mkol5222

How to scan Docker container image using Check Point shiftleft command-line scanner

Requirements

Have your CloudGuard Dome9 API keys ready. They are obtained from Dome 9 web UI at Settings / Credentials section

Env. variable	Description
CHKP_CLOUDGUARD_ID	your D9 API key identifier ("username")
CHKP_CLOUDGUARD_SECRET	D9 API key secret ("password")

mkol5222

#!/bin/bash

cve2cveUrl () {
  [[ $1 =~ CVE-([0-9]{4})-([0-9]+) ]]
  #echo "${BASH_REMATCH[0]}"
  #echo "${BASH_REMATCH[1]}"
  #echo "${BASH_REMATCH[2]}"

  cveUrl="https://raw.githubusercontent.com/aquasecurity/vuln-list/master/nvd/${BASH_REMATCH[1]}/$1.json"
}

mkol5222

First Docker Image

Requirements

• Docker Hub account, note your username your-usernamename
• Docker installed on desktop - instructions

Reference

• article Dockerizing a Node.js web app
• repo mkol5222/nodeinfo

mkol5222

Run Visual Studio Code for Linux from WSL

Thanks a lot to mredbishop and others for their insturctions posted here. This is just a recap of what they figured out.

This process was tested on WSL Ubuntu 18.04.

Install VcXsrv on Windows

1. Dowload the VcXsrv installer from https://sourceforge.net/projects/vcxsrv/
2. Install the software on Windows

Add VS Code repositories

mkol5222

const LEDS = [LED1,LED2,LED3];

const onBtnClick = 
(fn)=> setWatch(fn, BTN, {edge:"rising", debounce:50, repeat:true});

const turnOn = (el) => {
    el.write(true);
};

const turnOff = (el) => {

mkol5222

#!/usr/bin/env python

import dbus

NM = 'org.freedesktop.NetworkManager'
NMCA = NM + '.Connection.Active'
NMDW = NM + '.Device.Wireless'
NMAP = NM + '.AccessPoint'
DBUS_PROPS = 'org.freedesktop.DBus.Properties'

mkol5222

package main

import (
	"fmt"
	"os"

	"github.com/godbus/dbus"
)

// dbus-monitor --system "type='signal',sender='org.freedesktop.NetworkManager',interface='org.freedesktop.NetworkManager'"

mkol5222

Setup

Headless reinstall and update https://raspberrypi.stackexchange.com/a/57023

Enable SSH on the SD Card

• create a text file in /boot/ called ssh

Once you can SSH in:

mkol5222

#!/bin/bash

./run.sh "${@}" &
timeout 10 bash -c "until </dev/tcp/localhost/3000; do sleep 1; done"

curl -s -H "Content-Type: application/json" \
    -XPOST http://admin:admin@localhost:3000/api/datasources \
    -d @- <<EOF
{
    "name": "influx",

mkol5222

BASEURL=http://username:password@127.0.0.1:3000

for dash in $(curl -s -k "${BASEURL}/api/search" | jq -r '.[].title'); do
  curl -k "${BASEURL}/api/dashboards/db/${dash}" > "${dash}.json"
done