vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Use a feature flag to toggle security notifications

Browse source
This commit is contained in:
Quentin Machu 2016-03-01 15:35:00 -05:00
parent bfcb1add48
commit 888f976e8d
3 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
config.py
View file

@ -280,9 +280,10 @@ class DefaultConfig(object):
# Security scanner # Security scanner
FEATURE_SECURITY_SCANNER = False FEATURE_SECURITY_SCANNER = False
FEATURE_SECURITY_NOTIFICATIONS = False
SECURITY_SCANNER = { SECURITY_SCANNER = {
'ENDPOINT': 'http://192.168.99.101:6060', 'ENDPOINT': 'http://192.168.99.101:6060',
'ENGINE_VERSION_TARGET': 1, 'ENGINE_VERSION_TARGET': 2,
'API_VERSION': 'v1', 'API_VERSION': 'v1',
'API_TIMEOUT_SECONDS': 10, 'API_TIMEOUT_SECONDS': 10,
} }

4
util/secscan/analyzer.py
View file

@ -1,6 +1,8 @@
import logging import logging
import logging.config import logging.config
import features
from collections import defaultdict from collections import defaultdict
from endpoints.notificationhelper import spawn_notification from endpoints.notificationhelper import spawn_notification
@ -90,7 +92,7 @@ class LayerAnalyzer(object):
# If we are the one who've done the job successfully first, get the vulnerabilities and # If we are the one who've done the job successfully first, get the vulnerabilities and
# send notifications to the repos that have a tag on that layer. # send notifications to the repos that have a tag on that layer.
if set_status: if features.SECURITY_NOTIFICATIONS and set_status:
# Get the tags of the layer we analyzed. # Get the tags of the layer we analyzed.
repository_map = defaultdict(list) repository_map = defaultdict(list)
event = ExternalNotificationEvent.get(name='vulnerability_found') event = ExternalNotificationEvent.get(name='vulnerability_found')

2
workers/security_notification_worker.py
View file

@ -43,7 +43,7 @@ class SecurityNotificationWorker(QueueWorker):
if __name__ == '__main__': if __name__ == '__main__':
if not features.SECURITY_SCANNER: if not features.SECURITY_SCANNER or not features.SECURITY_NOTIFICATIONS:
logger.debug('Security scanner disabled; skipping SecurityNotificationWorker') logger.debug('Security scanner disabled; skipping SecurityNotificationWorker')
while True: while True:
time.sleep(100000) time.sleep(100000)