Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
packages/*
melange-cache/*
local-melange.rsa*
melange.rsa*
dag.svg
.idea
.idea
31 changes: 20 additions & 11 deletions kube-bench.yaml
Original file line number Diff line number Diff line change
@@ -1,34 +1,43 @@
package:
name: kube-bench
version: 0.6.14
epoch: 0
epoch: 1
description: Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
copyright:
- license: Apache-2.0
dependencies:
runtime:
- kubectl

environment:
contents:
packages:
- wolfi-baselayout
- busybox
- build-base
- go
- ca-certificates-bundle

pipeline:
# We can't use go/install because this requires specific ldflags to set the version
- uses: git-checkout
with:
repository: https://github.com/aquasecurity/kube-bench
tag: v${{package.version}}
expected-commit: c2880848f05aaf87c1768c226840356a9a4688fd
destination: kube-bench

- runs: |
cd kube-bench
make build
mkdir -p ${{targets.destdir}}/usr/bin
install -Dm755 ./kube-bench ${{targets.destdir}}/usr/bin/kube-bench
- uses: go/build
with:
modroot: .
packages: .
output: kube-bench
ldflags: |
-X github.com/aquasecurity/kube-bench/cmd.cfgDir=/etc/kube-bench/cfg
-X github.com/aquasecurity/kube-bench/cmd.KubeBenchVersion=v${{package.version}}

subpackages:
- name: "kube-bench-configs"
description: "Configuration files for kube-bench"
pipeline:
- runs: |
mkdir -p ${{targets.subpkgdir}}/etc/kube-bench/cfg
cp -rv ./cfg/* ${{targets.subpkgdir}}/etc/kube-bench/cfg

update:
enabled: true
Expand Down