8000 Added optional `identified at` parameter to findings by Ilyesbdlala · Pull Request #1434 · secureCodeBox/secureCodeBox · GitHub
[go: up one dir, main page]

Skip to content

Added optional identified at parameter to findings#1434

Merged
rfelber merged 16 commits intomainfrom
feature/add-identified-atparameter
Feb 22, 2023
Merged

Added optional identified at parameter to findings#1434
rfelber merged 16 commits intomainfrom
feature/add-identified-atparameter

Conversation

@Ilyesbdlala
Copy link
Member
@Ilyesbdlala Ilyesbdlala commented Nov 7, 2022

Description

Added identified_at parameter to findings. It includes the time that a scan has occurred. This is done only to scanners that include the time of scan in their raw results.
The format of the parameter is ISO8601

Partially resolves to #519

identified at added to:

  • Amass
  • angularjs-csti-scanner
  • cmseek
  • gitleaks
  • git-repos Scanner
  • ffuf
  • kubeaudit
  • kubehunter
  • ncrack
  • nikto
  • nmap
  • nuclei
  • screenshooter
  • semgrep
  • ssh-scan
  • sslyze
  • trivy
  • typo3scan
  • whatweb
  • wpscan
  • zap
  • zap-advanced

Checklist

  • Test your changes as thoroughly as possible before you commit them. Preferably, automate your test by unit/integration tests.
  • Make sure that all your commits are signed-off and that you are added to the Contributors file.
  • Make sure that all CI finish successfully.
  • Optional (but appreciated): Make sure that all commits are Verified.

@Ilyesbdlala Ilyesbdlala self-assigned this Nov 7, 2022
@github-actions
Copy link
github-actions bot commented Nov 7, 2022

MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
⚠️ JAVASCRIPT eslint 13 1 0.72s
⚠️ SPELL misspell 13 1 0.05s

See errors details in artifact MegaLinter reports on CI Job page
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

@Ilyesbdlala Ilyesbdlala force-pushed the feature/add-identified-atparameter branch from 7aa23e0 to b825b5a Compare December 19, 2022 16:24
@Ilyesbdlala Ilyesbdlala force-pushed the feature/add-identified-atparameter branch from 53415d7 to ef65d50 Compare December 28, 2022 17:42
@Ilyesbdlala Ilyesbdlala marked this pull request as ready for review December 28, 2022 17:42
@rfelber rfelber added this to the v4.0.0 milestone Jan 5, 2023
@rfelber
Copy link
Member
rfelber commented Jan 30, 2023

Hi @Ilyesbdlala

is this PR ready for review?

@Ilyesbdlala
Copy link
Member Author

Hi @Ilyesbdlala

is this PR ready for review?

Yes

…ding

This uses the amass's result Timestamp attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…nding

This uses the cmseek's `last_scanned` result attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
… finding

This uses the kubeaudit's `time` result attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
This uses the ffuf's `time` result attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…nding

This uses the nuclei's `timestamp` result attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…finding

This uses the ssh-scan's `end-time` result attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…nding

This uses the sslyze `date_scans_completed` result attribute
This is done in relation to #519

The tests are also converted from toContainEqual() to toMatchInlineSnapshot(),
this is done to make maintenance easier and be inline with how we test our other scanners

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…nding

This uses the wpscan `stop_time` result attribute
This is done in relation to #519

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…dards

also fixed some formating

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
…n local machine and CI server

 I ran into an issue where the time coverted to ISO String was dependant from the timezone of the machine running the test.
This means that if GitHub Actions CI time and local time are different the test will fail.
To fix this UTC timezone is enforced in the date string.
Sslyze uses UTC time zone internally already. However, CMSeek uses the timezone of the running machine. UTC was
also chosen for simplicity and consistency. So times for Cmseek can be a few hours off

Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
@Ilyesbdlala Ilyesbdlala force-pushed the feature/add-identified-atparameter branch from 72b4313 to b1530bf Compare February 20, 2023 14:25
@Ilyesbdlala Ilyesbdlala mentioned this pull request Feb 20, 2023
9 tasks
Signed-off-by: Ilyes Ben Dlala <ilyes.bendlala@iteratec.com>
@Ilyesbdlala Ilyesbdlala added breaking Changes requiring a major release and removed breaking Changes requiring a major release labels Feb 21, 2023
@Ilyesbdlala Ilyesbdlala changed the title Add identified at parameter to findings Improved optional identified at parameter to findings Feb 22, 2023
@Ilyesbdlala Ilyesbdlala changed the title Improved optional identified at parameter to findings Added optional identified at parameter to findings Feb 22, 2023
@rfelber rfelber merged commit 019ccf5 into main Feb 22, 2023
@rfelber rfelber deleted the feature/add-identified-atparameter branch February 22, 2023 12:54
@rfelber rfelber added the scanner Implement or update a security scanner label Mar 7, 2023
@Ilyesbdlala Ilyesbdlala removed the scanner Implement or update a security scanner label May 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

2 participants

0