Code package scanner

Author: frikky

go.mod

@@ -11,7 +11,7 @@ require (
 	github.com/docker/go-connections v0.5.0
 	github.com/satori/go.uuid v1.2.0
 	github.com/shirou/gopsutil/v3 v3.24.5
-	github.com/shuffle/shuffle-shared v1.2.34
+	github.com/shuffle/shuffle-shared v1.2.37
 	k8s.io/api v0.34.2
 	k8s.io/apimachinery v0.34.2
 )

go.sum

@@ -326,8 +326,8 @@ github.com/shoenig/test v0.6.4 h1:kVTaSd7WLz5WZ2IaoM0RSzRsUD+m8wRR+5qvntpn4LU=
 github.com/shoenig/test v0.6.4/go.mod h1:byHiCGXqrVaflBLAMq/srcZIHynQPQgeyvkvXnjqq0k=
 github.com/shuffle/opensearch-go/v4 v4.0.0 h1:Mh85CD1MwOgXiFFYlzS1llnvdqL3CztRdR1ZT/SLIjU=
 github.com/shuffle/opensearch-go/v4 v4.0.0/go.mod h1:gVLZKQE5khQWMb68XBtgKrhu78oLGL2zHwAGnFMDwC0=
-github.com/shuffle/shuffle-shared v1.2.34 h1:PlXb1Lby2+UVrDkdroqdZT94ZZLjRG67f69mmSwqg1k=
-github.com/shuffle/shuffle-shared v1.2.34/go.mod h1:RSKyexqkGDB+WbboGfWMj1Sfl4e49MI2CvW3pFmirg4=
+github.com/shuffle/shuffle-shared v1.2.37 h1:rpjaYSP4W3pBI64Wx4tOoQsXtp+lYUOQYotFWTynopo=
+github.com/shuffle/shuffle-shared v1.2.37/go.mod h1:RSKyexqkGDB+WbboGfWMj1Sfl4e49MI2CvW3pFmirg4=
 github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=

orborus.go

@@ -2153,6 +2153,7 @@ func getOrborusStats(ctx context.Context, sensorMode shuffle.SensorMode) shuffle
 				}
 
 				newStats.SensorDetails.InstalledSoftware = []shuffle.Software{}
+				newStats.SensorDetails.CodeScanner = []shuffle.ProjectInfo{}
 				return newStats
 			}
 			// If there's an error, we ignore the cache and continue to gather details
@@ -2174,19 +2175,24 @@ func getOrborusStats(ctx context.Context, sensorMode shuffle.SensorMode) shuffle
 		newStats.SensorDetails.ElevatedAccess = shuffle.IsElevated()
 		newStats.SensorDetails.Serial = shuffle.GetProfiler()
 
-		if sensorMode.SoftwareListEnabled {
+		if sensorMode.SoftwareListEnabled == "true" { 
 			// Check cache first before running the command
 			newStats.SensorDetails.InstalledSoftware = shuffle.ListInstalledSoftware()
 		}
 
-		if sensorMode.HdEncryptedCheck {
+		if sensorMode.CodeScannerEnabled == "true" { 
+			newStats.SensorDetails.CodeScanner = shuffle.ListCodeScannerProjects() 
+		}
+
+		if sensorMode.HdEncryptedCheck == "true" { 
 			newStats.SensorDetails.HdEncrypted = fmt.Sprintf("%t", shuffle.IsDiskEncrypted())
 		}
 
-		if sensorMode.ScreenlockCheck {  
+		if sensorMode.ScreenlockCheck == "true" { 
 			newStats.SensorDetails.AutomaticScreenlockEnabled = fmt.Sprintf("%t", shuffle.IsAutomaticScreenlockEnabled())
 		}
 
+
 		if len(sensorMode.LogForwarding) > 0 {
 			newStats.SensorDetails.LogForwarding = fmt.Sprintf("not implemented: %s", sensorMode.LogForwarding)
 		}
@@ -2520,9 +2526,10 @@ func mainLoop() {
 	sensorMode := shuffle.SensorMode{
 		Enabled: os.Getenv("SHUFFLE_AGENT_SENSOR_MODE") == "true",
 
-		SoftwareListEnabled: os.Getenv("SHUFFLE_SOFTWARE_LIST_ENABLED") == "true",
-		HdEncryptedCheck: os.Getenv("SHUFFLE_HD_ENCRYPTED_CHECK") == "true",
-		ScreenlockCheck: os.Getenv("SHUFFLE_SCREENLOCK_CHECK") == "true",
+		SoftwareListEnabled: os.Getenv("SHUFFLE_SOFTWARE_LIST_ENABLED"), 
+		CodeScannerEnabled: os.Getenv("SHUFFLE_CODE_SCANNER_ENABLED"), 
+		HdEncryptedCheck: os.Getenv("SHUFFLE_HD_ENCRYPTED_CHECK"), 
+		ScreenlockCheck: os.Getenv("SHUFFLE_SCREENLOCK_CHECK"), 
 
 		LogForwarding: os.Getenv("SHUFFLE_LOG_FORWARDING"),
 		ResponseActions: os.Getenv("SHUFFLE_RESPONSE_ACTIONS"), 
@@ -2594,6 +2601,20 @@ func mainLoop() {
 
 		}
 
+		// Autoconfig these. They are off if set to false
+		if len(sensorMode.SoftwareListEnabled) == 0 { 
+			sensorMode.SoftwareListEnabled = "true"
+		} 
+		if len(sensorMode.CodeScannerEnabled) == 0 { 
+			sensorMode.CodeScannerEnabled= "true"
+		} 
+		if len(sensorMode.HdEncryptedCheck) == 0 {
+			sensorMode.HdEncryptedCheck = "true"
+		} 
+		if len(sensorMode.ScreenlockCheck) == 0 {
+			sensorMode.ScreenlockCheck = "true"
+		}
+
 		log.Printf("[INFO] Running in sensor/agent mode. Starting the agent.")
 		err := StartAgentSensor(sensorMode)
 		if err != nil {