mirror of
https://github.com/kubeshark/kubeshark.git
synced 2025-08-27 12:58:59 +00:00
2ad4838cf5
* Run `go generate tls_tapper.go` * Add `golang_uprobes.c` * Add Golang hooks and offsets * Add `golangConnection` struct and implement `pollGolangReadWrite` method * Upgrade `github.com/cilium/ebpf` version to `v0.8.1` * Fix the linter error * Move map related stuff to `maps.h` and run `go generate tls_tapper.go` * Remove unused parameter * Add an environment variable to test Golang locally * Replace `Libssl` occurrences with `Ssllib` for consistency * Fix exe path finding * Temporarily disable OpenSSL * Fix the mixed offsets and dissection preparation * Change the read symbol from `net/http.(*persistConn).Read` to `crypto/tls.(*Conn).Read` * Remove `len` and `cap` fields * Fix the indent * Fix the read data address * Make `golang_dial_writes` key `__u64` and include the PID * Fix the read data address one more time * Temporarily disable the PCAP capture * Add a uprobe for `net/http.(*gzipReader).Read` to read chunked HTTP response body * Cancel `golang_crypto_tls_read_uprobe` if it's a gzip read * Make hash map names more meaningful * Pass the connection address from `write` to `gzip` through a common address between `gzip` and `dial` * Fix the probed line number links * Add `golangReader` struct and implement its `Read` method * Have a single counter pair and request response matcher per Golang connection * Add `MIZU_GLOBAL_GOLANG_PATH` environment variable * `NULL` terminate the bytes with `unix.ByteSliceToString` * Temporarily reject the gzip chunks * Add malformed TODOs * Revert "`NULL` terminate the bytes with `unix.ByteSliceToString`" This reverts commit7ee7ef7e44. * Bring back `len` and `cap` fields * Set `len` and `cap` in `golang_net_http_gzipreader_read_uprobe` as well * Remove two `TODO`s * Fix the `key_gzip` offsets * Compress if it's gzip chunk (probably wrong!) * Revert "Compress if it's gzip chunk (probably wrong!)" This reverts commit094a7c3da4. * Remove `golang_net_http_gzipreader_read_uprobe` * Read constant 4KiB * Use constant read length * Get the correct len of bytes (saw the second entry) * Set all buffer sizes to `CHUNK_SIZE` * Remove a `TODO` * Revert "Temporarily disable the PCAP capture" This reverts commita2da15ef2d. * Update `golang_crypto_tls_read_uprobe` * Set the `reader` field of `tlsStream` to fix a `nil pointer dereference` error * Don't export any fields of `golangConnection` * Close the reader when we drop the connection * Add a tracepoint for `sys_enter_close` to detect socket closes * Rename `socket` struct to `golang_socket` * Call `should_tap` in Golang uprobes * Add `log_error` calls * Revert "Temporarily disable OpenSSL" This reverts commitf54d9a453f. * Fix linter * Revert "Revert "Temporarily disable OpenSSL"" This reverts commit2433d867af. * Change `golang_read_writes` map type from `BPF_RINGBUF` to `BPF_PERF_OUTPUT` * Rename `golang_read_write` to `golang_event` * Define an error * Add comments * Revert "Revert "Revert "Temporarily disable OpenSSL""" This reverts commite5a1de9c71. * Fix `pollGolang` * Revert "Revert "Revert "Revert "Temporarily disable OpenSSL"""" This reverts commit6e1bd5d4f3. * Fix `panic: send on closed channel` * Revert "Revert "Revert "Revert "Revert "Temporarily disable OpenSSL""""" This reverts commit57d0584655. * Use `findLibraryByPid` * Revert "Revert "Revert "Revert "Revert "Revert "Temporarily disable OpenSSL"""""" This reverts commit46f3d290b0. * Revert "Revert "Revert "Revert "Revert "Revert "Revert "Temporarily disable OpenSSL""""""" This reverts commit775c833c06. * Log tapping Golang * Fix `Poll` * Refactor `golang_net_http_dialconn_uprobe` * Remove an excess error check * Fix `can only use path@version syntax with 'go get' and 'go install' in module-aware mode` error in `tap/tlstapper/bpf-builder/build.sh` * Unify Golang and OpenSSL under a single perf event buffer and `tls_chunk` struct * Generate `tlsTapperChunkType` type (enum) as well * Use kernel page size for the `sys_closes` perf buffer * Fix the linter error * Fix `MIZU_GLOBAL_GOLANG_PID` environment variable's functionality * Rely on tracepoints for file descriptor retrieval in Golang implementation * Remove the unnecessary changes * Move common functions into `common.c` * Declare `lookup_ssl_info` function to reduce duplication * Fix linter * Add comments and TODOs * Remove `MIZU_GLOBAL_GOLANG_PATH` environment variable * Update the object files * Fix indentation * Update object files * Add `go_abi_internal.h` * Fix `lookup_ssl_info` * Convert indentation to spaces * Add header guard comment * Add more comments * Find the `ret` instructions using Capstone Engine and `uprobe` the `return` statements * Implement `get_fd_from_tcp_conn` function * Separate SSL contexts to OpenSSL and Go * Move `get_count_bytes` from `common.c` to `openssl_uprobes.c` * Rename everything contains Golang to Go * Reduce duplication in `go_uprobes.c` * Update the comments * Install Capstone in CI and Docker native builds * Update `devops/install-capstone.sh` * Add Capstone to AArch64 cross-compilation target * Fix some of the issues on ARM64 * Delete the map element in `_ex_urpobe` * Remove an unsued `LOG_` macro * Rename `aquynh` to `capstone-engine` * Add comment * Revert "Fix some of the issues on ARM64" This reverts commit0b3eceddf4. * Revert "Revert "Fix some of the issues on ARM64"" This reverts commit681534ada1. * Update object files * Remove unnecessary return * Increase timeout * #run_acceptance_tests * #run_acceptance_tests * Fix the `arm64v8` sourced builds * #run_acceptance_tests
203 lines
5.9 KiB
YAML
203 lines
5.9 KiB
YAML
name: Static code analysis
|
|
|
|
on:
|
|
pull_request:
|
|
branches:
|
|
- 'develop'
|
|
- 'main'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
go-lint:
|
|
name: Go lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 2
|
|
|
|
- uses: actions/setup-go@v2
|
|
with:
|
|
go-version: '^1.17'
|
|
|
|
- name: Install dependencies
|
|
run: |
|
|
sudo apt update
|
|
sudo apt install -y libpcap-dev
|
|
./devops/install-capstone.sh
|
|
|
|
- name: Check Agent modified files
|
|
id: agent_modified_files
|
|
run: devops/check_modified_files.sh agent/
|
|
|
|
- name: Go lint - agent
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.agent_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: agent
|
|
args: --timeout=10m
|
|
|
|
- name: Check shared modified files
|
|
id: shared_modified_files
|
|
run: devops/check_modified_files.sh shared/
|
|
|
|
- name: Go lint - shared
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.shared_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: shared
|
|
args: --timeout=10m
|
|
|
|
- name: Check tap modified files
|
|
id: tap_modified_files
|
|
run: devops/check_modified_files.sh tap/
|
|
|
|
- name: Go lint - tap
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.tap_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: tap
|
|
args: --timeout=10m
|
|
|
|
- name: Check cli modified files
|
|
id: cli_modified_files
|
|
run: devops/check_modified_files.sh cli/
|
|
|
|
- name: Go lint - CLI
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.cli_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: cli
|
|
args: --timeout=10m
|
|
|
|
- name: Check acceptanceTests modified files
|
|
id: acceptanceTests_modified_files
|
|
run: devops/check_modified_files.sh acceptanceTests/
|
|
|
|
- name: Go lint - acceptanceTests
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.acceptanceTests_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: acceptanceTests
|
|
args: --timeout=10m
|
|
|
|
- name: Check tap/api modified files
|
|
id: tap_api_modified_files
|
|
run: devops/check_modified_files.sh tap/api/
|
|
|
|
- name: Go lint - tap/api
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.tap_api_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: tap/api
|
|
|
|
- name: Check tap/extensions/amqp modified files
|
|
id: tap_amqp_modified_files
|
|
run: devops/check_modified_files.sh tap/extensions/amqp/
|
|
|
|
- name: Go lint - tap/extensions/amqp
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.tap_amqp_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: tap/extensions/amqp
|
|
|
|
- name: Check tap/extensions/http modified files
|
|
id: tap_http_modified_files
|
|
run: devops/check_modified_files.sh tap/extensions/http/
|
|
|
|
- name: Go lint - tap/extensions/http
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.tap_http_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: tap/extensions/http
|
|
|
|
- name: Check tap/extensions/kafka modified files
|
|
id: tap_kafka_modified_files
|
|
run: devops/check_modified_files.sh tap/extensions/kafka/
|
|
|
|
- name: Go lint - tap/extensions/kafka
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.tap_kafka_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: tap/extensions/kafka
|
|
|
|
- name: Check tap/extensions/redis modified files
|
|
id: tap_redis_modified_files
|
|
run: devops/check_modified_files.sh tap/extensions/redis/
|
|
|
|
- name: Go lint - tap/extensions/redis
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.tap_redis_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: tap/extensions/redis
|
|
|
|
- name: Check logger modified files
|
|
id: logger_modified_files
|
|
run: devops/check_modified_files.sh logger/
|
|
|
|
- name: Go lint - logger
|
|
uses: golangci/golangci-lint-action@v2
|
|
if: steps.logger_modified_files.outputs.matched == 'true'
|
|
with:
|
|
version: latest
|
|
working-directory: logger
|
|
|
|
es-lint:
|
|
name: ES lint
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 2
|
|
|
|
- uses: actions/setup-node@v2
|
|
with:
|
|
node-version: 16
|
|
|
|
- name: Check modified UI files
|
|
id: ui_modified_files
|
|
run: devops/check_modified_files.sh ui/
|
|
|
|
- name: ESLint prerequisites ui
|
|
if: steps.ui_modified_files.outputs.matched == 'true'
|
|
run: |
|
|
sudo npm install -g eslint
|
|
cd ui
|
|
npm run prestart
|
|
npm i
|
|
|
|
- name: ESLint ui
|
|
if: steps.ui_modified_files.outputs.matched == 'true'
|
|
run: |
|
|
cd ui
|
|
npm run eslint
|
|
|
|
- name: Check modified ui-common files
|
|
id: ui_common_modified_files
|
|
run: devops/check_modified_files.sh ui-common/
|
|
|
|
- name: ESLint prerequisites ui-common
|
|
if: steps.ui_common_modified_files.outputs.matched == 'true'
|
|
run: |
|
|
sudo npm install -g eslint
|
|
cd ui-common
|
|
npm i
|
|
|
|
- name: ESLint ui-common
|
|
if: steps.ui_common_modified_files.outputs.matched == 'true'
|
|
run: |
|
|
cd ui-common
|
|
npm run eslint
|