Thanks to visit codestin.com
Credit goes to github.com

Skip to content

secureCodeBox CLI (scbctl) #189

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
3 tasks done
nigthknight opened this issue Nov 2, 2020 · 4 comments
Closed
3 tasks done

secureCodeBox CLI (scbctl) #189

nigthknight opened this issue Nov 2, 2020 · 4 comments
Assignees
Labels
cli Issues regarding the CLI Integration enhancement New feature or request

Comments

@nigthknight
Copy link
Member

nigthknight commented Nov 2, 2020

Is your feature request related to a problem? Please describe.

As user / developer of the secureCodeBox I would like to interact with the secureCodeBox via an unified CLI to fulfill tasks such as installing, start, update and delete scanners / hooks, generate stubs for new scanners / hooks

Describe the solution you'd like

There is a CLI tool to:

  • create & observe scans
    e.g. scbctl scan amass enum -d example.com to directly create a Scan with a scanType amass and the parameters: ["enum", "-d", "example.com"]. Ideally the cli would also have a paramters to automatically "follow" the scans progress to view the logs of scanner & parser and show a summary of the results.
  • directly trigger new executions of ScheduledScans
    e.g. scbctl trigger --namespace internal-scans daily-network-scan to directly trigger a new Scan for the daily-network-scan Scheduled Scan
  • interact with cascading rules

Additional context

A simple implementation could be possible using Cobra

For a previous prototype version of the secureCodeBox there used to be a command line with the ability to start and observe scans, a example scan run can be seen in this video 😛:

scbctl.mp4
@nigthknight nigthknight added enhancement New feature or request cli Issues regarding the CLI Integration labels Nov 2, 2020
@nigthknight nigthknight self-assigned this Nov 2, 2020
@J12934
Copy link
Member

J12934 commented Nov 2, 2020

I dont think the cli should handle the install steps.
These are already pretty straight forward using helm, creating a custom cli for it seems like a big overhead.

The creating / starting scans seems like a more important usecase to me, as the starting of scans can currently be quite cumbersome, as it requires a scan manifest in the localfiles system. Having a "simple cli" with a "scan" command e.g. scbctl scan nmap scanme.nmap.org would be pretty cool.

@Weltraumschaf
Copy link
Member

We have a convenience script for installation though.

@J12934 J12934 changed the title secureCodeBox CLI secureCodeBox CLI (scbctl) Mar 21, 2023
@Freedisch
Copy link
Member

Hello everyone, my name is Thibaut Batale! I'm a final year computer science undergraduate, I'm interested in this project "adding a secureCodeBox CLI" and currently drafting a proposal for it. Just wanted to confirm my thoughts, the main priority commands to build during this term are the create and observe scanners commands. Followed by update and delete scanners commands ...

@J12934
Copy link
Member

J12934 commented Mar 7, 2024

Hi @Freedisch awesome :)

The prioritise are as described in the issue description.

  • create & observe scans
    e.g. scbctl scan amass enum -d example.com to directly create a Scan with a scanType amass and the parameters: ["enum", "-d", "example.com"]. Ideally the cli would also have a paramters to automatically "follow" the scans progress to view the logs of scanner & parser and show a summary of the results.
  • directly trigger new executions of ScheduledScans
    e.g. scbctl trigger --namespace internal-scans daily-network-scan to directly trigger a new Scan for the daily-network-scan Scheduled Scan
  • interact with cascading rules

Deletion of scans i don't think should be handled by a custom cli as they are already possible to do with a single kubectl delete scan command.
Updating scans isn't really that well supported in the SCB either as scans are a one time thing and aren't reexecuted when the definition for them are changed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cli Issues regarding the CLI Integration enhancement New feature or request
Projects
Archived in project
Development

No branches or pull requests

4 participants