Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Catalog traefik binary #1460

Closed
witchcraze opened this issue Jan 14, 2023 · 1 comment · Fixed by #1504
Closed

Catalog traefik binary #1460

witchcraze opened this issue Jan 14, 2023 · 1 comment · Fixed by #1504
Labels
enhancement New feature or request

Comments

@witchcraze
Copy link
Contributor

witchcraze commented Jan 14, 2023

What would you like to be added:

An additional file classifier which finds traefik binary.

Why is this needed:

traefik is widely used.

pullCount : 1B+
starCount : 2.8K+
from https://hub.docker.com/_/traefik

traefik will be installed without a package manger in container env with official image.
We want to be able to catalog this.

$ syft -q traefik:3.0 | grep traefik
github.com/traefik/paerser                                         v0.1.9                                 go-module
github.com/traefik/traefik/v2                                      v0.0.0-20221207162604-e54ee89330a8     go-module
github.com/traefik/yaegi                                           v0.14.3                                go-module
$ docker run -it --rm traefik:3.0 traefik version
Version:      3.0.0-beta2
Codename:     beaufort
Go version:   go1.19.4
Built:        2022-12-07T16:32:34Z
OS/Arch:      linux/amd64

Additional context:

cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:* is used in NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46153

EOL
Releases - Traefik


DOCKER OFFICIAL IMAGE : traefik:3.0

# which traefik
/usr/local/bin/traefik

# traefik version
Version:      3.0.0-beta2
Codename:     beaufort
Go version:   go1.19.4
Built:        2022-12-07T16:32:34Z
OS/Arch:      linux/amd64

# strings /usr/local/bin/traefik | grep '3\.0\.0'
[::1]:53[:word:][]Event{[]Lease{[]PodIP{[]Taint{[mapKey][signal "13.0.0""3:04PM""DELETE"
3.0.0-beta2
vendor/golang.org/x/text/unicode/bidi/tables13.0.0.go
vendor/golang.org/x/text/unicode/norm/tables13.0.0.go
vendor/golang.org/x/net/idna/tables13.0.0.go
golang.org/x/text@v0.5.0/unicode/bidi/tables13.0.0.go
golang.org/x/text@v0.5.0/unicode/norm/tables13.0.0.go
golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10/idna/tables13.0.0.go
golang.org/x/text@v0.5.0/cases/tables13.0.0.go

DOCKER OFFICIAL IMAGE : traefik:2.9

# which traefik
/usr/local/bin/traefik

# traefik version
Version:      2.9.6
Codename:     banon
Go version:   go1.19.4
Built:        2022-12-07T14:17:58Z
OS/Arch:      linux/amd64

# strings /usr/local/bin/traefik | grep '2\.9\.6'
2.9.6

DOCKER OFFICIAL IMAGE : traefik:1.7

$ ./traefik version
Version:      v1.7.34
Codename:     maroilles
Go version:   go1.16.12
Built:        2021-12-10_04:59:22PM
OS/Arch:      linux/amd64

$ strings traefik | grep '1\.7\.34'
v1.7.34

DOCKER OFFICIAL IMAGE : traefik:windowsservercore-1809
Sorry, I was not able to check this case...

@witchcraze witchcraze added the enhancement New feature or request label Jan 14, 2023
@kzantow
Copy link
Contributor

kzantow commented Jan 17, 2023

Thanks @witchcraze -- added this to the backlog and of course, PRs are welcome!

@kzantow kzantow added this to OSS Jan 17, 2023
@kzantow kzantow moved this to Backlog in OSS Jan 17, 2023
@github-project-automation github-project-automation bot moved this from Backlog to Done in OSS Feb 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants