starboard

Documentation

Index

• Constants
• func GetVersionFromImageRef(imageRef string) (string, error)
• func NewScheme() *runtime.Scheme
• type BuildInfo
• type ConfigData
  • func GetDefaultConfig() ConfigData
  • func (c ConfigData) GetAquaImageRef() (string, error)
  • func (c ConfigData) GetKubeBenchImageRef() (string, error)
  • func (c ConfigData) GetKubeHunterImageRef() (string, error)
  • func (c ConfigData) GetPolarisImageRef() (string, error)
  • func (c ConfigData) GetTrivyImageRef() (string, error)
  • func (c ConfigData) GetTrivyMode() (TrivyMode, error)
  • func (c ConfigData) GetTrivyServerURL() (string, error)
  • func (c ConfigData) GetVulnerabilityReportsScanner() (Scanner, error)
• type ConfigManager
  • func NewConfigManager(client kubernetes.Interface, namespace string) ConfigManager
• type Scanner
• type TrivyMode

Constants

const (
	// NamespaceName the name of the namespace in which Starboard stores its
	// configuration and where it runs scan jobs.
	NamespaceName = "starboard"

	// ServiceAccountName the name of the service account used to provide
	// identity for scan jobs run by Starboard.
	ServiceAccountName = "starboard"

	// ConfigMapName the name of the ConfigMap where Starboard stores its
	// configuration.
	ConfigMapName = "starboard"

	// SecretName the name of the secret where Starboard stores is sensitive
	// configuration.
	SecretName = "starboard"
)

Functions

func GetVersionFromImageRef

func GetVersionFromImageRef(imageRef string) (string, error)

GetVersionFromImageRef returns the image identifier for the specified image reference.

func NewScheme

func NewScheme() *runtime.Scheme

Types

type BuildInfo

type BuildInfo struct {
	Version    string
	Commit     string
	Date       string
	Executable string
}

BuildInfo holds build info such as Git revision, Git SHA-1, build datetime, and the name of the executable binary.

type ConfigData

type ConfigData map[string]string

ConfigData holds Starboard configuration settings as a set of key-value pairs.

func GetDefaultConfig

func GetDefaultConfig() ConfigData

GetDefaultConfig returns the default configuration settings.

func (ConfigData) GetAquaImageRef

func (c ConfigData) GetAquaImageRef() (string, error)

func (ConfigData) GetKubeBenchImageRef

func (c ConfigData) GetKubeBenchImageRef() (string, error)

func (ConfigData) GetKubeHunterImageRef

func (c ConfigData) GetKubeHunterImageRef() (string, error)

func (ConfigData) GetPolarisImageRef

func (c ConfigData) GetPolarisImageRef() (string, error)

func (ConfigData) GetTrivyImageRef

func (c ConfigData) GetTrivyImageRef() (string, error)

func (ConfigData) GetTrivyMode

func (c ConfigData) GetTrivyMode() (TrivyMode, error)

func (ConfigData) GetTrivyServerURL

func (c ConfigData) GetTrivyServerURL() (string, error)

func (ConfigData) GetVulnerabilityReportsScanner

func (c ConfigData) GetVulnerabilityReportsScanner() (Scanner, error)

type ConfigManager

type ConfigManager interface {
	EnsureDefault(ctx context.Context) error
	Read(ctx context.Context) (ConfigData, error)
	Delete(ctx context.Context) error
}

ConfigManager defines methods for managing ConfigData.

func NewConfigManager

func NewConfigManager(client kubernetes.Interface, namespace string) ConfigManager

NewConfigManager constructs a new ConfigManager that is using kubernetes.Interface to manage ConfigData backed by the the ConfigMap stored in the specified namespace.

type Scanner

type Scanner string

Scanner represents unique, human readable identifier of a security scanner.

const (
	Trivy Scanner = "Trivy"
	Aqua  Scanner = "Aqua"
)

type TrivyMode

type TrivyMode string

TrivyMode describes mode in which Trivy client operates.

const (
	Standalone   TrivyMode = "Standalone"
	ClientServer TrivyMode = "ClientServer"
)