Commit Graph

43 Commits

Author SHA1 Message Date
dependabot[bot]
92169241a2
Bump github.com/getkin/kin-openapi from 0.76.0 to 0.131.0
Bumps [github.com/getkin/kin-openapi](https://github.com/getkin/kin-openapi) from 0.76.0 to 0.131.0.
- [Release notes](https://github.com/getkin/kin-openapi/releases)
- [Commits](https://github.com/getkin/kin-openapi/compare/v0.76.0...v0.131.0)

---
updated-dependencies:
- dependency-name: github.com/getkin/kin-openapi
  dependency-version: 0.131.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-05-15 16:49:42 +00:00
dependabot[bot]
a6764b6125
Bump github.com/docker/docker (#702)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.9+incompatible to 25.0.6+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v24.0.9...v25.0.6)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-05 10:10:57 -07:00
dependabot[bot]
43b2e8046b
Bump golang.org/x/net from 0.18.0 to 0.23.0 (#667)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.18.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.18.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-17 11:54:11 -07:00
dependabot[bot]
1035008689
Bump github.com/docker/docker (#659)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.7+incompatible to 24.0.9+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v24.0.7...v24.0.9)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-16 18:05:58 -07:00
dependabot[bot]
04aa51412d
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#657)
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-05 14:15:22 -07:00
dependabot[bot]
731f4d82b8
Bump github.com/opencontainers/runc from 1.1.10 to 1.1.12 (#636)
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.10 to 1.1.12.
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.12/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.10...v1.1.12)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-13 00:10:49 -08:00
dependabot[bot]
c368116f61
Bump github.com/containerd/containerd from 1.7.9 to 1.7.11 (#626)
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.9 to 1.7.11.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.9...v1.7.11)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-13 00:10:37 -08:00
Kyle Quest
965a82edf3 probe command, probe refactoring, urfave update
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2024-02-08 09:18:32 -08:00
Kyle Quest
ce04df9358 go-containerregistry dep update, cleanup and adding missing docs for a numbeer of flags
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2024-02-02 08:15:40 +01:00
Kyle Quest
ae22ee3346 cleanup, registry and vulnerability command enhancements 2024-01-05 18:53:07 -08:00
Kyle Quest
e3624aa417 vulnerability command and basic epss sub-command to do basic epss operations
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2024-01-03 23:21:50 -08:00
Kyle Quest
13e1e1a972 import updates
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-11-18 17:34:26 -08:00
Kyle Quest
5f60744862 updating go version and dependencies
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-11-18 15:45:13 -08:00
Kyle Quest
2c08fe8f13 k8s debugging and enhanced docker runtime debugging
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-08-25 00:44:53 -07:00
Kyle Quest
739ddec23d kubernetes runtime support for the debug command
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-07-12 23:12:29 -07:00
Kyle Quest
c57472593c colly/v2 update to v2.1.0
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-07-10 19:16:29 -07:00
Kyle Quest
baf32a105a k8s.io/client-go update to v0.27.1
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-07-10 19:04:13 -07:00
Kyle Quest
871a9771a0 initial version of basic image merge and code cleanup
Signed-off-by: Kyle Quest <kcq.public@gmail.com>
2023-07-05 19:19:09 -07:00
Kyle Quest
cb5144d6b3 wip - new include flags 2023-04-04 01:40:37 -07:00
Ivan Velichko
76d3737adf Slimming Kubernetes workloads (a working PoC).
Similarly to the compose mode, this series of squashed commits adds
support for Kubernetes as an execution environment for the target
container image.

The branch is a few months old, so it has been squashed to a single commit to
reduce the complexity of the rebase & merge. Below are the messages from the squashed commits:

[Refactoring] Group all Node.js inspect flags into a single DTO

With the upcoming addition of Kubernetes support, we need to figure out
a way of sharing code between the existing container.Insepector and the
new pod.Inspector. In particular, it can be done through shared config
objects.

[Refactoring] Extract fat image building into a separate function

[Refactoring] Extract fat image inspection into a separate subroutine.

Bring in Kubernetes client-go dependency

Fix github.com/getkin/kin-openapi usage - got broken by version bump

Finding K8s workloads

Inspecting fat kubernetes workload image

Injecting sensor into K8s workload - initial phase

Introduce `kubectl` client

Injecting sensor into pod (cont.)

Get artifacts from the pod

[Refactoring] Extract building slim images into a subroutine

Put the rest of the build.handler logic to the kubernetes build subroutine

Applying Kubernetes manifest(s)

[Refactoring] Revamped Kubernetes Workload Finder

[Refactoring] Reshape Kubernetes logic

Scale down Kubernetes workloads after slimming

Restore Kubernetes workload to the original state if no manifest is used

[Refactoring] Introduce HTTPProbeOptions struct and refactor the code

Basic Kubernetes workload monitoring - CAMEnter, CAMTimeout, CAMSignal, CAMExec

Fix (workaround) for kubectl cp missing file permissions

master rebase

[Refactoring] Remove unused HTTP Probe Proxy flags

Fix HTTP probe having no ports

Use latest set of e2e tests

HTTP probe for Kubernetes workloads

Refine Kubernetes-related flag names

Bump down Kubernetes deps to v1.22 to keep Go at v1.16
2022-08-27 12:35:43 +00:00
D4N
b5d7fe290e
Healthcheck fixes (#332)
* Add unit tests for deserialiseHealtheckInstruction

* Do not add default values for HEALTHCHECK to the reconstructed one

* Correct HEALTHCHECK parsing

deserialiseHealtheckInstruction is expecting to get the full history line and
not just the parameters

* Fix the parsing of retries in HEALTHCHECK

the --retries value in the history is formatted via %q, which means that we have
to treat the cases of the number being printed as a hex value, a unicode value,
a character or a C escape sequence separately

* Fix formatting of the --retries parameter for HEALTHCHECK

* update vendored dependencies

* Fix reconstruction of the CMD-SHELL HEALTHCHECK

the config.Test when HEALTHCHECK is using the shell form is expected to be a two
element array: the first entry is `CMD-SHELL` and the second is the full
command. We were erronously using the split value here instead of joined one.
2022-06-18 08:56:15 -07:00
Ivan Velichko
d86360be85
GitHub Actions workflow for automated e2e testing (#328)
Leverages docker-slim/examples repo.
2022-06-07 12:11:36 -07:00
Ian Juma
9fed0779e3
nuxt assets includes helpers (#296)
* add support to pull from private registry with --registry flags

* document registry username / password setting usage info

* remove use of deprecated Inspect call

* use extracted auth config

* assume dockerhub when we do not have a registry

* cleanup

* cleanup

* use registry account and secret

* add support for explicit docker-config flag

* update README, add docker config command

* update README, add docker config command

* fix shadowed err

* nuxt includes

* nuxt includes cleanup

* nuxt add logging on warn /err

Co-authored-by: Kyle Quest <kcq.public@gmail.com>
2022-03-06 22:56:11 -08:00
Mritunjay Kumar Sharma
9d8f065bb5
adds support to reverse engineer Healthcheck instruction in Dockerfile (#280)
* adds function to deserialise Healthcheck instruction

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* refactors and adds logic to get healthcheck inst for Dockerfile

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* uses the go-dockerclient for healthcheck struct

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>

* tries to append data from input for healthcheck

Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2022-01-31 14:06:07 -08:00
Kyle Quest
f3758b407c basic registry pull subcommand 2022-01-09 22:11:00 -08:00
Kyle Quest
f24f35de55 registry command placeholder 2022-01-09 19:42:33 -08:00
Mritunjay Kumar Sharma
0d357a9f60
migrate from urfave/cli/v1 to urfave/cli/v2 (#263)
Signed-off-by: Mritunjay Sharma <mritunjaysharma394@gmail.com>
2021-12-26 12:19:39 -08:00
Kyle Quest
75fd0f3685 processing file check fs activity 2021-11-24 23:50:57 -08:00
Ian Juma
e8a0eb3bc5
add support for private registry image pulls when using the --pull flag (#231)
* add support to pull from private registry with --registry flags

* document registry username / password setting usage info

* remove use of deprecated Inspect call

* use extracted auth config

* assume dockerhub when we do not have a registry

* cleanup

* cleanup

* use registry account and secret

* add support for explicit docker-config flag

* update README, add docker config command

* update README, add docker config command

* fix shadowed err
2021-10-13 10:38:51 -07:00
Kyle Quest
5175e48ed0 initial docker-compose support - wip 2021-09-22 12:51:22 -07:00
Ian Juma
ef1ce1ec4c
add platform information to minified image (#219)
* add image platform from image inspector on minified image build

* add image platform from image inspector on minified image build

* note
2021-09-03 13:08:36 -07:00
Kyle Quest
4ae839e15e basic run command 2021-08-30 00:34:41 -07:00
Kyle Quest
a3a059cd9c file name pattern matching updates 2021-02-27 09:43:42 -08:00
Kyle Quest
3cc37baa6d adding color to console logs 2021-02-17 23:58:09 -08:00
Kyle Quest
49648e7633 basic websocket probing capabilities 2020-09-15 17:37:34 -07:00
Kyle Quest
24aa35ac36 http2 support in http probes 2020-08-27 02:14:13 -07:00
Kyle Quest
1e7a817df0 api spec based http probing 2020-08-13 18:41:57 -07:00
Kyle Quest
71ec52086b additional system environment information 2020-07-24 10:54:40 -07:00
Kyle Quest
79490f5f1c adding http probe crawler 2020-05-24 00:51:51 -07:00
Kyle Quest
0539019b7c adding interactive cli capabilities 2020-03-14 14:26:54 -07:00
Kyle Quest
3b66874a05 ability to filter/exclude the artifacts in the optimized container image 2020-03-01 00:52:14 -08:00
Marius Bergmann
054abbb22c Fix dependencies
Before this, I got build errors complaining about undefined logrus symbols from
the docker package, e.g.

```
../../vendor/github.com/docker/docker/errdefs/http_helpers.go:103:21: undefined: logrus.Fields
```

I suspect this happened because the path for the logrus package has a casing
error, but this did not surface on case-insensitive filesystems.

In addition, I ran `go mod vendor` and `go mod tidy`, which added some
additional dependencies to go.mod.
2020-01-02 12:33:14 +01:00
Kyle Quest
ec2b7a46fe switched to Go Modules and cleanup 2019-10-27 11:59:11 -07:00