feat(ci): Craft a trivy config to md parser

This commit is contained in:
kjeld Schouten-Lebbing
2021-12-04 22:59:49 +01:00
parent fb1da28904
commit d572ea1a7b
3 changed files with 23 additions and 3 deletions
+1 -1
View File
@@ -21,7 +21,7 @@ name: jackett
sources:
- https://github.com/Jackett/Jackett
type: application
version: 9.0.31
version: 9.0.32
annotations:
truecharts.org/catagories: |
- media
+21
View File
@@ -0,0 +1,21 @@
{{- if . -}}
#### Chart Object: {{ escapeXML ( index . 0 ).Target }}
{{ range . }}
{{ if (eq (len .Misconfigurations) 0) }}
| No Misconfigurations found |
|:---------------------------------|
{{ else }}
| Type | Misconfiguration ID | Check | Severity | Explaination | Solution | Links |
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|-----------------------------------------|
{{- range .Misconfigurations }}
| {{ escapeXML .Type }} | {{ escapeXML .ID }} | {{ escapeXML .Title }} | {{ escapeXML .Severity }} | {{ escapeXML .Description }} | {{ escapeXML .Message }} | <details><summary>Click to expand!</summary>{{ range .References }}<a href={{ escapeXML . | printf "%q" }}>{{ escapeXML . }}</a><br>{{ end }}</details> |
{{- end }}
{{- end }}
{{- end }}
{{- else }}
| No Misconfigurations found |
|:---------------------------------|
{{- end }}
+1 -2
View File
@@ -299,7 +299,7 @@ helm_sec_scan() {
echo "##### Scan Results" >> ${chart}/security.md
echo "" >> ${chart}/security.md
helm template ${chart} --output-dir ${chart}/render > /dev/null
trivy config -f template --template "@./templates/trivy.tpl" -o ${chart}/render/tmpsec${chartname}.md ${chart}/render
trivy config -f template --template "@./templates/trivy-config.tpl" -o ${chart}/render/tmpsec${chartname}.md ${chart}/render
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
rm -rf ${chart}/render/tmpsec${chartname}.md || true
echo "" >> ${chart}/security.md
@@ -323,7 +323,6 @@ container_sec_scan() {
echo "" >> ${chart}/security.md
for container in $(cat ${chart}/render/containers.tmp); do
echo "processing container: ${container}"
echo "**Container: ${container}**" >> ${chart}/security.md
echo "" >> ${chart}/security.md
trivy image -f template --template "@./templates/trivy-container.tpl" -o ${chart}/render/tmpsec${chartname}.md "${container}"
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md