Get FalconContainerVulnerability - CrowdStrike/psfalcon GitHub Wiki

Get-FalconContainerVulnerability

SYNOPSIS

Retrieve known vulnerabilities for the provided image

DESCRIPTION

Requires 'Falcon Container CLI: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
OsVersion String Operating system version
Package Object[] Key and value pairs to filter packages. Accepted properties include: 'layerhash', 'layerindex', 'majorversion',
'packagehash', 'packageprovider', 'packagesource', 'product', 'softwarearchitecture', 'status', and 'vendor'.
Application Object[] Key and value pairs to filter application packages. Accepted properties include: 'libraries' and 'type'.

SYNTAX

Get-FalconContainerVulnerability [[-OsVersion] <String>] [[-Package] <Object[]>] [[-Application] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /image-assessment/combined/vulnerability-lookups/v1

falconpy

ReadImageVulnerabilities

USAGE

Request vulnerability results

$Package = @(
    @{
        Vendor = 'Debian MySQL Maintainers <[email protected]>'
        Product = 'mariadb-server-core-10.1'
        MajorVersion = '10.1.26-0+deb9u1'
        SoftwareArchitecture = 'amd64'
        PackageProvider = 'DPKG'
        PackageSource = 'mariadb-10.1 10.126-0+deb9u1'
        Status = 'install ok installed'
        LayerHash = '80f9a8427b1826f014f873dc471b6a89916ff79550bcd1c94aadd78c3f5bbdc7'
        LayerIndex = 1
    }
)
Get-FalconContainerVulnerability -OsVersion 'Debian GNU 9' -Package $Package

2023-11-27: PSFalcon v2.2.6

⚠️ **GitHub.com Fallback** ⚠️