Commit graph

826 commits

Author SHA1 Message Date
Thomas Sjögren
44fdceb331
Merge pull request #501 from konstruktoid/issue498
grep host* in config file before testing 2.7
2022-05-23 11:31:04 +02:00
Thomas Sjögren
558fca319f grep host* in config file before testing 2.7
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-05-09 12:26:01 +02:00
Thomas Sjögren
7c7390e723
Merge pull request #500 from konstruktoid/vagrant
add Vagrantfile
2022-04-30 12:05:22 +02:00
Thomas Sjögren
d4c4538bc8 add Vagrantfile
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-04-30 12:03:57 +02:00
Thomas Sjögren
58e732f3d1
Merge pull request #499 from konstruktoid/action
add github actions
2022-04-30 12:01:23 +02:00
Thomas Sjögren
bb032f154a add github actions
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-04-30 12:00:35 +02:00
Thomas Sjögren
cd1619c375
Merge pull request #497 from konstruktoid/version
Version
2022-03-07 13:40:44 +01:00
Thomas Sjögren
3cfa505ecc update version information
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-03-07 13:39:45 +01:00
Thomas Sjögren
3fe40815ee ignore Vagrant files
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-03-07 13:39:22 +01:00
Thomas Sjögren
d44c2a9d47
Merge pull request #496 from konstruktoid/artifactvalidation
add 4.12 check
2022-03-07 13:06:06 +01:00
Thomas Sjögren
68c8e53dac add 4.12 check
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-03-07 13:05:22 +01:00
Thomas Sjögren
715de9c607
Merge pull request #495 from jammasterj89/master
Update alpine to 3.15
2022-01-11 14:01:36 +01:00
jammasterj89
975820f52b
Update alpine to 3.15
Updated alpine version to latest - 3.15

Signed-off-by: Niall T <19202716+jammasterj89@users.noreply.github.com>
2022-01-11 12:34:38 +00:00
Thomas Sjögren
d33139cedc
Merge pull request #494 from konstruktoid/imagenotice
add note regarding docker image
2022-01-06 21:33:48 +01:00
Thomas Sjögren
5c7acd72a5 add note regarding docker image
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2022-01-06 21:32:59 +01:00
Thomas Sjögren
1ff4a62836
Merge pull request #493 from konstruktoid/ISSUE492
if configured with no-new-privileges, pass check 5.25
2021-12-16 10:36:23 +01:00
Thomas Sjögren
0d5874877b if the docker daemon is configure with no-new-privileges, pass check 5.25
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-12-02 11:10:12 +01:00
Thomas Sjögren
3f3ff4fb2d
Merge pull request #491 from SericaLaw/fix-check-5-3
fix style and false warning in check_5_3
2021-12-01 10:49:06 +01:00
serica
0ae544dd03 fix style and false warning in check_5_3 2021-11-30 18:38:36 -08:00
Thomas Sjögren
ec211a3277
Merge pull request #489 from joaocfernandes/fix_typos
Fix description typos
2021-11-12 10:07:56 +01:00
João Fernandes
a409e03d99
Fix typo in check_5_21 2021-11-11 20:39:22 +00:00
João Fernandes
7e89ea067d
Fix typo in check_4_11
Fix the text description for check_4_11 .
2021-11-11 20:39:00 +00:00
Thomas Sjögren
ec3ddf2acd
Merge pull request #475 from nikitastupin/feature-list-open-ports
Implement listing of open ports
2021-10-31 12:50:27 +01:00
Thomas Sjögren
fd93a6ee93
Merge pull request #476 from nikitastupin/feature-specific-capability-checks
Add checks for capabilities that allows container escape
2021-10-31 12:26:40 +01:00
Thomas Sjögren
a40b888ee9
Merge pull request #488 from garettmd/master
Add /etc/hostname fix for macOS
2021-10-01 22:04:59 +02:00
Garett Dunn
8ac4513d24
Add /etc/hostname fix for macOS 2021-10-01 11:39:17 -04:00
Thomas Sjögren
1891eaa8b3
Merge pull request #487 from AErmie/patch-1
Updated log file name
2021-09-30 15:23:24 +02:00
Adin Ermie
d98a054c2f
Updated log file name
From testing, the default logfile name is `docker-bench-security.log.json` not `docker-bench-security.sh.log.json`
2021-09-30 09:02:41 -04:00
Thomas Sjögren
f656a5d683
Merge pull request #485 from AErmie/patch-1
Added multiple check groups example
2021-09-29 10:20:25 +02:00
Adin Ermie
e6a742ba38
Added multiple check groups example
Added an example of running multiple groups of checks, as the documentation did not clearly show this is possible (and the proper syntax).
2021-09-28 17:51:40 -04:00
Thomas Sjögren
dfb3a90f67
Merge pull request #478 from konstruktoid/ISSUE477
fix socket check
2021-07-12 21:55:31 +00:00
Thomas Sjögren
683c5a92b5 fix socket check
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-07-12 15:22:12 +02:00
Nikita Stupin
cf93e9ed07 Add checks for capabilities that allows container escape 2021-07-08 13:10:12 +03:00
Nikita Stupin
dacc7372bf Implement listing of open ports 2021-07-08 13:00:21 +03:00
Thomas Sjögren
2024e16f09
Merge pull request #474 from denhamparry/master
fix: set docker-bench-security to sh
2021-07-07 11:05:42 +00:00
Lewis Denham-Parry
e31e7aa0ae
fix: set docker-bench-security to sh
- Set script to execute with sh rather than bash
- Set CMD Dockerfile to use /bin/sh
2021-07-07 08:22:59 +01:00
Thomas Sjögren
c6256295fc
Merge pull request #471 from aagot/master
Update 2_docker_daemon_configuration.sh
2021-06-26 16:14:39 +00:00
aagot
08a7b09d4d
Update 2_docker_daemon_configuration.sh 2021-06-25 14:38:02 +02:00
Thomas Sjögren
3769a64a2f
Merge pull request #469 from konstruktoid/v131
Initial v1.3.1 PR
2021-05-25 18:52:43 +00:00
Thomas Sjögren
c1457e6ad3 initial commit of tests/99_community_checks.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:46 +02:00
Thomas Sjögren
32c5e5f1fb initial commit of tests/8_docker_enterprise_configuration.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:46 +02:00
Thomas Sjögren
4e379bbaf9 initial commit of tests/7_docker_swarm_configuration.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:46 +02:00
Thomas Sjögren
3a9deae328 initial commit of tests/6_docker_security_operations.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:46 +02:00
Thomas Sjögren
bd05445528 initial commit of tests/5_container_runtime.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:46 +02:00
Thomas Sjögren
28fa0393da initial commit of tests/4_container_images.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:46 +02:00
Thomas Sjögren
6f574b07c1 initial commit of tests/3_docker_daemon_configuration_files.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:45 +02:00
Thomas Sjögren
6a685524eb initial commit of tests/2_docker_daemon_configuration.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:45 +02:00
Thomas Sjögren
4a4ae81a03 initial commit of tests/1_host_configuration.sh v1.3.1
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:49:45 +02:00
Thomas Sjögren
ca4ef8fa57 linting
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:46:07 +02:00
Thomas Sjögren
2466ab4826 update wording
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2021-05-25 20:45:38 +02:00