Aaron Meihm
29c5f68bb4
fix various golint warnings
2017-07-19 11:20:19 -05:00
Aaron Meihm
bba2ac14e0
gofmt some missed files
2017-07-19 10:41:34 -05:00
Aaron Meihm
c327638a67
in TestResult JSON(), fix issue with ignored fmt.Sprintf result
2017-07-19 10:37:49 -05:00
Aaron Meihm
0c1e3ceffe
fixes a spelling error in comment
2017-07-19 10:33:39 -05:00
Aaron Meihm
2d70687c9b
Merge pull request #14 from ameihm0912/vulnpolicy-clair
...
vulnerability policy generation and clair integration
2017-07-19 10:21:48 -05:00
Aaron Meihm
0994e7033d
add a README for scribevulnpolicy
2017-07-19 10:15:24 -05:00
Aaron Meihm
d73d66473a
support setting scribe onlynewest on certain packages as required
...
This collapses returned version strings such that only the newest
version string for a given package is considered if multiple are
installed.
Right now this is just a static list in the code but should probably be
adjustable by a config file.
2017-07-19 09:58:35 -05:00
Aaron Meihm
43a146fa98
add tags to the tests that will aid in reporting
2017-07-19 09:35:18 -05:00
Aaron Meihm
6b6395c1a4
check err in result from generateTestId in correct place
2017-07-19 09:30:34 -05:00
Aaron Meihm
7dc08ccd6a
policy generation for centos6/7
2017-07-19 00:14:08 -05:00
Aaron Meihm
10ce0275c5
scribevulnpolicy: redhat.go -> centos.go
2017-07-18 22:49:23 -05:00
Aaron Meihm
d069b90a33
scribevulnpolicy: remove old os specific support
2017-07-18 22:48:09 -05:00
Aaron Meihm
1a69964c15
vendor lib/pq
2017-07-18 16:57:29 -05:00
Aaron Meihm
c39b3b96b3
update scribevulnpolicy with initial clair db query support
2017-07-18 16:56:56 -05:00
Aaron Meihm
772728f6c0
vulnpolicy.go -> main.go
2017-07-18 15:03:45 -05:00
Aaron Meihm
c15e5113cf
update gitignore to ignore generated test json files
2017-07-18 15:02:41 -05:00
Aaron Meihm
4f03b9f3e6
rename existing vulnpolicy lib which will become scribevulnpolicy cmd
2017-07-18 14:59:08 -05:00
Aaron Meihm
769b49c0ed
remove ubuntu-cve-tracker
2017-07-18 14:58:11 -05:00
Aaron Meihm
75eced0ec2
remove scribevulnpolicy
2017-07-18 14:57:53 -05:00
Aaron Meihm
a156bd7826
remove parse-nasltokens
2017-07-18 14:56:33 -05:00
Aaron Meihm
e19094f52e
Merge pull request #13 from ameihm0912/cleanup
...
Update vendored packages, use govend
2017-07-18 10:03:41 -05:00
Aaron Meihm
4d37fbfd0f
update vendoring Makefile target to use govend
2017-07-18 09:54:41 -05:00
Aaron Meihm
78da3b4000
update vendored packages
2017-07-18 09:46:31 -05:00
Aaron Meihm
ecf34e89c8
better handling of pure integer version strings
...
detects version strings that are composed entirely of an integer value
and handles comparisons.
Closes #12
2016-12-20 09:53:03 -06:00
Aaron Meihm
30f4713d44
Merge pull request #10 from mozilla/yaml
...
Support YAML format in policies
2016-03-22 09:45:38 -05:00
Julien Vehent
2abd00ea04
vendor yaml package
2016-03-21 21:28:20 -04:00
Julien Vehent
7cdcbda086
Support YAML format in policies
2016-03-21 21:28:20 -04:00
Julien Vehent
7d2251b8ac
update link to doc
2016-03-18 15:20:54 -04:00
Aaron Meihm
c8148c1a58
Merge pull request #8 from mozilla/fixgopath
...
Fix Go Path
2016-03-18 12:47:12 -05:00
Julien Vehent
ccab368114
Update travis-ci to 1.6
2016-03-18 13:25:25 -04:00
Julien Vehent
8d37e6b172
Use standard GOPATH
2016-03-18 13:25:25 -04:00
Aaron Meihm
ccdc782bb6
Merge pull request #7 from ameihm0912/master
...
add release test for amazon linux
2016-01-21 13:41:41 -06:00
Aaron Meihm
11254081a4
add release test for amazon linux
2016-01-21 13:39:25 -06:00
Aaron Meihm
440cf277d9
include policy category as a tag
2016-01-13 13:13:19 -06:00
Aaron Meihm
4f3646c4b4
Merge pull request #6 from ameihm0912/master
...
Various updates related to pkg mgmt and policy generation
2016-01-13 10:20:16 -06:00
Aaron Meihm
13c2eafec6
add optional test name to override unique id from policy for display
2016-01-13 09:59:15 -06:00
Aaron Meihm
1e13334212
add test for pkg onlynewest flag
2016-01-13 09:35:12 -06:00
Aaron Meihm
1bcd29210e
also include package name in test id generation
2016-01-12 14:12:42 -06:00
Aaron Meihm
af56891814
generate unique test id based on supplied policy entry values
2016-01-12 13:45:26 -06:00
Aaron Meihm
dc9e5bcb8b
optional object parameter to select newest package version from set
...
If this flag is set, and multiple versions of the same package
are installed on the system, the object will only be populated
with the information from the newest version of the package.
2016-01-11 10:52:42 -06:00
Aaron Meihm
6fd4223b8a
policy generators for rhel/centos
2016-01-10 16:58:56 -06:00
Aaron Meihm
1fa33a7416
Merge pull request #5 from ameihm0912/master
...
various enhancements and fixes
2016-01-08 16:13:50 -06:00
Aaron Meihm
0f0302ccf2
also store pkg architecture in package manager
2016-01-08 15:17:45 -06:00
Aaron Meihm
f28acc14c5
additional ubuntu collection entries
2016-01-08 14:34:29 -06:00
Aaron Meihm
12a944ba60
collection expressions to collapse similar package objects
2016-01-08 14:19:26 -06:00
Aaron Meihm
35cdf961ab
Add an option to only print true outcomes in scribecmd
2016-01-08 11:16:36 -06:00
Aaron Meihm
dc7c1b3bca
reorganize how we use metadata in tests
...
This includes the test description in human readable output, in addition
to the tags associated with the test
2016-01-08 11:04:57 -06:00
Aaron Meihm
7d1b0ecaac
add release entry for wily
2016-01-07 11:07:19 -06:00
Aaron Meihm
345cc1620c
start of vulnerability import format for document generation
...
This is intended to provide an intermediary format to simplify
generation of scribe documents for vulnerability checks. Tools can
provide information using a simpler JSON format, which scribevulnpolicy
will use to create scribe documents. This eventually will replace the
logic in various importers that are being used.
2016-01-06 14:28:54 -06:00
Aaron Meihm
912cd2dbcb
continue if stat() fails during link resolution
2015-12-30 15:57:59 -06:00