analyzer

Documentation

Index

• func CheckHistories(images []*_image.ImageInfo) (bool, []*threat)
• func RBACVulnTypeJudge(rules, resources []string) (string, string)
• type AnType
• type KScanner
  • func (ks *KScanner) Kanalyze(ctx context.Context) error
• type MalLevel
• type MalReporter
• type RBACVuln
• type Scanner
  • func (s *Scanner) Analyze(ctx context.Context) error

Functions

func CheckHistories

func CheckHistories(images []*_image.ImageInfo) (bool, []*threat)

func RBACVulnTypeJudge

func RBACVulnTypeJudge(rules, resources []string) (string, string)

Types

type AnType

type AnType struct {
	Values []string
	// contains filtered or unexported fields
}

type KScanner

type KScanner struct {
	KClient     *kubernetes.Clientset
	KConfig     *rest.Config
	Version     string
	MasterNodes map[string]*nodeInfo

	VulnConfigures []*threat
	VulnContainers []*container
}

func (*KScanner) Kanalyze

func (ks *KScanner) Kanalyze(ctx context.Context) error

type MalLevel

type MalLevel int8

const (
	// Unknown item represents the content is normal.
	Unknown MalLevel = 0
	// Confusion item represents the content matches many safe rules.
	Confusion MalLevel = 1
	// Executable item represents the content is an executable binary.
	Executable MalLevel = 2
)

type MalReporter

type MalReporter struct {
	Types MalLevel
	Score float64
	Plain string
}

type RBACVuln

type RBACVuln struct {
	Severity           string
	ClusterRoleBinding string
	RoleBinding        string
}

type Scanner

type Scanner struct {
	DApi           inspector.DockerApi
	VulnContainers []*container

	EngineVersion string
	ServerVersion string
}

func (*Scanner) Analyze

func (s *Scanner) Analyze(ctx context.Context) error