feat(ci): Craft a trivy config to md parser
This commit is contained in:
@@ -21,7 +21,7 @@ name: jackett
|
|||||||
sources:
|
sources:
|
||||||
- https://github.com/Jackett/Jackett
|
- https://github.com/Jackett/Jackett
|
||||||
type: application
|
type: application
|
||||||
version: 9.0.31
|
version: 9.0.32
|
||||||
annotations:
|
annotations:
|
||||||
truecharts.org/catagories: |
|
truecharts.org/catagories: |
|
||||||
- media
|
- media
|
||||||
|
|||||||
@@ -0,0 +1,21 @@
|
|||||||
|
{{- if . -}}
|
||||||
|
#### Chart Object: {{ escapeXML ( index . 0 ).Target }}
|
||||||
|
{{ range . }}
|
||||||
|
|
||||||
|
{{ if (eq (len .Misconfigurations) 0) }}
|
||||||
|
| No Misconfigurations found |
|
||||||
|
|:---------------------------------|
|
||||||
|
|
||||||
|
{{ else }}
|
||||||
|
| Type | Misconfiguration ID | Check | Severity | Explaination | Solution | Links |
|
||||||
|
|:----------------|:------------------:|:-----------:|:------------------:|:-------------:|-----------------------------------------|-----------------------------------------|
|
||||||
|
{{- range .Misconfigurations }}
|
||||||
|
| {{ escapeXML .Type }} | {{ escapeXML .ID }} | {{ escapeXML .Title }} | {{ escapeXML .Severity }} | {{ escapeXML .Description }} | {{ escapeXML .Message }} | <details><summary>Click to expand!</summary>{{ range .References }}<a href={{ escapeXML . | printf "%q" }}>{{ escapeXML . }}</a><br>{{ end }}</details> |
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- else }}
|
||||||
|
|
||||||
|
| No Misconfigurations found |
|
||||||
|
|:---------------------------------|
|
||||||
|
{{- end }}
|
||||||
@@ -299,7 +299,7 @@ helm_sec_scan() {
|
|||||||
echo "##### Scan Results" >> ${chart}/security.md
|
echo "##### Scan Results" >> ${chart}/security.md
|
||||||
echo "" >> ${chart}/security.md
|
echo "" >> ${chart}/security.md
|
||||||
helm template ${chart} --output-dir ${chart}/render > /dev/null
|
helm template ${chart} --output-dir ${chart}/render > /dev/null
|
||||||
trivy config -f template --template "@./templates/trivy.tpl" -o ${chart}/render/tmpsec${chartname}.md ${chart}/render
|
trivy config -f template --template "@./templates/trivy-config.tpl" -o ${chart}/render/tmpsec${chartname}.md ${chart}/render
|
||||||
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
|
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
|
||||||
rm -rf ${chart}/render/tmpsec${chartname}.md || true
|
rm -rf ${chart}/render/tmpsec${chartname}.md || true
|
||||||
echo "" >> ${chart}/security.md
|
echo "" >> ${chart}/security.md
|
||||||
@@ -323,7 +323,6 @@ container_sec_scan() {
|
|||||||
echo "" >> ${chart}/security.md
|
echo "" >> ${chart}/security.md
|
||||||
for container in $(cat ${chart}/render/containers.tmp); do
|
for container in $(cat ${chart}/render/containers.tmp); do
|
||||||
echo "processing container: ${container}"
|
echo "processing container: ${container}"
|
||||||
echo "**Container: ${container}**" >> ${chart}/security.md
|
|
||||||
echo "" >> ${chart}/security.md
|
echo "" >> ${chart}/security.md
|
||||||
trivy image -f template --template "@./templates/trivy-container.tpl" -o ${chart}/render/tmpsec${chartname}.md "${container}"
|
trivy image -f template --template "@./templates/trivy-container.tpl" -o ${chart}/render/tmpsec${chartname}.md "${container}"
|
||||||
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
|
cat ${chart}/render/tmpsec${chartname}.md >> ${chart}/security.md
|
||||||
|
|||||||
Reference in New Issue
Block a user