clairmon 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 7e1fae57f42b7f96a287d019a8346af77dbf775d
+  data.tar.gz: ff802be98f7e108218e050a0634890f5a8d1181d
+SHA512:
+  metadata.gz: 80ec430f016648559eaabb4605c5e24be13fb21ea580ead57a30581bf7cb8e4416b79a811c207dd6e7dc9cdea26032dedf87e500575e13f8f2f8cc7087a5aba1
+  data.tar.gz: 9598be151dce4c92b3c799d8b8e1f56c6830e799f0e2c62f6e0df1be5103afdcd55c98ded6404e8b04a8bb2540ee2423a4d34d1ab37c1cf206c987abed680c9b

data/lib/clairmon.rb

@@ -0,0 +1,88 @@
+#!/usr/bin/env ruby
+
+require 'net/http'
+require 'json'
+
+class Clairmon
+  def initialize(tls=true, baseUrl, accesKey, accessSecret, imageIgnoreArray, clairctlBinary, clairctlConfigPath)
+     @TLS                   = tls
+     @BASE_URL              = baseUrl
+     @ACCESS_KEY            = accesKey
+     @ACCESS_SECRET         = accessSecret
+     @IMAGE_IGNORE_ARRAY    = imageIgnoreArray
+     @CLAIRCTL_CONFIG_PATH  = clairctlConfigPath
+     @CLAIRCTL_BINARY       = clairctlBinary
+  end
+
+  def getRunningImages
+    if @TLS == false
+      uri = URI("http://#{@BASE_URL}/v2-beta/containers")
+    else
+      uri = URI("https://#{@BASE_URL}/v2-beta/containers")
+    end
+
+    req = Net::HTTP::Get.new(uri)
+    req.basic_auth @ACCESS_KEY, @ACCESS_SECRET
+
+    res = Net::HTTP.start(uri.hostname, uri.port) {|http|
+      http.request(req)
+    }
+
+    response_json = JSON.parse(res.body)
+
+    runningImages = []
+
+    response_json["data"].each do |con|
+      runningImages << con["imageUuid"].sub("docker:", "")
+    end
+
+    return runningImages.uniq
+  end
+
+  def scanImage(imageName)
+    value = %x[#{@CLAIRCTL_BINARY} analyze #{imageName} --config #{@CLAIRCTL_CONFIG_PATH}]
+
+    parsedValue     = value.split("\n")
+    vulnerabilities = 0
+
+    parsedValue.each do |line|
+      if line.include? "Analysis"
+        parsedValueLine = parsedValue.to_a[4].split(" ").to_a
+        vulnerabilities += parsedValueLine[4].to_i
+      end
+    end
+
+    return vulnerabilities
+  end
+
+  def createReport(imageName)
+    value = %x[#{@CLAIRCTL_BINARY} report #{imageName} --config #{@CLAIRCTL_CONFIG_PATH}]
+
+    return value
+  end
+
+  def ignored(imageName)
+    skip = false
+    @IMAGE_IGNORE_ARRAY.each do |imageIgnore|
+      if imageName.include? imageIgnore
+        skip = true
+        break
+      end
+    end
+
+    return skip
+  end
+
+  def getFullStatus
+    runningImagesArray = []
+    self.getRunningImages.each do |scan|
+      if self.ignored(scan) == false
+        vuns = self.scanImage(scan)
+        runningImagesArray << { 'image' => scan, 'vulnerabilities' => vuns }
+      end
+    end
+
+    return runningImagesArray
+  end
+
+end

metadata

@@ -0,0 +1,45 @@
+--- !ruby/object:Gem::Specification
+name: clairmon
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- paprickar
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-06-10 00:00:00.000000000 Z
+dependencies: []
+description: Clairmon is a library which can be used with check_clairmon.rb to monitor
+  vulnerabilities in your docker containers
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/clairmon.rb
+homepage: 
+licenses:
+- Apache-2.0
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.10
+signing_key: 
+specification_version: 4
+summary: Clairmon a container monitoring library
+test_files: []