diff --git a/README.md b/README.md index 425a07da..80666902 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ This repository contains a fork of Weave Net, the first product developed by Wea [![Go Report Card](https://goreportcard.com/badge/github.com/rajch/weave)](https://goreportcard.com/report/github.com/rajch/weave) [![Docker Pulls](https://img.shields.io/docker/pulls/rajchaudhuri/weave-kube)](https://hub.docker.com/r/rajchaudhuri/weave-kube) -![GitHub release (latest by date)](https://img.shields.io/github/v/release/rajch/ttws?include_prereleases) +![GitHub release (latest by date)](https://img.shields.io/github/v/release/rajch/weave?include_prereleases) [![Unique vulnerability count in all images](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Frajch%2Fweave%2Fmaster%2Freweave%2Fscans%2Fbadge.json&label=Vulnerabilty%20count)](reweave/scans/report.md) The history of the ReWeave effort can be found in [HISTORY.md](HISTORY.md). diff --git a/reweave/scans/report.md b/reweave/scans/report.md index 79f42a33..6f244613 100644 --- a/reweave/scans/report.md +++ b/reweave/scans/report.md @@ -1,11 +1,14 @@ # Vulnerability Report +``` Report date: 2024-03-03 Unique vulnerability count: 14 Images version: 2.8.2 +``` ## Scanner Details +``` Application: grype Version: 0.74.7 BuildDate: 2024-02-26T18:24:14Z @@ -16,11 +19,13 @@ GoVersion: go1.21.7 Compiler: gc Syft Version: v0.105.1 Supported DB Schema: 5 +``` ## Vulnerabilities weave-kube: (14) +``` NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY busybox 1.36.1-r15 apk CVE-2023-42366 Medium busybox 1.36.1-r15 apk CVE-2023-42365 Medium @@ -36,9 +41,11 @@ ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium +``` weave-npc: (12) +``` NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY busybox 1.36.1-r15 apk CVE-2023-42366 Medium busybox 1.36.1-r15 apk CVE-2023-42365 Medium @@ -52,3 +59,4 @@ ssl_client 1.36.1-r15 apk CVE-2023-42366 Medium ssl_client 1.36.1-r15 apk CVE-2023-42365 Medium ssl_client 1.36.1-r15 apk CVE-2023-42364 Medium ssl_client 1.36.1-r15 apk CVE-2023-42363 Medium +``` diff --git a/reweave/tools/scan-images.sh b/reweave/tools/scan-images.sh index bc06080a..26ed345b 100755 --- a/reweave/tools/scan-images.sh +++ b/reweave/tools/scan-images.sh @@ -39,16 +39,23 @@ fi # Produce report printf "# Vulnerability Report\n\n" > "${SCANDIR}/report.md" { + printf "\`\`\`\n" printf "Report date: %s\n" "$(date +'%Y-%m-%d')" printf "Unique vulnerability count: %s\n" "${UNIQUECOUNT}" - #tail -n +2 -q "${SCANDIR}/weave-npc-list-vulns.txt" "${SCANDIR}/weave-kube-list-vulns.txt" | sort -u | wc -l printf "Images version: %s\n" "${IMAGE_VERSION}" + printf "\`\`\`\n" printf "\n## Scanner Details\n\n" + printf "\`\`\`\n" grype version + printf "\`\`\`\n" printf "\n## Vulnerabilities\n\nweave-kube: (%s) \n\n" "$(tail +2 "${SCANDIR}/weave-kube-list-vulns.txt" | wc -l)" + printf "\`\`\`\n" cat "${SCANDIR}/weave-kube-list-vulns.txt" + printf "\`\`\`\n" printf "\nweave-npc: (%s)\n\n" "$(tail +2 "${SCANDIR}/weave-npc-list-vulns.txt" | wc -l)" + printf "\`\`\`\n" cat "${SCANDIR}/weave-npc-list-vulns.txt" + printf "\`\`\`\n" } >> "${SCANDIR}/report.md" # Produce Vulnerability Count badge json for README