Documentation
¶
Overview ¶
Package modules wires the available capability modules into a registry. Frontends call Default() rather than importing individual modules, so adding a capability is a one-line change here.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
Types ¶
This section is empty.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package attacksim is the engine module wrapper around internal/attacksim.
|
Package attacksim is the engine module wrapper around internal/attacksim. |
|
Package dockerbench assesses a Docker host and daemon against the CIS Docker Benchmark (CAPABILITY_SPEC domain 10).
|
Package dockerbench assesses a Docker host and daemon against the CIS Docker Benchmark (CAPABILITY_SPEC domain 10). |
|
Package dockerfile implements static analysis and linting of Dockerfiles.
|
Package dockerfile implements static analysis and linting of Dockerfiles. |
|
Package harden is the capability module that surfaces runtime-confinement findings through the engine.
|
Package harden is the capability module that surfaces runtime-confinement findings through the engine. |
|
Package imageaudit inspects a *built* container image — its configuration and its layer history — and reports hardening violations mapped to the CIS Docker Benchmark image controls (CIS-DI-*).
|
Package imageaudit inspects a *built* container image — its configuration and its layer history — and reports hardening violations mapped to the CIS Docker Benchmark image controls (CIS-DI-*). |
|
Package k8smanifest is the offline Kubernetes-manifest linter (CAPABILITY_SPEC domains 8/10).
|
Package k8smanifest is the offline Kubernetes-manifest linter (CAPABILITY_SPEC domains 8/10). |
|
Package kubebench assesses a Kubernetes cluster against a subset of the CIS Kubernetes Benchmark (CAPABILITY_SPEC domain 10).
|
Package kubebench assesses a Kubernetes cluster against a subset of the CIS Kubernetes Benchmark (CAPABILITY_SPEC domain 10). |
|
Package license is the engine module that gates an image's component licenses against an allow/deny policy (CAPABILITY_SPEC domain 1 — license-policy gating).
|
Package license is the engine module that gates an image's component licenses against an allow/deny policy (CAPABILITY_SPEC domain 1 — license-policy gating). |
|
Package malware is the engine module for static malware/cryptominer scanning of image layers (CAPABILITY_SPEC domains 3/11, static side).
|
Package malware is the engine module for static malware/cryptominer scanning of image layers (CAPABILITY_SPEC domains 3/11, static side). |
|
Package netpolicy is the engine module for Phase 6 (CAPABILITY_SPEC domain 6): network egress analysis and least-privilege policy generation.
|
Package netpolicy is the engine module for Phase 6 (CAPABILITY_SPEC domain 6): network egress analysis and least-privilege policy generation. |
|
Package policy is the engine module and command surface for policy-as-code.
|
Package policy is the engine module and command surface for policy-as-code. |
|
Package rbac is the engine module wrapper around internal/rbac.
|
Package rbac is the engine module wrapper around internal/rbac. |
|
Package registry implements the registry-security & artifact-management capability (CAPABILITY_SPEC domain 13).
|
Package registry implements the registry-security & artifact-management capability (CAPABILITY_SPEC domain 13). |
|
Package runtime is the engine-module face of the runtime sensor.
|
Package runtime is the engine-module face of the runtime sensor. |
|
Package sbom is the engine module wrapper around internal/sbom.
|
Package sbom is the engine module wrapper around internal/sbom. |
|
Package secrets is the engine module wrapper around internal/secrets.
|
Package secrets is the engine module wrapper around internal/secrets. |
|
Package verify is the engine module and command surface for supply-chain verification.
|
Package verify is the engine module and command surface for supply-chain verification. |
|
Package vuln is the engine module for vulnerability scanning (CAPABILITY_SPEC domain 2).
|
Package vuln is the engine module for vulnerability scanning (CAPABILITY_SPEC domain 2). |
Click to show internal directories.
Click to hide internal directories.