Closed scrthq closed 4 months ago
$ cat ash_stdout.txt
Resolved OCI_RUNNER to: /usr/bin/docker
Building image automated-security-helper:local -- this may take a few minutes during the first build...
Running ASH scan using built image...
ASH version 1.3.0
Repository cloned successfully.
ASH found 61 file(s) in the source directory...
Items to scan for in Dockerfile-cdk are: [ yaml yml json template ]
Items to scan for in Dockerfile-yaml are: [ yaml yml tf json dockerfile ]
Running cdk-docker-execute.sh ...
Running yaml-docker-execute.sh ...
waiting on Dockerfile-cdk to finish ...
Items to scan for in Dockerfile-js are: [ js jsx ts tsx ]
Items to scan for in Dockerfile-grype are: [ js jsx ts tsx py java go cs sh war jar ]
Items to scan for in Dockerfile-py are: [ py pyc ipynb ]
Items to scan for in Dockerfile-git are: [ git ]
Running py-docker-execute.sh ...
Running grype-docker-execute.sh ...
Running git-docker-execute.sh ...
Running js-docker-execute.sh ...
Dockerfile Dockerfile-js returned 0
Dockerfile Dockerfile-git returned 0
Dockerfile Dockerfile-py returned 0
Dockerfile Dockerfile-cdk returned 0
Dockerfile-cdk finished with return code 0
waiting on Dockerfile-yaml to finish ...
Dockerfile Dockerfile-yaml returned 0
Dockerfile-yaml finished with return code 0
waiting on Dockerfile-git to finish ...
Dockerfile-git finished with return code 0
waiting on Dockerfile-py to finish ...
Dockerfile-py finished with return code 0
waiting on Dockerfile-js to finish ...
Dockerfile-js finished with return code 0
waiting on Dockerfile-grype to finish ...
Dockerfile Dockerfile-grype returned 0
Dockerfile-grype finished with return code 0
Jobs return code report:
Dockerfile-cdk : 0
Dockerfile-yaml : 0
Dockerfile-git : 0
Dockerfile-py : 0
Dockerfile-js : 0
Dockerfile-grype : 0
Your final report can be found here: /home/runner/work/automated-security-helper/automated-security-helper/ash_output/aggregated_results.txt
ASH execution completed in 22 seconds.
Highest return code is 0
@climbertjh2 @rafaelpereyra latest comments should all be resolved now
1.3.0 - 2024-04-17
Features
__version__
file for easier version maintainabilitygrep
on thecdk-docker-execute.sh
script for speed as well as to respect.gitignore
/.ignore
file specifications automatically. Implementedripgrep
for the intended purposes.cdk-docker-execute.sh
script to create a unique internal stack name per imported-and-scanned CloudFormation template.Fixes
git clone
calls into the temporary${_ASH_RUN_DIR}
now that single container is the primary use case to prevent collisions and spending time on repeat tasks during scans.Maintenance / Internal
--debug
flag.debug_show_tree
function toutils/common.sh
for easy debugging insertion of a tree call at any point in the scan to see repository contentsutils/get-scan-set.py
script to generate the ignore spec and initial scan set to file in the output directory