From 84e73c15f0a32877998864b5e14a742f1fa356d2 Mon Sep 17 00:00:00 2001 From: Pradyot Ranjan <99216956+prady0t@users.noreply.github.com> Date: Thu, 7 Nov 2024 23:52:15 +0530 Subject: [PATCH] [kubearmor]: Initial integration (#12651) Kubearmor is a Runtime Security Enforcement System leveraging LSMs (BPF-LSM, AppArmor). More about KubeArmor [here](https://kubearmor.io/) This PR covers initial integration with some fuzzers. --------- Signed-off-by: prady0t Co-authored-by: Vitor Guidi --- projects/kubearmor/Dockerfile | 20 ++++++++++++++++++++ projects/kubearmor/build.sh | 19 +++++++++++++++++++ projects/kubearmor/project.yaml | 12 ++++++++++++ 3 files changed, 51 insertions(+) create mode 100644 projects/kubearmor/Dockerfile create mode 100644 projects/kubearmor/build.sh create mode 100644 projects/kubearmor/project.yaml diff --git a/projects/kubearmor/Dockerfile b/projects/kubearmor/Dockerfile new file mode 100644 index 000000000000..616c87857284 --- /dev/null +++ b/projects/kubearmor/Dockerfile @@ -0,0 +1,20 @@ +# Copyright 2024 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ +FROM gcr.io/oss-fuzz-base/base-builder-go +ENV FUZZING_LANGUAGE=go +RUN git clone https://github.com/kubearmor/KubeArmor +COPY build.sh $SRC/ +WORKDIR $SRC/KubeArmor/KubeArmor diff --git a/projects/kubearmor/build.sh b/projects/kubearmor/build.sh new file mode 100644 index 000000000000..56b846e84c76 --- /dev/null +++ b/projects/kubearmor/build.sh @@ -0,0 +1,19 @@ +#!/bin/bash -eu +# Copyright 2024 Google LLC +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# +################################################################################ + +chmod +x $SRC/KubeArmor/KubeArmor/fuzz/build.sh +$SRC/KubeArmor/KubeArmor/fuzz/build.sh diff --git a/projects/kubearmor/project.yaml b/projects/kubearmor/project.yaml new file mode 100644 index 000000000000..665943bfaae0 --- /dev/null +++ b/projects/kubearmor/project.yaml @@ -0,0 +1,12 @@ +homepage: "https://kubearmor.io/" +main_repo: "https://github.com/kubearmor/KubeArmor" +primary_contact: "kubearmor@accuknox.com" +auto_ccs : + - "barun.acharya@accuknox.com" + - "rudraksh@accuknox.com" + - "ramakant@accuknox.com" +language: go +fuzzing_engines: + - libfuzzer +sanitizers: + - address \ No newline at end of file