misconf

Documentation

Index

• func NewCauseWithCode(underlying scan.Result) types.CauseMetadata
• func ResultsToMisconf(configType string, scannerName string, results scan.Results) []types.Misconfiguration
• type Scanner
  • func NewAzureARMScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewCloudFormationScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewDockerfileScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewHelmScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewKubernetesScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformPlanScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func NewTerraformScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)
  • func (s *Scanner) Scan(ctx context.Context, fsys fs.FS) ([]types.Misconfiguration, error)
• type ScannerOption
  • func (o *ScannerOption) Sort()

Functions

func NewCauseWithCode

func NewCauseWithCode(underlying scan.Result) types.CauseMetadata

func ResultsToMisconf

func ResultsToMisconf(configType string, scannerName string, results scan.Results) []types.Misconfiguration

ResultsToMisconf is exported for trivy-plugin-aqua purposes only

Types

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

func NewAzureARMScanner

func NewAzureARMScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewCloudFormationScanner

func NewCloudFormationScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewDockerfileScanner

func NewDockerfileScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewHelmScanner

func NewHelmScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewKubernetesScanner

func NewKubernetesScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformPlanScanner

func NewTerraformPlanScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func NewTerraformScanner

func NewTerraformScanner(filePatterns []string, opt ScannerOption) (*Scanner, error)

func (*Scanner) Scan

func (s *Scanner) Scan(ctx context.Context, fsys fs.FS) ([]types.Misconfiguration, error)

type ScannerOption

type ScannerOption struct {
	Trace                   bool
	RegoOnly                bool
	Namespaces              []string
	PolicyPaths             []string
	DataPaths               []string
	DisableEmbeddedPolicies bool

	HelmValues       []string
	HelmValueFiles   []string
	HelmFileValues   []string
	HelmStringValues []string
	TerraformTFVars  []string
	K8sVersion       string
}

func (*ScannerOption) Sort

func (o *ScannerOption) Sort()