Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var BuiltinRulesFS fs.FS
BuiltinRulesFS is a reference to the embedded filesystem from main package This will be set by the main package during initialization
Functions ¶
Types ¶
type AdmissionServer ¶
type AdmissionServer struct {
Config *ServerConfig
Rules []*models.SecurityRule
Engine engine.EvaluationEngine
Logger interface {
Info(string, ...interface{})
Error(string, ...interface{})
}
}
AdmissionServer handles admission webhook requests
type RuleWithSource ¶
type RuleWithSource struct {
*models.SecurityRule
Source string // "built-in" or "custom"
}
RuleWithSource wraps a SecurityRule with its source information
type ScanConfig ¶
type ScanConfig struct {
Output string
OutputFile string
Parallelism int
Timeout time.Duration
MinSeverity string
MaxViolations int
Quiet bool
SummaryOnly bool
IncludeNamespaces []string
ExcludeNamespaces []string
ResourceTypes []string
Recursive bool
FileExtensions []string
IncludePaths []string
FollowSymlinks bool
NoColor bool
Verbose bool
FailOnViolations bool
ExcludeSystemNamespaces bool
IncludeClusterResources bool
}
ScanConfig holds configuration for scan operations
type ServerConfig ¶
type ServerConfig struct {
Mode string // "validating" or "evaluating"
Port int
TLSCertFile string
TLSKeyFile string
Namespaces []string
ResourceTypes []string
MinSeverity string
LogFormat string
LogLevel string
}
ServerConfig holds the server configuration
type TestCaseConfig ¶
type TestCaseConfig struct {
RuleID string `yaml:"ruleID"`
Good []TestCaseFile `yaml:"good"`
Bad []TestCaseFile `yaml:"bad"`
}
type TestCaseFile ¶
type TestConfig ¶
type TestConfig struct {
TestCases map[string]TestCaseConfig `yaml:"testCases"`
}
Test case validation structures
Click to show internal directories.
Click to hide internal directories.