Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Refactor scan and patch steps in parallel and provide report after patching #243

Open
wants to merge 29 commits into
base: main
Choose a base branch
from
Open

Refactor scan and patch steps in parallel and provide report after patching #243

wants to merge 29 commits into from

Commits on Oct 7, 2024

  1. feat: Add first proposal for semi-automatic CVEs reports

    @nutellinoit @g-iannelli
    nutellinoit authored and g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    9ab29e0 View commit details
    Browse the repository at this point in the history

  2. feat: proposal for automatic CVEs scanning and report of multiple KFD… 

    … versions
    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    0c5885e View commit details
    Browse the repository at this point in the history

  3. feat: add experimental dry copacetic

    @nutellinoit @g-iannelli
    nutellinoit authored and g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    fe91c27 View commit details
    Browse the repository at this point in the history

  4. feat: improve script

    @nutellinoit @g-iannelli
    nutellinoit authored and g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    bc7cbdb View commit details
    Browse the repository at this point in the history

  5. feat: fix output, improve printing

    @nutellinoit @g-iannelli
    nutellinoit authored and g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    d4fea65 View commit details
    Browse the repository at this point in the history

  6. feat(automatic CVE patching): improve patching by KFD version

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    d9f77c9 View commit details
    Browse the repository at this point in the history

  7. ci(exprerimental-patch-dry): try to execute scan and patching

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    dc2adec View commit details
    Browse the repository at this point in the history

  8. ci(experimental-patch-dry): add furyctl

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    dfa11d4 View commit details
    Browse the repository at this point in the history

  9. ci(cve-scan-and-patch): enable secured image push

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    0d0c539 View commit details
    Browse the repository at this point in the history

  10. ci(cve-scan-and-patch): update docker/login-action to v3

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    b7faadc View commit details
    Browse the repository at this point in the history

  11. feat(cve-scan-and-patch): improve check if image to scan exists

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    2fccc70 View commit details
    Browse the repository at this point in the history

  12. feat(cve-scan-patch): add trivy dbs download once and publishing repo… 

    …rts as release
    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    8e06a9c View commit details
    Browse the repository at this point in the history

  13. feat(cve-scan-patch): add trivy scan vuls only and remove parallel sc… 

    …anning
    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    73fc811 View commit details
    Browse the repository at this point in the history

  14. fix(cve-scan-patch): add trivy clean --scan-cache to reduce disk usage

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    25161fc View commit details
    Browse the repository at this point in the history

  15. fix(cve-scan-patching): add buildkit cache prune after each image pat… 

    …ching
    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    838dead View commit details
    Browse the repository at this point in the history

  16. chore(cve-scan-patching): add KFD Version: v1.27.9 v1.28.4 v1.29.4

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    48edb53 View commit details
    Browse the repository at this point in the history

  17. ci(cve-scan-patching): remove publish report as release

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    8c22c8d View commit details
    Browse the repository at this point in the history

  18. docs(cve-scan-patching): update HOW_TO

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    0fd7c52 View commit details
    Browse the repository at this point in the history

  19. feat(cve-scan-patch): use trivy DBs from registry.sighup.io

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    7ed4049 View commit details
    Browse the repository at this point in the history

  20. fix(cve-scan-patch): pass docker login to copa buildkit

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    c1a72ad View commit details
    Browse the repository at this point in the history

  21. ci(cve-scan-patch): update furyctl

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    5b6755a View commit details
    Browse the repository at this point in the history

  22. fix(cve-scan-patch): tag secured image from patched one

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    01ee678 View commit details
    Browse the repository at this point in the history

  23. fix(cve-scan-patch): avoid useless cleanup

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    7c59144 View commit details
    Browse the repository at this point in the history

  24. feat(cve-scan-patch): add DRY_RUN in patch_images_with_copacetic.sh

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    6dd4e3a View commit details
    Browse the repository at this point in the history

  25. feat(cve-scan-patch): add older KFD versions

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    fbfc626 View commit details
    Browse the repository at this point in the history

  26. feat(cve-scan-patch): refactoring scan and patch steps

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    3e9387b View commit details
    Browse the repository at this point in the history

  27. feat(cve-scan-patch): patch image in dedicated GH Action job

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    041850c View commit details
    Browse the repository at this point in the history

  28. feat(cve-scan-patch): pull moby/buildkit from registry.sighup.io/fury… 

    …-secured
    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    0e5de42 View commit details
    Browse the repository at this point in the history

  29. feat(cve-scan-patch): improve logging and bugfixing

    @g-iannelli
    g-iannelli committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    1da1ed3 View commit details
    Browse the repository at this point in the history