Граф коммитов

159 Коммитов

Автор SHA1 Сообщение Дата
Aaron Meihm 29c5f68bb4 fix various golint warnings 2017-07-19 11:20:19 -05:00
Aaron Meihm bba2ac14e0 gofmt some missed files 2017-07-19 10:41:34 -05:00
Aaron Meihm c327638a67 in TestResult JSON(), fix issue with ignored fmt.Sprintf result 2017-07-19 10:37:49 -05:00
Aaron Meihm 0c1e3ceffe fixes a spelling error in comment 2017-07-19 10:33:39 -05:00
Aaron Meihm 2d70687c9b Merge pull request #14 from ameihm0912/vulnpolicy-clair
vulnerability policy generation and clair integration
2017-07-19 10:21:48 -05:00
Aaron Meihm 0994e7033d add a README for scribevulnpolicy 2017-07-19 10:15:24 -05:00
Aaron Meihm d73d66473a support setting scribe onlynewest on certain packages as required
This collapses returned version strings such that only the newest
version string for a given package is considered if multiple are
installed.

Right now this is just a static list in the code but should probably be
adjustable by a config file.
2017-07-19 09:58:35 -05:00
Aaron Meihm 43a146fa98 add tags to the tests that will aid in reporting 2017-07-19 09:35:18 -05:00
Aaron Meihm 6b6395c1a4 check err in result from generateTestId in correct place 2017-07-19 09:30:34 -05:00
Aaron Meihm 7dc08ccd6a policy generation for centos6/7 2017-07-19 00:14:08 -05:00
Aaron Meihm 10ce0275c5 scribevulnpolicy: redhat.go -> centos.go 2017-07-18 22:49:23 -05:00
Aaron Meihm d069b90a33 scribevulnpolicy: remove old os specific support 2017-07-18 22:48:09 -05:00
Aaron Meihm 1a69964c15 vendor lib/pq 2017-07-18 16:57:29 -05:00
Aaron Meihm c39b3b96b3 update scribevulnpolicy with initial clair db query support 2017-07-18 16:56:56 -05:00
Aaron Meihm 772728f6c0 vulnpolicy.go -> main.go 2017-07-18 15:03:45 -05:00
Aaron Meihm c15e5113cf update gitignore to ignore generated test json files 2017-07-18 15:02:41 -05:00
Aaron Meihm 4f03b9f3e6 rename existing vulnpolicy lib which will become scribevulnpolicy cmd 2017-07-18 14:59:08 -05:00
Aaron Meihm 769b49c0ed remove ubuntu-cve-tracker 2017-07-18 14:58:11 -05:00
Aaron Meihm 75eced0ec2 remove scribevulnpolicy 2017-07-18 14:57:53 -05:00
Aaron Meihm a156bd7826 remove parse-nasltokens 2017-07-18 14:56:33 -05:00
Aaron Meihm e19094f52e Merge pull request #13 from ameihm0912/cleanup
Update vendored packages, use govend
2017-07-18 10:03:41 -05:00
Aaron Meihm 4d37fbfd0f update vendoring Makefile target to use govend 2017-07-18 09:54:41 -05:00
Aaron Meihm 78da3b4000 update vendored packages 2017-07-18 09:46:31 -05:00
Aaron Meihm ecf34e89c8 better handling of pure integer version strings
detects version strings that are composed entirely of an integer value
and handles comparisons.

Closes #12
2016-12-20 09:53:03 -06:00
Aaron Meihm 30f4713d44 Merge pull request #10 from mozilla/yaml
Support YAML format in policies
2016-03-22 09:45:38 -05:00
Julien Vehent 2abd00ea04 vendor yaml package 2016-03-21 21:28:20 -04:00
Julien Vehent 7cdcbda086 Support YAML format in policies 2016-03-21 21:28:20 -04:00
Julien Vehent 7d2251b8ac update link to doc 2016-03-18 15:20:54 -04:00
Aaron Meihm c8148c1a58 Merge pull request #8 from mozilla/fixgopath
Fix Go Path
2016-03-18 12:47:12 -05:00
Julien Vehent ccab368114 Update travis-ci to 1.6 2016-03-18 13:25:25 -04:00
Julien Vehent 8d37e6b172 Use standard GOPATH 2016-03-18 13:25:25 -04:00
Aaron Meihm ccdc782bb6 Merge pull request #7 from ameihm0912/master
add release test for amazon linux
2016-01-21 13:41:41 -06:00
Aaron Meihm 11254081a4 add release test for amazon linux 2016-01-21 13:39:25 -06:00
Aaron Meihm 440cf277d9 include policy category as a tag 2016-01-13 13:13:19 -06:00
Aaron Meihm 4f3646c4b4 Merge pull request #6 from ameihm0912/master
Various updates related to pkg mgmt and policy generation
2016-01-13 10:20:16 -06:00
Aaron Meihm 13c2eafec6 add optional test name to override unique id from policy for display 2016-01-13 09:59:15 -06:00
Aaron Meihm 1e13334212 add test for pkg onlynewest flag 2016-01-13 09:35:12 -06:00
Aaron Meihm 1bcd29210e also include package name in test id generation 2016-01-12 14:12:42 -06:00
Aaron Meihm af56891814 generate unique test id based on supplied policy entry values 2016-01-12 13:45:26 -06:00
Aaron Meihm dc9e5bcb8b optional object parameter to select newest package version from set
If this flag is set, and multiple versions of the same package
are installed on the system, the object will only be populated
with the information from the newest version of the package.
2016-01-11 10:52:42 -06:00
Aaron Meihm 6fd4223b8a policy generators for rhel/centos 2016-01-10 16:58:56 -06:00
Aaron Meihm 1fa33a7416 Merge pull request #5 from ameihm0912/master
various enhancements and fixes
2016-01-08 16:13:50 -06:00
Aaron Meihm 0f0302ccf2 also store pkg architecture in package manager 2016-01-08 15:17:45 -06:00
Aaron Meihm f28acc14c5 additional ubuntu collection entries 2016-01-08 14:34:29 -06:00
Aaron Meihm 12a944ba60 collection expressions to collapse similar package objects 2016-01-08 14:19:26 -06:00
Aaron Meihm 35cdf961ab Add an option to only print true outcomes in scribecmd 2016-01-08 11:16:36 -06:00
Aaron Meihm dc7c1b3bca reorganize how we use metadata in tests
This includes the test description in human readable output, in addition
to the tags associated with the test
2016-01-08 11:04:57 -06:00
Aaron Meihm 7d1b0ecaac add release entry for wily 2016-01-07 11:07:19 -06:00
Aaron Meihm 345cc1620c start of vulnerability import format for document generation
This is intended to provide an intermediary format to simplify
generation of scribe documents for vulnerability checks. Tools can
provide information using a simpler JSON format, which scribevulnpolicy
will use to create scribe documents. This eventually will replace the
logic in various importers that are being used.
2016-01-06 14:28:54 -06:00
Aaron Meihm 912cd2dbcb continue if stat() fails during link resolution 2015-12-30 15:57:59 -06:00