Merge pull request #627 from kubescape/builtin-att

add builtin attribute to fw
kubescape · Jun 4, 2024 · 5cb34b5 · 5cb34b5
2 parents d2c245c + d01a7f7
commit 5cb34b5
Show file tree

Hide file tree

Showing 13 changed files with 36 additions and 13 deletions.
diff --git a/frameworks/__YAMLscan.json b/frameworks/__YAMLscan.json
@@ -1,7 +1,9 @@
 {
     "name": "YAML-scanning",
     "description": "Controls relevant to yamls",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "file"

diff --git a/frameworks/allcontrols.json b/frameworks/allcontrols.json
@@ -1,7 +1,9 @@
 {
     "name": "AllControls",
     "description": "Contains all the controls from all the frameworks",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "cluster",

diff --git a/frameworks/armobest.json b/frameworks/armobest.json
@@ -1,7 +1,9 @@
 {
     "name": "ArmoBest",
     "description": "",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "cluster",

diff --git a/frameworks/cis-aks-t1.2.0.json b/frameworks/cis-aks-t1.2.0.json
@@ -2,7 +2,8 @@
     "name": "cis-aks-t1.2.0",
     "description": "Testing CIS for Azure Kubernetes Service (AKS) as suggested by CIS benchmark: https://workbench.cisecurity.org/benchmarks/9058",
     "attributes": {
-        "version": "v1.2.0"
+        "version": "v1.2.0",
+        "builtin": true
     },
     "scanningScope": {
         "matches": [

diff --git a/frameworks/cis-eks-t1.2.0.json b/frameworks/cis-eks-t1.2.0.json
@@ -2,7 +2,8 @@
     "name": "cis-eks-t1.2.0",
     "description": "Testing CIS for Amazon Elastic Kubernetes Service (EKS) as suggested by CIS benchmark: https://workbench.cisecurity.org/benchmarks/9681",
     "attributes": {
-        "version": "v1.2.0"
+        "version": "v1.2.0",
+        "builtin": true
     },
     "scanningScope": {
         "matches": [

diff --git a/frameworks/cis-v1.23-t1.0.1.json b/frameworks/cis-v1.23-t1.0.1.json
@@ -2,7 +2,8 @@
     "name": "cis-v1.23-t1.0.1",
     "description": "Testing CIS for Kubernetes as suggested by CIS in https://workbench.cisecurity.org/benchmarks/8973",
     "attributes": {
-        "version": "v1.0.1"
+        "version": "v1.0.1",
+        "builtin": true
     },
     "scanningScope": {
         "matches": [

diff --git a/frameworks/clusterscan.json b/frameworks/clusterscan.json
@@ -1,7 +1,9 @@
 {
     "name": "ClusterScan",
     "description": "Framework for scanning a cluster",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "typeTags": [
         "security"
     ],

diff --git a/frameworks/devopsbest.json b/frameworks/devopsbest.json
@@ -1,7 +1,9 @@
 {
     "name": "DevOpsBest",
     "description": "",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "cluster",

diff --git a/frameworks/mitre.json b/frameworks/mitre.json
@@ -1,7 +1,9 @@
 {
     "name": "MITRE",
     "description": "Testing MITRE for Kubernetes as suggested by microsoft in https://www.microsoft.com/security/blog/wp-content/uploads/2020/04/k8s-matrix.png",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "cluster",

diff --git a/frameworks/nsaframework.json b/frameworks/nsaframework.json
@@ -1,7 +1,9 @@
 {
     "name": "NSA",
     "description": "Implement NSA security advices for K8s ",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "cluster",

diff --git a/frameworks/security.json b/frameworks/security.json
@@ -1,7 +1,9 @@
 {
     "name": "security",
     "description": "Controls that are used to assess security threats.",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "typeTags": [
         "security"
     ],

diff --git a/frameworks/soc2.json b/frameworks/soc2.json
@@ -1,7 +1,9 @@
 {
     "name": "SOC2",
     "description": "SOC2 compliance related controls",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "scanningScope": {
         "matches": [
             "cluster",

diff --git a/frameworks/workloadscan.json b/frameworks/workloadscan.json
@@ -1,7 +1,9 @@
 {
     "name": "WorkloadScan",
     "description": "Framework for scanning a workload",
-    "attributes": {},
+    "attributes": {
+        "builtin": true
+    },
     "typeTags": [
         "security"
     ],