feat: updated sbom- and vulnerability-operator (#113)
* feat: updated sbom- and vulnerability-operator Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de> * fix: remove trailing whitespaces Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de> * fix: add another if Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>
This commit is contained in:
parent
8ca92b51a2
commit
7a8b180d42
|
|
@ -1,8 +1,8 @@
|
||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
description: Catalogue all images of a Kubernetes cluster to multiple targets with Syft
|
description: Catalogue all images of a Kubernetes cluster to multiple targets with Syft
|
||||||
name: sbom-operator
|
name: sbom-operator
|
||||||
version: 0.14.0
|
version: 0.14.1
|
||||||
appVersion: 0.13.0
|
appVersion: 0.14.0
|
||||||
home: https://github.com/ckotzbauer/sbom-operator
|
home: https://github.com/ckotzbauer/sbom-operator
|
||||||
sources:
|
sources:
|
||||||
- https://github.com/ckotzbauer/sbom-operator
|
- https://github.com/ckotzbauer/sbom-operator
|
||||||
|
|
|
||||||
|
|
@ -31,7 +31,7 @@ The following table lists the configurable parameters of the sbom-operator chart
|
||||||
| Parameter | Description | Default |
|
| Parameter | Description | Default |
|
||||||
| -------------------------------------- | ------------------------------------------------- | ---------------------------------------- |
|
| -------------------------------------- | ------------------------------------------------- | ---------------------------------------- |
|
||||||
| `image.repository` | container image repository | `ghcr.io/ckotzbauer/sbom-operator` |
|
| `image.repository` | container image repository | `ghcr.io/ckotzbauer/sbom-operator` |
|
||||||
| `image.tag` | container image tag | `0.13.0` |
|
| `image.tag` | container image tag | `0.14.0` |
|
||||||
| `image.pullPolicy` | container image pull policy | `IfNotPresent` |
|
| `image.pullPolicy` | container image pull policy | `IfNotPresent` |
|
||||||
| `args` | argument object for cli-args | `{}` |
|
| `args` | argument object for cli-args | `{}` |
|
||||||
| `envVars` | environment variables | `{}` |
|
| `envVars` | environment variables | `{}` |
|
||||||
|
|
|
||||||
|
|
@ -1,8 +1,8 @@
|
||||||
apiVersion: v2
|
apiVersion: v2
|
||||||
description: Scans SBOMs for vulnerabilities
|
description: Scans SBOMs for vulnerabilities
|
||||||
name: vulnerability-operator
|
name: vulnerability-operator
|
||||||
version: 0.7.2
|
version: 0.8.0
|
||||||
appVersion: 0.7.2
|
appVersion: 0.8.0
|
||||||
home: https://github.com/ckotzbauer/vulnerability-operator
|
home: https://github.com/ckotzbauer/vulnerability-operator
|
||||||
sources:
|
sources:
|
||||||
- https://github.com/ckotzbauer/vulnerability-operator
|
- https://github.com/ckotzbauer/vulnerability-operator
|
||||||
|
|
|
||||||
|
|
@ -31,7 +31,7 @@ The following table lists the configurable parameters of the vulnerability-opera
|
||||||
| Parameter | Description | Default |
|
| Parameter | Description | Default |
|
||||||
| -------------------------------------- | ------------------------------------------------- | --------------------------------------------- |
|
| -------------------------------------- | ------------------------------------------------- | --------------------------------------------- |
|
||||||
| `image.repository` | container image repository | `ghcr.io/ckotzbauer/vulnerability-operator` |
|
| `image.repository` | container image repository | `ghcr.io/ckotzbauer/vulnerability-operator` |
|
||||||
| `image.tag` | container image tag | `0.7.2` |
|
| `image.tag` | container image tag | `0.8.0` |
|
||||||
| `image.pullPolicy` | container image pull policy | `IfNotPresent` |
|
| `image.pullPolicy` | container image pull policy | `IfNotPresent` |
|
||||||
| `args` | argument object for cli-args | `{}` |
|
| `args` | argument object for cli-args | `{}` |
|
||||||
| `envVars` | environment variables | `{}` |
|
| `envVars` | environment variables | `{}` |
|
||||||
|
|
|
||||||
|
|
@ -60,8 +60,10 @@ spec:
|
||||||
name: work
|
name: work
|
||||||
- mountPath: /tmp
|
- mountPath: /tmp
|
||||||
name: tmp
|
name: tmp
|
||||||
|
{{- if .Values.ignoreRules }}
|
||||||
- mountPath: /vuln
|
- mountPath: /vuln
|
||||||
name: grype
|
name: grype
|
||||||
|
{{- end }}
|
||||||
volumes:
|
volumes:
|
||||||
- name: work
|
- name: work
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
|
|
|
||||||
|
|
@ -12,7 +12,7 @@ args: {}
|
||||||
envVars: {}
|
envVars: {}
|
||||||
|
|
||||||
ignoreRules: ""
|
ignoreRules: ""
|
||||||
# ignore:
|
# ignore:
|
||||||
# # This is the full set of supported rule fields:
|
# # This is the full set of supported rule fields:
|
||||||
# - vulnerability: CVE-2008-4318
|
# - vulnerability: CVE-2008-4318
|
||||||
# fix-state: unknown
|
# fix-state: unknown
|
||||||
|
|
@ -24,7 +24,7 @@ ignoreRules: ""
|
||||||
#
|
#
|
||||||
# # We can make rules to match just by vulnerability ID:
|
# # We can make rules to match just by vulnerability ID:
|
||||||
# - vulnerability: CVE-2017-41432
|
# - vulnerability: CVE-2017-41432
|
||||||
#
|
#
|
||||||
# # ...or just by a single package field:
|
# # ...or just by a single package field:
|
||||||
# - package:
|
# - package:
|
||||||
# type: gem
|
# type: gem
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue