mirrors/kyverno
mirrors/kyverno
1
0
Fork 0
mirror of https://github.com/kyverno/kyverno.git synced 2025-04-08 10:04:25 +00:00
Code Activity

feat: add violation details to report.results.properties for PSa policies ()

Browse source 
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
This commit is contained in:
Charles-Edouard Brétéché 2023-01-06 11:40:06 +01:00 • committed by GitHub
parent 24c98f4c40
commit 28c0f8f56a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 10 deletions

22
pkg/utils/report/results.go
View file

@ -1,7 +1,8 @@
package report
import (
"fmt"
"sort"
"strings"
"time"
"github.com/go-logr/logr"
@ -99,17 +100,18 @@ func EngineResponseToReportResults(response *response.EngineResponse) []policyre
Severity: severityFromString(annotations[kyvernov1.AnnotationPolicySeverity]),
}
if ruleResult.PodSecurityChecks != nil {
var controls []string
for _, check := range ruleResult.PodSecurityChecks.Checks {
if !check.CheckResult.Allowed {
if result.Properties == nil {
result.Properties = map[string]string{}
}
key := fmt.Sprintf("%s/%s/%s", ruleResult.PodSecurityChecks.Level, ruleResult.PodSecurityChecks.Version, check.ID)
value := check.CheckResult.ForbiddenDetail
if value == "" {
value = check.CheckResult.ForbiddenReason
}
result.Properties[key] = value
controls = append(controls, check.ID)
}
}
if len(controls) > 0 {
sort.Strings(controls)
result.Properties = map[string]string{
"standard": string(ruleResult.PodSecurityChecks.Level),
"version": ruleResult.PodSecurityChecks.Version,
"controls": strings.Join(controls, ","),
}
}
}