Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type CategoryResult ¶
type CategoryResult struct {
Category string `json:"category"`
Timestamp time.Time `json:"timestamp"`
ScanTimeMs int64 `json:"scan_time_ms"`
Results CategoryResultSummary `json:"results"`
Findings []Finding `json:"findings"`
ContainerName string `json:"container_name,omitempty"` // If filtered by container
}
CategoryResult represents the result of a category-specific scan
func CheckContainers ¶
func CheckContainers(opts CheckOptions) (*CategoryResult, error)
CheckContainers performs a focused scan on container security settings
func CheckFirewall ¶
func CheckFirewall(opts CheckOptions) (*CategoryResult, error)
CheckFirewall performs a focused scan on firewall configuration
func CheckNetworks ¶
func CheckNetworks(opts CheckOptions) (*CategoryResult, error)
CheckNetworks performs a focused scan on Docker networks
func CheckPorts ¶
func CheckPorts(opts CheckOptions) (*CategoryResult, error)
CheckPorts performs a focused scan on port exposures
func (*CategoryResult) FormatJSON ¶
func (r *CategoryResult) FormatJSON() error
FormatJSON outputs category results as JSON
func (*CategoryResult) FormatTerminal ¶
func (r *CategoryResult) FormatTerminal()
FormatTerminal outputs category results to terminal
type CategoryResultSummary ¶
type CategoryResultSummary struct {
Critical int `json:"critical"`
High int `json:"high"`
Medium int `json:"medium"`
Low int `json:"low"`
Info int `json:"info"`
OK int `json:"ok"`
}
CategoryResultSummary counts issues by severity
type CheckOptions ¶
type CheckOptions struct {
JSON bool
Container string // Filter by container name
Severity string // Filter by severity (critical, high, medium, low, all)
NoCache bool // Skip cache
Quiet bool // Suppress output
}
CheckOptions contains options for category checks
type Finding ¶
type Finding struct {
Severity string `json:"severity"` // critical, high, medium, low, info, ok
Container string `json:"container"` // Container name
Port string `json:"port,omitempty"` // Port if applicable
Binding string `json:"binding,omitempty"` // Port binding if applicable
Network string `json:"network,omitempty"` // Network if applicable
Message string `json:"message"` // Description
Remediation string `json:"remediation,omitempty"` // Fix suggestion
}
Finding represents a single security finding
Click to show internal directories.
Click to hide internal directories.