Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add: Notus rust implementation and integration. #1519

Merged
merged 76 commits into from
Dec 5, 2023
Merged

Add: Notus rust implementation and integration. #1519

merged 76 commits into from
Dec 5, 2023

Conversation

jjnicola
Copy link
Member

@jjnicola jjnicola commented Oct 30, 2023

What:
This pull request adds Notus implemented in Rust and integrates it in the openvas scanner.

Jira:
SC-941
SC-942
SC-943
SC-944
SC-945
SC-946
SC-947
SC-948
SC-951
SC-959

Why:

How:
To select the openvasd Notus backend in favor of Notus python backend, set the following configuration option in the openvas.conf configuration file:

openvasd_server = https://127.0.0.1:5556/  # use here the right URI
x-apikey = changeme  # use here the right key. Optional

Also, set the notus products directory path into the openvasd.toml (or pass it with --products-directory cmd option):

[notus]
advisory_path = "/home/jnicola/install/var/lib/notus/products/"

This option will have preference over the mqtt option. Then, mqtt will not be initialized.

Checklist:

  • Tests
  • PR merge commit message adjusted

@jjnicola jjnicola requested a review from a team as a code owner October 30, 2023 09:33
@jjnicola jjnicola marked this pull request as draft October 30, 2023 09:33
jjnicola and others added 25 commits October 30, 2023 11:40
In order to load notus advisories, those have to be loaded from .notus files.
These files are in JSON format and have the Operating System, they have advisories for, as file name.
Additionally added models for deserializing JSON files.
This test starts a small notus scan and checks, if it generates the correct results
Kraemii and others added 5 commits December 1, 2023 10:14
Although the build image construct got deprecated codeql relies on it.

To change that CodeQL now uses gvm-libs and install the dependencies like
the other build steps.
@ArnoStiefvater ArnoStiefvater marked this pull request as ready for review December 5, 2023 09:05
@ArnoStiefvater ArnoStiefvater requested a review from a team as a code owner December 5, 2023 09:05
If enabled in the congiguration file (or passed via command line option) and the GNUPGHOME env variable is set pointing to the gnupg keyring, it will perform the signature check each time that a new product file is uploaded.
@Kraemii Kraemii enabled auto-merge (squash) December 5, 2023 15:02
@Kraemii Kraemii merged commit 7bf3fa7 into main Dec 5, 2023
30 checks passed
@Kraemii Kraemii deleted the rs-notus branch December 5, 2023 15:04
nichtsfrei added a commit to greenbone/docs that referenced this pull request Apr 11, 2024
With greenbone/openvas-scanner#1519
notus is deprecated in favour of openvasd/notus endpoint.

For more details see: https://greenbone.github.io/scanner-api/
for a general overview of the API implemented by openvasd.

This removes the dependencies of a mqtt broker as well as notus service.
nichtsfrei added a commit to greenbone/docs that referenced this pull request Apr 12, 2024
With greenbone/openvas-scanner#1519
notus is deprecated in favour of openvasd/notus endpoint.

For more details see: https://greenbone.github.io/scanner-api/
for a general overview of the API implemented by openvasd.

This removes the dependencies of a mqtt broker as well as notus service.
greenbonebot pushed a commit to greenbone/docs that referenced this pull request Apr 15, 2024
With greenbone/openvas-scanner#1519
notus is deprecated in favour of openvasd/notus endpoint.

For more details see: https://greenbone.github.io/scanner-api/
for a general overview of the API implemented by openvasd.

This removes the dependencies of a mqtt broker as well as notus service.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants