feat: add cluster scanning

.github/ISSUE_TEMPLATE/config.yml

@@ -1,3 +1,4 @@
+---
 blank_issues_enabled: false
 contact_links:
  - name: Bug report

.github/dependabot.yml

@@ -1,3 +1,4 @@
+---
 # To get started with Dependabot version updates, you'll need to specify which
 # package ecosystems to update and where the package manifests are located.
 # Please see the documentation for all configuration options:

.github/workflows/build.yml

@@ -25,9 +25,6 @@ on:
  - 'LICENSE'
  - 'NOTICE'
 
-env:
- GO_VERSION: "1.20.4"
-
 # Disable permissions granted to the GITHUB_TOKEN for all the available scopes.
 permissions: {}
 
@@ -42,12 +39,12 @@ jobs:
  name: Verify code
  runs-on: ubuntu-20.04
  steps:
+ - name: Checkout code
+ uses: actions/checkout@v3
  - name: Setup Go
  uses: actions/setup-go@v4
  with:
- go-version: ${{ env.GO_VERSION }}
- - name: Checkout code
- uses: actions/checkout@v3
+ go-version-file: go.mod
  - name: Cached Go dependencies
  uses: actions/cache@v3
  with:
@@ -58,8 +55,8 @@ jobs:
  - name: Verify Go code
  uses: golangci/[email protected]
  with:
- args: --verbose --deadline=5m
- version: latest
+ args: --verbose --deadline=10m
+ version: v1.52
  skip-pkg-cache: true
  skip-build-cache: true
  - name: Verify YAML code
@@ -70,19 +67,41 @@ jobs:
  name: Run unit tests
  runs-on: ubuntu-20.04
  steps:
+ - name: Checkout code
+ uses: actions/checkout@v3
  - name: Setup Go
  uses: actions/setup-go@v4
  with:
- go-version: ${{ env.GO_VERSION }}
+ go-version-file: go.mod
+ - uses: actions/cache@v3
+ with:
+ path: ~/go/pkg/mod
+ key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+ restore-keys: |
+ ${{ runner.os }}-go-
+ - name: Run unit tests
+ run: make unit-tests
+ - name: Upload code coverage
+ uses: codecov/codecov-action@v3
+ with:
+ files: ./coverage.txt
+ integration-tests:
+ name: Run integration tests
+ runs-on: ubuntu-20.04
+ steps:
  - name: Checkout code
  uses: actions/checkout@v3
+ - name: Setup Go
+ uses: actions/setup-go@v4
+ with:
+ go-version-file: go.mod
  - uses: actions/cache@v3
  with:
  path: ~/go/pkg/mod
  key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
  restore-keys: |
  ${{ runner.os }}-go-
- - name: Run unit tests
+ - name: Run integration tests
  run: make unit-tests
  - name: Upload code coverage
  uses: codecov/codecov-action@v3

.goreleaser.yaml

@@ -1,3 +1,4 @@
+---
 builds:
  - skip: true
 changelog:

.yamllint.yaml

@@ -0,0 +1,34 @@
+---
+
+yaml-files:
+ - '*.yaml'
+ - '*.yml'
+ - '.yamllint'
+
+rules:
+ anchors: enable
+ braces: enable
+ brackets: enable
+ colons: enable
+ commas: enable
+ comments:
+ level: warning
+ comments-indentation:
+ level: warning
+ document-end: disable
+ document-start:
+ level: warning
+ empty-lines: enable
+ empty-values: disable
+ float-values: disable
+ hyphens: enable
+ indentation: enable
+ key-duplicates: enable
+ key-ordering: disable
+ line-length: disable
+ new-line-at-end-of-file: enable
+ new-lines: enable
+ octal-values: disable
+ quoted-strings: disable
+ trailing-spaces: enable
+ truthy: disable

Makefile

@@ -10,13 +10,21 @@ GOBIN=$(GOPATH)/bin
 
 .PHONY: test
 ## Runs both unit and integration tests
-test: unit-tests 
+test: unit-tests integration-tests
 
 .PHONY: unit-tests
 ## Runs unit tests with code coverage enabled
 unit-tests: $(SOURCES)
  go test -v -short -race -timeout 30s -coverprofile=coverage.txt ./...
 
+.PHONY: integration-tests
+integration-tests: $(SOURCES)
+ kind create cluster --name kind-test
+ kubectl apply -f ./integration/testdata/fixtures/test_nginx.yaml
+
+ go test -v -tags=integration ./integration/...
+ kind delete cluster --name kind-test
+
 $(GOBIN)/golangci-lint:
  curl -sfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh| sh -s -- -b $(GOBIN) v1.46.0
 

cmd/trivy-kubernetes/main.go

@@ -0,0 +1,19 @@
+package main
+
+import (
+ "github.com/aquasecurity/trivy-kubernetes/pkg/commands"
+ "github.com/aquasecurity/trivy/pkg/log"
+
+ _ "modernc.org/sqlite" // sqlite driver for RPM DB and Java DB
+)
+
+func main() {
+ if err := run(); err != nil {
+ log.Fatal(err)
+ }
+}
+
+func run() error {
+ cmd := commands.NewCmd()
+ return cmd.Execute()
+}