResponse *RuleResponse) GetFailedResources() []map[string]interface{}
func (*RuleResponse) GetStatus ¶
func (ruleResponse *RuleResponse) GetStatus() string
func (*RuleResponse) GetWarnignResources ¶
func (ruleResponse *RuleResponse) GetWarnignResources() []map[string]interface{}
func (*RuleResponse) Passed ¶
func (ruleResponse *RuleResponse) Passed() bool
func (*RuleResponse) RemoveData ¶
func (ruleResponse *RuleResponse) RemoveData(keepFields, keepMetadataFields []string)
func (*RuleResponse) Warning ¶
func (ruleResponse *RuleResponse) Warning() bool
type RuleStatus ¶
type ScanningScope ¶ added in v0.0.257
type ScanningScope struct {
Matches []ScanningScopeType `json:"matches"`
}
type ScanningScopeType ¶ added in v0.0.257
type ScanningScopeType string
const ( ScopeCloudAKS ScanningScopeType = "AKS" ScopeCloudGKE ScanningScopeType = "GKE" ScopeCloudEKS ScanningScopeType = "EKS" ScopeCloud ScanningScopeType = "cloud" ScopeCluster ScanningScopeType = "cluster" ScopeFile ScanningScopeType = "file" )
type Source ¶
type Source struct { Path string `json:"path,omitempty"` RelativePath string `json:"relativePath,omitempty"` // relative path from the repo base HelmPath string `json:"helmPath,omitempty"` // relative path to helm chart FileType string `json:"fileType,omitempty"` // file type HelmChartName string `json:"helmChartName,omitempty"` // helm chart name (if FileType is "Helm Chart") KustomizeDirectoryName string `json:"kustomizeDirectoryName,omitempty"` //Kustomize Directory name if File is from Kustomize Directory LastCommit LastCommit `json:"lastCommit,omitempty"` }
Source - File source metadata
type SubCategory ¶ added in v0.0.261
type UpdatedControl ¶
type UpdatedControl struct { Control `json:",inline"` Rules []interface{} `json:"rules"` }
type UpdatedFramework ¶
type UpdatedFramework struct { Framework `json:",inline"` Controls []interface{} `json:"controls"` }