lyz-code / clinv Goto Github PK
View Code? Open in Web Editor NEWDevSecOps command line asset inventory tool
License: GNU General Public License v3.0
DevSecOps command line asset inventory tool
License: GNU General Public License v3.0
As autoscaling groups kill and spawn EC2 instances, when monitoring at EC2 level, false positives in the unassigned report keep on showing.
Create the Autoscaling Group resource so that you assign it to the Services instead of the EC2 instances directly.
Will need to update the unassigned report.
As there are security groups associated to elasticsearch, the unused report shows those security groups as unused when they are not.
Create a report to list only the resources that are in state == active
Right now the print
method is inside the resource objects. It made sense when developing new resources.
The problem is that as those resources don't have access to the inventory (as they should not), there is no way of using related resources information.
For example, an EC2 instance may have some security groups associated to it. So there is no way to print the security group name instead of the ID.
Another example, If a security group references another in the security rules, there is no way to substitute the referenced id for the name.
Dependabot couldn't parse the pyproject.toml found at /pyproject.toml
.
The error Dependabot encountered was:
Dependabot::DependencyFileNotParseable
Create the Clinv Exporter to monitor clinv reports from prometheus.
It could be done with a flask server or with the script exporter.
Hi all, right now I'm not using this project and don't have the time to maintain it, I plan to start using it again in the future so I'll probably restore the maintenance mode. This means:
Install
and Update
CI pipelines).If you want to see the project thrive please evaluate becoming a maintainer and help me answering issues, pull requests and develop the program.
This announcement is not meant to prevent you from opening issues! Even though I'm not maintaining the project right now, it's always good to do requests. Maybe others in the community can help you :).
If you need to get my attention you can reach me here
Would like to be able to run clinv list projects
, is this possible?
As there are security groups associated to elasticache resources, the unused report shows those security groups as unused when they are not.
As there are security groups associated to network interfaces, the unused
report shows those security groups as unused when they are not.
Add a Security Group object to the inventory, so as to make sure that:
Make documentation more user friendly, perhaps with a mkdocs repo.
Returned an error, shouldn't return anything right?
Integrate prometheus information as a data source so we can discover the monitor status of the different resources.
Probably we'll have to attack the prometheus API, and link prometheus resources with clinv ones throught labels in the service monitors
A TypeError
is rised when there are IAM Groups that don't have any attached policy
Create a report to monitor that the desired security groups for EC2 and RDS meet the actual ones as well as the security rules in the security groups.
In the security groups is done by at creation copying the rule definitions in the user_data.yaml
, assuming that the user is going to review them and accept them as the desired state.
We'll have to add the same info in the EC2 and RDS user data, adopt the sync
method from the SecurityGroup class and create a sync
report that will output which ones aren't synchronized
We use YAML files to store the data. That works when the infrastructure is small, but as we add more resources, the files starts to grow.
It would be interesting to decouple the storage code from the business model. This would mean:
Simplify the installation method to just pip3 install https://github.com/lyz-code/clinv/
Create a report to see which resources are being monitored, which aren't and which don't give enough data to know if they are
As there are security groups associated to load balancers, the unused
report shows those security groups as unused when they are not.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.