Skip to content

Instantly share code, notes, and snippets.

@josedonizetti
josedonizetti / tracee-policies-configmap.yaml
Created May 21, 2023 17:43
tracee-policies-configmap.yaml
---
apiVersion: v1
kind: ConfigMap
metadata:
labels:
app.kubernetes.io/name: tracee
app.kubernetes.io/component: tracee
app.kubernetes.io/part-of: tracee
name: tracee-policies
data:
diff --git a/pkg/ebpf/c/tracee.bpf.c b/pkg/ebpf/c/tracee.bpf.c
index e3ca408d..1df68948 100644
--- a/pkg/ebpf/c/tracee.bpf.c
+++ b/pkg/ebpf/c/tracee.bpf.c
@@ -6323,9 +6323,9 @@ int tc_ingress(struct __sk_buff *skb)
static __always_inline bool is_socket_supported(struct socket *sock)
{
- struct sock *sk = (void *) BPF_CORE_READ(sock, sk);
+ struct sock *sk = (void *) READ_KERN(sock->sk);
package main
import (
"fmt"
"log"
"os"
"github.com/urfave/cli/v2"
)
git clone https://github.com/josedonizetti/trivy
git checkout -t origin/feature/k8s_subcommand
make build
./trivy k8s -o results.json # scans a full cluster
./trivy k8s -n default -o results.json # scans a namespace
/Users/josedonizetti/go/bin/golangci-lint run --timeout 5m
pkg/types/docker_conf.go:21:12: undeclared name: `env` (typecheck)
if err := env.Parse(&cfg); err != nil {
^
pkg/types/vulnerability.go:44:8: v[j].Severity undefined (type DetectedVulnerability has no field or method Severity) (typecheck)
v[j].Severity, v[i].Severity,
^
pkg/types/docker_conf.go:4:2: "github.com/caarlos0/env/v6" imported but not used (typecheck)
"github.com/caarlos0/env/v6"
^
global:
route:
receiver: test
group_wait: 30s

group_interval: 30s
receivers:
- name: test
slack_configs:
controller 'controller_name' do
get 'new' => :new
end
scope path: 'dude', controller: :dude do
get 'new' => :new
end
var net = require('net')
var server = net.createServer(function(connection) {
console.log('New connection')
connection.on('data', function(data) {
console.log('Received', data.toString())
connection.write('Bye!\n')

Setting Up The Development Environment

1. Clone the project.

git clone git@github.com:DanKnox/websocket-rails.git

If you are planning on submitting a pull request, fork the project to your own account first and clone it from there.