diff options
| -rwxr-xr-x | csv/critical.sh | 2 | ||||
| -rwxr-xr-x | run.sh | 34 |
2 files changed, 36 insertions, 0 deletions
diff --git a/csv/critical.sh b/csv/critical.sh index ab20b34..c6f1cae 100755 --- a/csv/critical.sh +++ b/csv/critical.sh @@ -47,6 +47,8 @@ def is_critical(row): value = row.get(field, "") if value and "CRITICAL" in value.upper(): return True + if value and "HIGH" in value.upper(): + return True return False @@ -0,0 +1,34 @@ +#!/bin/bash + +set -euo pipefail + +IMAGE="$2" +TSV="./$3.tsv" +CSV="./csv/$3-vuln.csv" + +if [[ "$1" == "--host" ]]; then + sudo docker pull $IMAGE + + sudo docker run --rm $IMAGE \ + bash -lc "dpkg-query -W -f='\${binary:Package}\t\${Version}\t\${Architecture}\n'" \ + | sort > $TSV + +elif [[ "$1" == "--dpu" ]]; then + TMP=$(mktemp) + + ssh ubuntu@192.168.100.2 bash -s <<EOF +sudo docker pull $IMAGE +sudo docker run --rm $IMAGE bash -lc "dpkg-query -W -f='\\\${binary:Package}\t\\\${Version}\t\\\${Architecture}\n'" \ +| sort | tee "$TMP" +EOF + scp -P 22 ubuntu@192.168.100.2:$TMP $TSV + +else + echo "OH NO!!" + exit +fi + +python3 query.py $TSV \ + --ecosystem "Ubuntu:22.04:LTS" \ + --csv $CSV \ + --json /dev/null |