Skip to content

Commit ddf6ed1

Browse files
committed
Fix malware and secret scan issues
1 parent 136aa47 commit ddf6ed1

File tree

3 files changed

+22
-23
lines changed

3 files changed

+22
-23
lines changed

deepfence_utils/utils/ingesters/secrets.go

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,23 +7,22 @@ type SecretScanStatus struct {
77
}
88

99
type Secret struct {
10-
ImageLayerID string `json:"ImageLayerId"`
11-
Match struct {
10+
Match struct {
1211
StartingIndex int `json:"starting_index"`
1312
RelativeStartingIndex int `json:"relative_starting_index"`
1413
RelativeEndingIndex int `json:"relative_ending_index"`
1514
FullFilename string `json:"full_filename"`
1615
MatchedContent string `json:"matched_content"`
17-
} `json:"Match"`
16+
} `json:"match"`
1817
Rule struct {
1918
ID int `json:"id"`
2019
Name string `json:"name"`
2120
Part string `json:"part"`
2221
SignatureToMatch string `json:"signature_to_match"`
23-
} `json:"Rule"`
22+
} `json:"rule"`
2423
Severity struct {
2524
Level string `json:"level"`
2625
Score float64 `json:"score"`
27-
} `json:"Severity"`
26+
} `json:"severity"`
2827
ScanID string `json:"scan_id"`
2928
}

deepfence_worker/ingesters/malware.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ import (
1414
)
1515

1616
func generateMalwareRuleId(metaRule ingestersUtil.MetaRules) string {
17-
return fmt.Sprintf("malware-%s", metaRule.RuleName)
17+
return fmt.Sprintf("index-%s", metaRule.RuleName)
1818
}
1919

2020
func generateHashFromString(s string) string {

deepfence_worker/ingesters/secrets.go

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,7 @@ import (
55
"fmt"
66
"time"
77

8+
"github.com/deepfence/ThreatMapper/deepfence_server/model"
89
"github.com/deepfence/ThreatMapper/deepfence_utils/directory"
910
"github.com/deepfence/ThreatMapper/deepfence_utils/telemetry"
1011
"github.com/deepfence/ThreatMapper/deepfence_utils/utils"
@@ -13,7 +14,7 @@ import (
1314
)
1415

1516
func generateSecretRuleId(r map[string]interface{}) string {
16-
return fmt.Sprintf("secret-%s", r["name"].(string))
17+
return fmt.Sprintf("index-%s", r["name"].(string))
1718
}
1819

1920
func CommitFuncSecrets(ctx context.Context, ns string, data []ingestersUtil.Secret) error {
@@ -66,26 +67,25 @@ func secretsToMaps(data []ingestersUtil.Secret) ([]map[string]map[string]interfa
6667

6768
var secrets []map[string]map[string]interface{}
6869
for _, i := range data {
69-
secret := utils.ToMap(i)
70-
delete(secret, "Severity")
71-
delete(secret, "Rule")
72-
delete(secret, "Match")
73-
74-
for k, v := range utils.ToMap(i.Severity) {
75-
secret[k] = v
70+
ruleID := generateSecretRuleId(utils.ToMap(i.Rule))
71+
rule := map[string]interface{}{
72+
"rule_id": ruleID,
7673
}
7774

78-
for k, v := range utils.ToMap(i.Match) {
79-
secret[k] = v
75+
s := model.Secret{
76+
NodeID: utils.ScanIDReplacer.Replace(fmt.Sprintf("%v:%v", ruleID, i.Match.FullFilename)),
77+
StartingIndex: int32(i.Match.StartingIndex),
78+
FullFilename: i.Match.FullFilename,
79+
MatchedContent: i.Match.MatchedContent,
80+
Masked: false,
81+
Level: i.Severity.Level,
82+
Score: i.Severity.Score,
83+
RuleID: ruleID,
8084
}
8185

82-
rule := utils.ToMap(i.Rule)
83-
delete(rule, "id")
84-
rule["rule_id"] = generateSecretRuleId(rule)
85-
rule["level"] = i.Severity.Level
86-
87-
secret["node_id"] = utils.ScanIDReplacer.Replace(fmt.Sprintf("%v:%v",
88-
rule["rule_id"], i.Match.FullFilename))
86+
secret := utils.ToMap(s)
87+
secret["scan_id"] = i.ScanID
88+
delete(secret, "resources")
8989

9090
secrets = append(secrets, map[string]map[string]interface{}{
9191
"Rule": rule,

0 commit comments

Comments
 (0)