Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@
<a href="https://opensource.org/licenses/Apache-2.0"><img alt="License Apache-2.0" src="https://img.shields.io/badge/License-Apache%202.0-blue.svg"></a>
<a href="https://github.com/secureCodeBox/secureCodeBox/releases/latest"><img alt="GitHub release (latest SemVer)" src="https://img.shields.io/github/v/release/secureCodeBox/secureCodeBox?sort=semver"></a>
<a href="https://owasp.org/www-project-securecodebox/"><img alt="OWASP Incubator Project" src="https://img.shields.io/badge/OWASP-Incubator%20Project-365EAA"></a>
<a href="https://artifacthub.io/packages/search?repo=seccurecodebox"><img alt="Artifact HUB" src="https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/seccurecodebox"></a>
<a href="https://twitter.com/securecodebox"><img alt="Twitter Follower" src="https://img.shields.io/twitter/follow/securecodebox?style=flat&color=blue&logo=twitter"></a>
</p>
<p align="center">
Expand Down
13 changes: 13 additions & 0 deletions hooks/declarative-subsequent-scans/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,17 @@ type: application
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
home: https://docs.securecodebox.io/docs/hooks/cascading-scans
icon: https://docs.securecodebox.io/img/integrationIcons/Cascading Scans.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]

dependencies: []

12 changes: 12 additions & 0 deletions hooks/declarative-subsequent-scans/helm2.Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -7,3 +7,15 @@ type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
home: https://docs.securecodebox.io/docs/hooks/cascading-scans
icon: https://docs.securecodebox.io/img/integrationIcons/Cascading Scans.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]
12 changes: 12 additions & 0 deletions hooks/finding-post-processing/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,4 +22,16 @@ type: application
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
home: https://docs.securecodebox.io/docs/hooks/finding-post-processing
icon: https://docs.securecodebox.io/img/integrationIcons/Default.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]

dependencies: []
12 changes: 12 additions & 0 deletions hooks/finding-post-processing/helm2.Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,15 @@ type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
home: https://docs.securecodebox.io/docs/hooks/finding-post-processing
icon: https://docs.securecodebox.io/img/integrationIcons/Default.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]
12 changes: 12 additions & 0 deletions hooks/generic-webhook/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -8,4 +8,16 @@ type: application
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
home: https://docs.securecodebox.io/docs/hooks/generic-webhook
icon: https://docs.securecodebox.io/img/integrationIcons/Generic WebHook.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]

dependencies: []
12 changes: 12 additions & 0 deletions hooks/generic-webhook/helm2.Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -7,3 +7,15 @@ type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
home: https://docs.securecodebox.io/docs/hooks/generic-webhook
icon: https://docs.securecodebox.io/img/integrationIcons/Generic WebHook.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]
14 changes: 14 additions & 0 deletions hooks/persistence-defectdojo/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,4 +10,18 @@ version: v2.6.0-alpha1
appVersion: 1.12.0
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
- defectdojo
- owasp
home: https://docs.securecodebox.io/docs/hooks/defectdojo
icon: https://docs.securecodebox.io/img/integrationIcons/DefectDojo.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]

dependencies: []
13 changes: 13 additions & 0 deletions hooks/persistence-elastic/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,19 @@ version: v2.6.0-alpha1
appVersion: 7.9.2
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
- elasticsearch
home: https://docs.securecodebox.io/docs/hooks/elasticsearch
icon: https://docs.securecodebox.io/img/integrationIcons/Elasticsearch.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]

dependencies:
- name: elasticsearch
version: 7.9.2
Expand Down
14 changes: 14 additions & 0 deletions hooks/persistence-elastic/helm2.Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,5 +6,19 @@ type: application

# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v2.6.0-alpha1

appVersion: 7.6.1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
- elasticsearch
home: https://docs.securecodebox.io/docs/hooks/elasticsearch
icon: https://docs.securecodebox.io/img/integrationIcons/Elasticsearch.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]
13 changes: 13 additions & 0 deletions hooks/teams-webhook/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,4 +22,17 @@ type: application
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
- teams
home: https://docs.securecodebox.io/docs/hooks/ms-teams-webhook
icon: https://docs.securecodebox.io/img/integrationIcons/MS Teams WebHook.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]

dependencies: []
13 changes: 13 additions & 0 deletions hooks/teams-webhook/helm2.Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -21,3 +21,16 @@ type: application
# version - gets automatically set to the secureCodeBox release version when the helm charts gets published
version: v2.6.0-alpha1
kubeVersion: ">=v1.11.0-0"

keywords:
- security
- secureCodeBox
- hook
- teams
home: https://docs.securecodebox.io/docs/hooks/ms-teams-webhook
icon: https://docs.securecodebox.io/img/integrationIcons/MS Teams WebHook.svg
sources:
- https://github.com/secureCodeBox/secureCodeBox
maintainers:
- name: iteratec GmbH
email: [email protected]
138 changes: 138 additions & 0 deletions operator/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -25,3 +25,141 @@ dependencies:
version: 7.1.2
repository: https://helm.min.io/
condition: minio.enabled

# Artifacthub.io specific annotations
# https://artifacthub.io/docs/topics/annotations/helm/
annotations:
# TODO: should be replaced during release process with the release body
# artifacthub.io/changes: |
# - Added cool feature
# - Fixed minor bug
artifacthub.io/containsSecurityUpdates: "true"
# TODO: docker tags should be replaced during release process with the release version
# artifacthub.io/images: |
# - name: securecodebox-operator
# image: docker.io/securecodebox/operator:v2.6.0-alpha1
# - name: securecodebox-lurcher
# image: docker.io/securecodebox/lurcher:v2.6.0-alpha1
artifacthub.io/crds: |
- kind: Scan
version: v1
name: Scan
displayName: secureCodeBox Scan
description: |
The Scan Custom Resource Definition (CRD) lets you define how a specific security scan should be configured.
More details about this CRD are documented here: https://docs.securecodebox.io/docs/api/crds/scan
- kind: ScheduledScan
version: v1
name: ScheduledScan
displayName: secureCodeBox Scheduled Scan
description: |
The ScheduledScan Custom Resource Definition (CRD) lets you define a Scan which gets repeated in a specific time interval,
e.g. every 24 hours or every 7 days. More details about this CRD are documented here: https://docs.securecodebox.io/docs/api/crds/scheduled-scan
- kind: CascadingRule
version: v1
name: Scan
displayName: secureCodeBox Cascading Rule
description: |
CascadingRules are Custom Resource Definitions (CRD's) used to define how scans can be started automatically based on the results of previous scans.
This lets you run large exploratory scans and automatically start more in depth scans on the targets found by the initial scans.
More details about this CRD are documented here: https://docs.securecodebox.io/docs/api/crds/cascading-rule
- kind: ScanType
version: v1
name: Scan
displayName: secureCodeBox ScanType
description: |
The ScanType Custom Resource Definition (CRD) is used to define to the secureCodeBox how a specific scanner can be executed in Kubernetes.
The main part of the ScanType is the JobTemplate, which contains a Kubernetes Job definition which will be used to construct the scans Job.
More details about this CRD are documented here: https://docs.securecodebox.io/docs/api/crds/scan-type
- kind: ParseDefinition
version: v1
name: Scan
displayName: secureCodeBox ParseDefinition
description: |
ParseDefinitions are Custom Resource Definitions (CRD's) used to describe to the secureCodeBox
how it can convert a raw finding report (e.g. XML report from nmap) into the generic secureCodeBox finding format.
More details about this CRD are documented here: https://docs.securecodebox.io/docs/api/crds/parse-definition
- kind: ScanCompletionHook
version: v1
name: ScanCompletionHook
displayName: secureCodeBox Scan Completion Hook
description: |
ScanCompletionHooks are Custom Resource Definitions (CRD's) used to define custom behavior which should be run after a scan has been completed.
More details about this CRD are documented here: https://docs.securecodebox.io/docs/api/crds/parse-definition
artifacthub.io/crdsExamples: |
- apiVersion: "execution.securecodebox.io/v1"
kind: Scan
metadata:
name: "nmap-scanme.nmap.org"
spec:
scanType: "nmap"
parameters:
# Use nmap's service detection feature
- "-sV"
- scanme.nmap.org
env:
- name: TEST_ENV
valueFrom:
secretKeyRef:
key: secret-name
name: zap-customer-credentials
- name: GREETING
value: "Hello from the secureCodeBox :D"
cascades:
matchLabels:
securecodebox.io/intensive: light
matchExpression:
key: "securecodebox.io/invasive"
operator: In
values: [non-invasive, invasive]
- apiVersion: "execution.securecodebox.io/v1"
kind: ScheduledScan
metadata:
name: "nmap-scanme.nmap.org-daily"
spec:
interval: 24h
scanSpec:
scanType: "nmap"
parameters:
# Use nmaps service detection feature
- "-sV"
- scanme.nmap.org
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 5
- apiVersion: "cascading.securecodebox.io/v1"
kind: CascadingRule
metadata:
name: "zap-http"
labels:
securecodebox.io/invasive: non-invasive
securecodebox.io/intensive: medium
spec:
matches:
anyOf:
- category: "Open Port"
attributes:
service: http
state: open
- category: "Open Port"
attributes:
service: https
state: open
scanSpec:
scanType: "zap-baseline"
parameters: ["-t", "{{attributes.service}}://{{$.hostOrIP}}"]
artifacthub.io/license: Apache-2.0
artifacthub.io/links: |
- name: Documentation
url: https://docs.securecodebox.io/docs/getting-started/installation
- name: Homepage
url: https://www.securecodebox.io
- name: iteratec GmbH
url: https://www.iteratec.com
artifacthub.io/operator: "true"
artifacthub.io/operatorCapabilities: Seamless Upgrades
artifacthub.io/prerelease: "false"
artifacthub.io/recommendations: |
- url: https://artifacthub.io/packages/helm/seccurecodebox/auto-discovery
- url: https://artifacthub.io/packages/helm/seccurecodebox/zap
- url: https://artifacthub.io/packages/helm/seccurecodebox/amass
- url: https://artifacthub.io/packages/helm/seccurecodebox/nmap