Templates

Author: sebie

scanners/ncrack/.helmignore

@@ -0,0 +1,5 @@
+.DS_Store
+
+parser/
+scanner/
+examples/

scanners/ncrack/Chart.yaml

@@ -0,0 +1,20 @@
+apiVersion: v2
+name: ncrack
+description: A Helm chart for the NCRACK security Scanner that integrates with the secureCodeBox.
+
+type: application
+version: 0.1.0
+appVersion: 0.7
+
+keywords:
+- security
+- ncrack
+- scanner
+- secureCodeBox
+home: https://www.securecodebox.io/scanners/ncrack
+icon: https://www.securecodebox.io/scannerIcons/Ncrack.svg
+sources:
+- https://github.com/secureCodeBox/secureCodeBox
+maintainers:
+- name: iteratec GmbH
+  email: security@iteratec.com

scanners/ncrack/examples/raspberry/scan.yaml

@@ -0,0 +1,8 @@
+apiVersion: "execution.experimental.securecodebox.io/v1"
+kind: Scan
+metadata:
+  name: "raspberry"
+spec:
+  scanType: "ncrack"
+  parameters:
+    - ssh://192.168.178.83

scanners/ncrack/templates/ncrack-parse-definition.yaml

@@ -0,0 +1,7 @@
+apiVersion: "execution.experimental.securecodebox.io/v1"
+kind: ParseDefinition
+metadata:
+  name: "ncrack-xml"
+spec:
+  handlesResultsType: ncrack-xml
+  image: "{{ .Values.parserImage.registry }}/{{ .Values.parserImage.repository }}:{{ .Values.parserImage.tag }}"

scanners/ncrack/templates/ncrack-scan-type.yaml

@@ -0,0 +1,21 @@
+apiVersion: "execution.experimental.securecodebox.io/v1"
+kind: ScanType
+metadata:
+  name: "ncrack"
+spec:
+  extractResults:
+    type: ncrack-xml
+    location: "/home/securecodebox/ncrack-results.xml"
+  jobTemplate:
+    spec:
+      ttlSecondsAfterFinished: 10
+      backoffLimit: 3
+      template:
+        spec:
+          restartPolicy: OnFailure
+          containers:
+            - name: ncrack
+              image: scbexperimental/ncrack:0.7
+              command: ["ncrack", "-oX", "/home/securecodebox/ncrack-results.xml"]
+              resources:
+                {{- toYaml .Values.scannerJob.resources | nindent 16 }}

scanners/ncrack/values.yaml

@@ -0,0 +1,15 @@
+parserImage:
+  registry: docker.io
+  repository: scbexperimental/parser-ncrack
+  tag: latest
+
+scannerJob:
+  resources: {}
+# scannerJob:
+#   resources:
+#     requests:
+#       memory: "256Mi"
+#       cpu: "250m"
+#     limits:
+#       memory: "512Mi"
+#       cpu: "500m"