Modified profile processor to detect dynamic open

kubescape · Sep 12, 2024 · f199c1d · f199c1d
1 parent 16084c1
commit f199c1d
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/pkg/registry/file/applicationprofile_processor.go b/pkg/registry/file/applicationprofile_processor.go
@@ -54,11 +54,24 @@ func (a ApplicationProfileProcessor) PreSave(object runtime.Object) error {
 }
 
 func deflateApplicationProfileContainer(container softwarecomposition.ApplicationProfileContainer) softwarecomposition.ApplicationProfileContainer {
+	opens := deflateStringer(container.Opens)
+
+	opens, err := dynamicpathdetector.AnalyzeOpens(opens, dynamicpathdetector.NewPathAnalyzer(OpenDynamicThreshold))
+	if err != nil {
+		logger.L().Warning("failed to analyze opens", loggerhelpers.Error(err))
+		opens = deflateStringer(container.Opens)
+	}
+
+	if opens == nil {
+		opens = []softwarecomposition.OpenCalls{}
+	}
+
 	endpoints, err := dynamicpathdetector.AnalyzeEndpoints(&container.Endpoints, dynamicpathdetector.NewPathAnalyzer(100))
 	if err != nil {
 		logger.L().Warning("failed to analyze endpoints", loggerhelpers.Error(err))
 		endpoints = container.Endpoints
 	}
+
 	return softwarecomposition.ApplicationProfileContainer{
 		Name:           container.Name,
 		Capabilities:   mapset.Sorted(mapset.NewThreadUnsafeSet(container.Capabilities...)),