Skip to content

Instantly share code, notes, and snippets.

View sozercan's full-sized avatar
:shipit:

Sertaç Özercan sozercan

:shipit:
493 followers · 247 following
View GitHub Profile
@sozercan
sozercan / gist:de9a4687c482bef8e2315b79ff525d95
Created October 20, 2021 16:25
2021-10-20T16:25:12.458Z INFO Detected OS: debian
2021-10-20T16:25:12.458Z INFO Detecting Debian vulnerabilities...
2021-10-20T16:25:12.469Z INFO Number of language-specific files: 0
mcr.microsoft.com/oss/openservicemesh/osm-crds:v0.11.0 (debian 10.10)
=====================================================================
Total: 153 (UNKNOWN: 0, LOW: 111, MEDIUM: 16, HIGH: 22, CRITICAL: 4)
+------------------+------------------+----------+------------------------+----------------+--------------------------------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
@sozercan
sozercan / gist:ca0536934cd0564370d8c14d38179cc8
Created October 8, 2021 18:24
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.4 (debian 10.10)
======================================================================
Total: 104 (UNKNOWN: 0, LOW: 74, MEDIUM: 9, HIGH: 17, CRITICAL: 4)
+---------------+------------------+----------+-------------------+---------------+-----------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
+---------------+------------------+----------+-------------------+---------------+-----------------------------------------+
| apt | CVE-2011-3374 | LOW | 1.8.2.3 | | It was found that apt-key in apt, |
| | | | | | all versions, do not correctly... |
| | | | | | -->avd.aquasec.com/nvd/cve-2011-3374 |
@sozercan
sozercan / gist:0afd24920b83a127c0321d43c61bb608
Created October 8, 2021 18:23
sozercan/nmi:v0.0.0-dev (debian 11.0)
=====================================
Total: 64 (UNKNOWN: 0, LOW: 57, MEDIUM: 5, HIGH: 0, CRITICAL: 2)
+------------------+------------------+----------+-------------------+---------------+-----------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
+------------------+------------------+----------+-------------------+---------------+-----------------------------------------+
| apt | CVE-2011-3374 | LOW | 2.2.4 | | It was found that apt-key in apt, |
| | | | | | all versions, do not correctly... |
| | | | | | -->avd.aquasec.com/nvd/cve-2011-3374 |
@sozercan
sozercan / gist:cf8d3113982d3d3aac84a19e46656437
Created September 29, 2021 21:35
sozercan/nmi:v0.0.0-dev (debian 11.0)
=====================================
Total: 70 (UNKNOWN: 0, LOW: 12, MEDIUM: 29, HIGH: 24, CRITICAL: 5)
+------------------+------------------+----------+-------------------+------------------+-----------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
+------------------+------------------+----------+-------------------+------------------+-----------------------------------------+
| apt | CVE-2011-3374 | LOW | 2.2.4 | | It was found that apt-key in apt, |
| | | | | | all versions, do not correctly... |
| | | | | | -->avd.aquasec.com/nvd/cve-2011-3374 |
@sozercan
sozercan / gist:daa2419b9bbc657b1f1df92c91e805fd
Created September 29, 2021 21:17
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.4 (debian 10.10)
======================================================================
Total: 108 (UNKNOWN: 0, LOW: 14, MEDIUM: 46, HIGH: 41, CRITICAL: 7)
+---------------+------------------+----------+-------------------+---------------+-----------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
+---------------+------------------+----------+-------------------+---------------+-----------------------------------------+
| apt | CVE-2011-3374 | LOW | 1.8.2.3 | | It was found that apt-key in apt, |
| | | | | | all versions, do not correctly... |
| | | | | | -->avd.aquasec.com/nvd/cve-2011-3374 |
@sozercan
sozercan / .golangci.yml
Created July 14, 2021 23:06
run:
deadline: 5m
linters:
disable-all: true
enable:
- deadcode
- errorlint
- goconst
- gocyclo
@sozercan
sozercan / invalidrego-template.yaml
Created February 20, 2021 00:38
apiVersion: templates.gatekeeper.sh/v1beta1
kind: ConstraintTemplate
metadata:
name: k8sinvalidrego
spec:
crd:
spec:
names:
kind: K8sInvalidRego
targets:
@sozercan
sozercan / denyall-template.yaml
Last active February 19, 2021 21:48
apiVersion: templates.gatekeeper.sh/v1beta1
kind: ConstraintTemplate
metadata:
name: k8sdenyall
spec:
crd:
spec:
names:
kind: K8sDenyAll
targets:
@sozercan
sozercan / gatekeeper.yaml
Last active September 14, 2020 20:50
apiVersion: v1
kind: Namespace
metadata:
labels:
admission.gatekeeper.sh/ignore: no-self-managing
control-plane: controller-manager
gatekeeper.sh/system: "yes"
name: gatekeeper-system
---
apiVersion: apiextensions.k8s.io/v1beta1
@sozercan
sozercan / gist:91711a18c696734a2c914f2eb82bec63
Last active July 31, 2020 02:49
# HELP gatekeeper_constraint_template_ingestion_count Total number of constraint template ingestion actions
# TYPE gatekeeper_constraint_template_ingestion_count counter
gatekeeper_constraint_template_ingestion_count{status="active"} 207
# HELP gatekeeper_constraint_template_ingestion_duration_seconds Distribution of how long it took to ingest a constraint template in seconds
# TYPE gatekeeper_constraint_template_ingestion_duration_seconds histogram
gatekeeper_constraint_template_ingestion_duration_seconds_bucket{status="active",le="0.01"} 166
gatekeeper_constraint_template_ingestion_duration_seconds_bucket{status="active",le="0.02"} 172
gatekeeper_constraint_template_ingestion_duration_seconds_bucket{status="active",le="0.03"} 183
gatekeeper_constraint_template_ingestion_duration_seconds_bucket{status="active",le="0.04"} 195
gatekeeper_constraint_template_ingestion_duration_seconds_bucket{status="active",le="0.05"} 201