Skip to content

Conversation

@dermetfan
Copy link
Contributor

Adds a service that:

  1. Runs vulnix once (with configured options, by default just a system scan).
  2. Runs vulnix on Nomad jobs by listening to the event stream (if enabled). Disabled by default because it suffices to run this on just one node in the cluster and requires secrets to be configured.
  3. Sends the result to Telegraf.

and a dashboard for the results.

Requires changes to bitte-cli to work, see input-output-hk/bitte-cli#28.

@dermetfan dermetfan changed the title Vulnix Vulnix Dashboard Sep 6, 2021
Copy link
Contributor

@nrdxp nrdxp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Probably my biggest concern is the hardcoded namespaces. Everything else isn't really too major and it's looking really good so far 👍

@dermetfan dermetfan force-pushed the vulnix branch 4 times, most recently from 00acdd4 to c8381d6 Compare September 8, 2021 13:44
@dermetfan dermetfan requested a review from nrdxp September 8, 2021 14:09
@input-output-hk input-output-hk deleted a comment from nrdxp Sep 8, 2021
Copy link
Contributor

@nrdxp nrdxp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good work! 👍

@nrdxp nrdxp merged commit 7400d05 into master Sep 8, 2021
@dermetfan dermetfan deleted the vulnix branch September 9, 2021 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants