reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Release 2.8.2 cosmetic corrections

Browse Source 
Minor mistakes in README.md and the scan report corrected.
This commit is contained in:
Raj Chaudhuri committed 2024-03-04 00:52:48 +05:30
1 parent 7b087168cf
commit 55a46992d4
3 files changed
+17 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

README.md
+1 -1
View File
@@ -4,7 +4,7 @@ This repository contains a fork of Weave Net, the first product developed by Wea
[![Go Report Card](https://goreportcard.com/badge/github.com/rajch/weave)](https://goreportcard.com/report/github.com/rajch/weave)
[![Docker Pulls](https://img.shields.io/docker/pulls/rajchaudhuri/weave-kube)](https://hub.docker.com/r/rajchaudhuri/weave-kube)
![GitHub release (latest by date)](https://img.shields.io/github/v/release/rajch/ttws?include_prereleases)
![GitHub release (latest by date)](https://img.shields.io/github/v/release/rajch/weave?include_prereleases)
[![Unique vulnerability count in all images](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Frajch%2Fweave%2Fmaster%2Freweave%2Fscans%2Fbadge.json&label=Vulnerabilty%20count)](reweave/scans/report.md)
The history of the ReWeave effort can be found in [HISTORY.md](HISTORY.md).
reweave/scans/report.md
+8
View File
@@ -1,11 +1,14 @@
# Vulnerability Report
```
Report date: 2024-03-03
Unique vulnerability count: 14
Images version: 2.8.2
```
## Scanner Details
```
Application: grype
Version: 0.74.7
BuildDate: 2024-02-26T18:24:14Z
@@ -16,11 +19,13 @@ GoVersion: go1.21.7
Compiler: gc
Syft Version: v0.105.1
Supported DB Schema: 5
```
## Vulnerabilities
weave-kube: (14)
```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
@@ -36,9 +41,11 @@ ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
```
weave-npc: (12)
```
NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY
busybox 1.36.1-r15 apk CVE-2023-42366 Medium
busybox 1.36.1-r15 apk CVE-2023-42365 Medium
@@ -52,3 +59,4 @@ ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium
ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium
```
reweave/tools/scan-images.sh
+8 -1
View File
@@ -39,16 +39,23 @@ fi
# Produce report
printf "# Vulnerability Report\n\n" > "${SCANDIR}/report.md"
{
printf "\`\`\`\n"
printf "Report date: %s\n" "$(date +'%Y-%m-%d')"
printf "Unique vulnerability count: %s\n" "${UNIQUECOUNT}"
#tail -n +2 -q "${SCANDIR}/weave-npc-list-vulns.txt" "${SCANDIR}/weave-kube-list-vulns.txt" | sort -u | wc -l
printf "Images version: %s\n" "${IMAGE_VERSION}"
printf "\`\`\`\n"
printf "\n## Scanner Details\n\n"
printf "\`\`\`\n"
grype version
printf "\`\`\`\n"
printf "\n## Vulnerabilities\n\nweave-kube: (%s) \n\n" "$(tail +2 "${SCANDIR}/weave-kube-list-vulns.txt" | wc -l)"
printf "\`\`\`\n"
cat "${SCANDIR}/weave-kube-list-vulns.txt"
printf "\`\`\`\n"
printf "\nweave-npc: (%s)\n\n" "$(tail +2 "${SCANDIR}/weave-npc-list-vulns.txt" | wc -l)"
printf "\`\`\`\n"
cat "${SCANDIR}/weave-npc-list-vulns.txt"
printf "\`\`\`\n"
} >> "${SCANDIR}/report.md"
# Produce Vulnerability Count badge json for README