8000 Added optional `identified at` parameter to findings by Ilyesbdlala · Pull Request #1434 · secureCodeBox/secureCodeBox · GitHub
  • [go: up one dir, main page]

    Skip to content

    Conversation

    @Ilyesbdlala
    Copy link
    Member
    @Ilyesbdlala Ilyesbdlala commented Nov 7, 2022

    Description

    Added identified_at parameter to findings. It includes the time that a scan has occurred. This is done only to scanners that include the time of scan in their raw results.
    The format of the parameter is ISO8601

    Partially resolves to #519

    identified at added to:

    • Amass
    • angularjs-csti-scanner
    • cmseek
    • gitleaks
    • git-repos Scanner
    • ffuf
    • kubeaudit
    • kubehunter
    • ncrack
    • nikto
    • nmap
    • nuclei
    • screenshooter
    • semgrep
    • ssh-scan
    • sslyze
    • trivy
    • typo3scan
    • whatweb
    • wpscan
    • zap
    • zap-advanced

    Checklist

    • Test your changes as thoroughly as possible before you commit them. Preferably, automate your test by unit/integration tests.
    • Make sure that all your commits are signed-off and that you are added to the Contributors file.
    • Make sure that all CI finish successfully.
    • Optional (but appreciated): Make sure that all commits are Verified.

    @Ilyesbdlala Ilyesbdlala self-assigned this Nov 7, 2022
    @github-actions
    Copy link
    github-actions bot commented Nov 7, 2022

    MegaLinter status: ⚠️ WARNING

    Descriptor Linter Files Fixed Errors Elapsed time
    ⚠️ JAVASCRIPT eslint 13 1 0.72s
    ⚠️ SPELL misspell 13 1 0.05s

    See errors details in artifact MegaLinter reports on CI Job page
    Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

    @Ilyesbdlala Ilyesbdlala force-pushed the feature/add-identified-atparameter branch from 7aa23e0 to b825b5a Compare December 19, 2022 16:24
    @Ilyesbdlala Ilyesbdlala force-pushed the feature/add-identified-atparameter branch from 53415d7 to ef65d50 Compare December 28, 2022 17:42
    @Ilyesbdlala Ilyesbdlala marked this pull request as ready for review December 28, 2022 17:42
    @rfelber rfelber added this to the v4.0.0 milestone Jan 5, 2023
    @rfelber
    Copy link
    Member
    rfelber commented Jan 30, 2023

    Hi @Ilyesbdlala

    is this PR ready for review?

    @Ilyesbdlala
    Copy link
    Member Author

    Hi @Ilyesbdlala

    is this PR ready for review?

    Yes

    …ding
    
    This uses the amass's result Timestamp attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …nding
    
    This uses the cmseek's `last_scanned` result attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    … finding
    
    This uses the kubeaudit's `time` result attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    This uses the ffuf's `time` result attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …nding
    
    This uses the nuclei's `timestamp` result attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …finding
    
    This uses the ssh-scan's `end-time` result attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …nding
    
    This uses the sslyze `date_scans_completed` result attribute
    This is done in relation to #519
    
    The tests are also converted from toContainEqual() to toMatchInlineSnapshot(),
    this is done to make maintenance easier and be inline with how we test our other scanners
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …nding
    
    This uses the wpscan `stop_time` result attribute
    This is done in relation to #519
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …dards
    
    also fixed some formating
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    …n local machine and CI server
    
     I ran into an issue where the time coverted to ISO String was dependant from the timezone of the machine running the test.
    This means that if GitHub Actions CI time and local time are different the test will fail.
    To fix this UTC timezone is enforced in the date string.
    Sslyze uses UTC time zone internally already. However, CMSeek uses the timezone of the running machine. UTC was
    also chosen for simplicity and consistency. So times for Cmseek can be a few hours off
    
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    @Ilyesbdlala Ilyesbdlala force-pushed the feature/add-identified-atparameter branch from 72b4313 to b1530bf Compare February 20, 2023 14:25
    @Ilyesbdlala Ilyesbdlala mentioned this pull request Feb 20, 2023
    9 tasks
    Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
    @Ilyesbdlala Ilyesbdlala added breaking Changes requiring a major release and removed breaking Changes requiring a major release labels Feb 21, 2023
    @Ilyesbdlala Ilyesbdlala changed the title Add identified at parameter to findings Improved optional identified at parameter to findings Feb 22, 2023
    @Ilyesbdlala Ilyesbdlala changed the title Improved optional identified at parameter to findings Added optional identified at parameter to findings Feb 22, 2023
    @rfelber rfelber merged commit 019ccf5 into main Feb 22, 2023
    @rfelber rfelber deleted the feature/add-identified-atparameter branch February 22, 2023 12:54
    @rfelber rfelber added the scanner Implement or update a security scanner label Mar 7, 2023
    @Ilyesbdlala Ilyesbdlala removed the scanner Implement or update a security scanner label May 12, 2023
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    Projects

    Archived in project

    Development

    Successfully merging this pull request may close these issues.

    3 participants

    0