Introduce scope limiter on cascading rules to enforce scope#805

Merged

J12934 merged 58 commits intosecureCodeBox:mainfrom

EndPositive:reverse-matches

Dec 8, 2021

Commits on Nov 10, 2021

Add reverse-matches
Jop Zitman
committed
Merge remote-tracking branch 'upstream/main' into reverse-matches
Jop Zitman
committed

Commits on Nov 15, 2021

AND together `anyOf`, `allOf`, and `noneOf`
Jop Zitman
committed
Implement subdomainOf operator
Jop Zitman
committed
Implement "global" validation/error handling
Jop Zitman
committed

Commits on Nov 16, 2021

Select only annotations with domain `scope.cascading.securecodebox.io/`
Jop Zitman
committed
Enforce immutability of `scope.cascading.securecodebox.io/` annotations
Jop Zitman
committed
Loudly fail if new scope annotations are defined in a cascading rule
Jop Zitman
committed

Commits on Nov 17, 2021

Rename ScanAnnotationSelector to ScopeLimiter and SelectorAttributeMappings to ScopeLimiterAliases
Jop Zitman
committed
Add `scopeLimiterAliases` to scanner values.yaml
Jop Zitman
committed
Remove unused import
Jop Zitman
committed
Make scope limiter actually run in cluster
Jop Zitman
committed
JSON stringify logs
Jop Zitman
committed

Commits on Nov 18, 2021

Updating Helm Docs

malexmave
authored and
Jop Zitman
committed
Add more test cases
malexmave
authored
Add a few more test cases
malexmave
committed
Add `scopeLimiterAliases` to new scanner template
Jop Zitman
committed
Rename `reverse-matches.ts` to `scope-limiter.ts` and `isReverseMatch` to `isInScope`
Jop Zitman
committed
Error operator name instead of operator function
Jop Zitman
committed
Rename lhs and rhs to their semantic names
Jop Zitman
committed

Commits on Nov 19, 2021

Get rid of redundant operators
Jop Zitman
committed
Add inline documentation for every operator
Jop Zitman
committed

Commits on Nov 25, 2021

Fix unit tests
Jop Zitman
committed
Add IPv6 support to InCIDR
Jop Zitman
committed

Commits on Nov 26, 2021

Add support for templating a list from findings
Jop Zitman
committed
Handle whitespace explicitly in list function
Jop Zitman
committed
Consistency
Jop Zitman
committed
Add more tests and error handling
Jop Zitman
committed
Add tons of comments everywhere and convert `templateValue` return type into an object for readability.
Jop Zitman
committed
Merge branch 'main' into reverse-matches
Jop Zitman
committed
Reduce list requirement key depth
Jop Zitman
committed
Actually test with a key that is too short.
Jop Zitman
committed
Fix expected error message for unit test
malexmave
committed
Add some more unit tests
malexmave
committed
Add failing test
Jop Zitman
committed
Add test for v6 constraint without v6 address
malexmave
committed

Commits on Nov 29, 2021

Rework test suite to bdd and implement `list`, `split`, and `keyinobjectlist`
Jop Zitman
committed
Replace all `test` by `it`
Jop Zitman
committed
Rename `cascadedScans` to `isInScope` in test suite
Jop Zitman
committed
Add more `Contains` tests
Jop Zitman
committed
Add `In` tests
Jop Zitman
committed
Add trailing delimiter to internal split
Jop Zitman
committed
Rename `keyinobjectlist` -> `pickValues` and `list` -> `asList`
Jop Zitman
committed

Commits on Nov 30, 2021

Commits on Dec 1, 2021

Test lists in alias
Jop Zitman
committed
Merge branch 'main' into reverse-matches
Jop Zitman
committed

Commits on Dec 7, 2021

Commits on Dec 8, 2021