Code

v0.4.0#449

Code

Merged

kotakanbe merged 116 commits intomasterfuture-architect/vuls:masterfrom support_ovalfuture-architect/vuls:support_ovalCopy head branch name to clipboardAug 25, 2017

+9,436-4,598

Commits

Commits on Aug 9, 2017

• Support Debian

  

  knqyf263

  authored and

  kotakanbe

  committed
  10a2704

• -package-list-only for Debian

  kotakanbe

  committed
  23c177e

• Debian Report using OVAL

  kotakanbe

  committed
  e5d32c8

• Support RHEL

  

  knqyf263

  authored and

  kotakanbe

  committed
  c989c31

• Include RHEL, CentOS epoch number in version

  kotakanbe

  committed
  1a31985

• Fix RHEL oval scan

  kotakanbe

  committed
  587c87b

• Make it work on Amazon Linux

  kotakanbe

  committed
  c9ab956

• Add Ubuntu Support

  kotakanbe

  committed
  037e12b

• Fix Test Case

  kotakanbe

  committed
  085a9dc

• Make it work on FreeBSD

  kotakanbe

  committed
  bb708db

• [BreakingChange]Remove models.ScanHistory

  kotakanbe

  committed
  ec09250

• Fix testcase

  kotakanbe

  committed
  aafbdcd

• Refactoring

  kotakanbe

  committed
  342a1c6

• Unify the models of NVD, JVN, OVAL

  kotakanbe

  committed
  b545b5d

• Change models structure

  kotakanbe

  committed
  c103b79

• Fix testcase

  kotakanbe

  committed
  17a4e53

• Refacotring

  kotakanbe

  committed
  a2c364f

• Refactoring diff logic

  kotakanbe

  committed
  509fb04

• Improve sort logics

  kotakanbe

  committed
  2e37d3a

• Fixed a bug caused by capturing epoch number on RedHat.go

  kotakanbe

  committed
  209ca70

• Fix test cases

  kotakanbe

  committed
  12c2d3c

• Change CveContents data type to map

  kotakanbe

  committed
  f26b61d

• Rename PackageInfoList to Packages

  kotakanbe

  committed
  d626cc8

• Fix testcase

  kotakanbe

  committed
  f366717

• Change ScanResult.Packages structure to Map

  kotakanbe

  committed
  210e3dc

• Change structure of VulnInfo.Pacakges to []string

  kotakanbe

  committed
  b977558

• Change structure of ScanResult.[]VulnInfo to Map

  kotakanbe

  committed
  cfb8489

• Add JSON Version

  kotakanbe

  committed
  dd5a792

• Remove CRUD funcs of CveContents

  kotakanbe

  committed
  b285cb0

• Implement format-short-text

  kotakanbe

  committed
  3be11cf

• Implement -format-full-text

  kotakanbe

  committed
  4fcdea3

• Fix TestCase

  kotakanbe

  committed
  8b6c841

• Avoid concurrent Map writes

  kotakanbe

  committed
  7f8c975

• Refactoring

  kotakanbe

  committed
  9128e27

• Refactoring

  kotakanbe

  committed
  d9bc449

• Add test cases of CveContents

  kotakanbe

  committed
  74805c6

• Add test cases of models.Packages

  kotakanbe

  committed
  eb02bdd

• Use Severity ranking in OVAL when the CVSS scores are empty.

  kotakanbe

  committed
  a31974a

• Sort results order by CVSS score, CVE-ID

  kotakanbe

  committed
  73b011e

• Fix -ignore-unscored-cves

  kotakanbe

  committed
  0a01227

• SHow Vendor Links in text report

  kotakanbe

  committed
  af66e44

• Add vendor links to -format-shor-text

  kotakanbe

  committed
  ad09619

• Fix test cases

  kotakanbe

  committed
  306182e

• Fix -to-email

  kotakanbe

  committed
  bc5a95e

• Fix -to-slack

  kotakanbe

  committed
  a14810b

• Fix tui

  kotakanbe

  committed
  c6ad9ea

• Remove commented out code

  kotakanbe

  committed
  a7951b7

• Convert null to empty in JSON

  kotakanbe

  committed
  e9df2bf

• Fix CVSS2 in TUI

  kotakanbe

  committed
  a662b03

• Fix error handling while loading JSON in reporting

  kotakanbe

  committed
  63394a2

• Kind error message when SSH connection fails

  kotakanbe

  committed
  997dd60

• Implement HTTP access to oval-dictionary

  kotakanbe

  committed
  1883da3

• Add retry-max to HTTP access

  kotakanbe

  committed
  f7aa857

• Add OVAL HTTP health check

  kotakanbe

  committed
  c442a43

• add db backend redis (#445)

  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  7778783

• change logrus package to lowercase and update other packages (#446)

  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  738e9fb

• nosudo on CentOS and Fetch Changelogs on Amazon, RHEL (#448)

  Show description for a9ebac3
  kotakanbe

  committed
  a9ebac3

• Extract Advisory.Description on RHEL, Amazon, Oracle (#450)

  kotakanbe

  committed
  ffbaa0a

• Check existence and last modified time of local OVAL database when reporting

  kotakanbe

  committed
  26e447f

• Undisplay the number of CVEs at the end of 'scan --package-list-only'

  kotakanbe

  committed
  1aae425

• Display the information of yum updateinfo on TUI (for RHEL, Amazon, Oracle)

  kotakanbe

  committed
  ed162d7

• Fix false positive detection on RHEL, Amazon and Oracle

  kotakanbe

  committed
  9b6d84d

• Fix a bug of fill oval information of Ubuntu

  kotakanbe

  committed
  b1428b6

• Fix nil pointer

  kotakanbe

  committed
  1752736

• Fix a bug of lower limit of cursor movement in TUI

  kotakanbe

  committed
  56603dc

• Use version comparison logic when parsing change log (Ubuntu, Debian)

  kotakanbe

  committed
  4379b8b

• Add a deep flag to scan

  kotakanbe

  committed
  8b6a283

• Use CVSS seveirty of distro advisory when no entiry in NVD and OVAL

  kotakanbe

  committed
  27724a2

• Display summary of advisory when no entry in NVD, OVAL

  kotakanbe

  committed
  9899cba

• Imlement OVAL scan on Oracle Linux

  kotakanbe

  committed
  008da49

• Fix cvss link in slack notification

  kotakanbe

  committed
  9e0032b

• Refactoring

  kotakanbe

  committed
  5f49e7d

• Fix configtest to match fast and deep scan mode

  kotakanbe

  committed
  2887dc0

• Update README

  kotakanbe

  committed
  d301402

• add serveruuid field (#458)

  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  0a3f0f9

• add s3 dirctory option (#457)

  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  cbd1c12

• When scanning raspbian, always scan with deep scan mode

  kotakanbe

  committed
  a233e08

• Setup changelog cache only when necessary

  kotakanbe

  committed
  29cf4bb

• Fix check logic of dependent packages in redhat.go

  kotakanbe

  committed
  b14406e

• Fix oval-db existence check on reporting

  kotakanbe

  committed
  774c78a

• Fix MaxCvssScore logic

  kotakanbe

  committed
  577509b

Commits on Aug 11, 2017

• Update png in README.md

  kotakanbe

  committed
  f738622

• export FillWithOval (#462)

  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  95eb980

Commits on Aug 13, 2017

• Refactoring

  kotakanbe

  committed
  47b3b38

• Refactoring

  kotakanbe

  committed
  5c51d83

• Refactoring

  kotakanbe

  committed
  ee20cb5

• Set actually affected package's name only to vulnInfo.PackageNames

  kotakanbe

  committed
  c66898e

• Update Gopkg.lock

  kotakanbe

  committed
  dbceca8

• Use CVE>Impact as severity when it is not empty (RedHat OVAL)

  kotakanbe

  committed
  47a444e

• Update README

  kotakanbe

  committed
  999d8f5

• Update README (#463)

  kotakanbe

  authored
  417df05

• Merge branch 'support_oval' of https://github.com/future-architect/vuls into dev_v0.4.0

  Show description for 5c5b8a3
  kotakanbe

  committed
  5c5b8a3

Commits on Aug 14, 2017

• Fix checkDependencies for redhat.go

  kotakanbe

  committed
  843f1a4

Commits on Aug 15, 2017

• nosudo repoquery

  kotakanbe

  committed
  fd19fa2

• Bump up version to 0.4.0

  kotakanbe

  committed
  886a21c

• Update README.ja.md

  kotakanbe

  authored
  a36a226

Commits on Aug 16, 2017

• Fix FreeBSD detection

  kotakanbe

  committed
  477e12d

• Merge branch 'support_oval' of https://github.com/future-architect/vuls into dev_v0.4.0

  Show description for 823fcd9
  kotakanbe

  committed
  823fcd9

• Fix "Vulnerable package: is not found" error on FreeBSD

  kotakanbe

  committed
  b5d4d27

Commits on Aug 17, 2017

• Change model ScanResult.ScannedCves.AffectedPackages

  kotakanbe

  committed
  6129ac7

• Set NotFixedYet for Ubuntu Scan

  kotakanbe

  committed
  de65073

• Implement NotFixedYet for CentOS

  kotakanbe

  committed
  9e90c0f

• Fix sudo in deep scan of RHEL

  kotakanbe

  committed
  71490ae

Commits on Aug 18, 2017

• Include config in json result

  kotakanbe

  committed
  648a999

• Show Not Fixed Yet in report, tui

  kotakanbe

  committed
  93f741d

Commits on Aug 22, 2017

• add oval docker (#466)

  Show description for 4ac5d9e
  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  4ac5d9e

• Handle kernel's vulns using OVAL

  kotakanbe

  committed
  b5cb08a

• Update Gopkg

  kotakanbe

  committed
  feb3f79

• Merge branch 'support_oval' of https://github.com/future-architect/vuls into dev_v0.4.0

  Show description for 579fff1
  kotakanbe

  committed
  579fff1

• Fix ignoreCves option

  kotakanbe

  committed
  3790197

Commits on Aug 23, 2017

• No escape on details view in TUI

  kotakanbe

  committed
  58b0d03

• Display "Reboot Required" on report if the kernel has been updated but not restarted

  kotakanbe

  committed
  551fdd5

• Update README

  kotakanbe

  committed
  1875983

• export fill cve info (#467)

  

  sadayuki-matsuno

  authored and

  kotakanbe

  committed
  21f13b5

• fix typos in commands. (#464)

  

  ymomoi

  authored and

  kotakanbe

  committed
  6312b97

Commits on Aug 25, 2017

• Update README

  kotakanbe

  committed
  cb1c07f