mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
57 lines
1.8 KiB
Python
57 lines
1.8 KiB
Python
#!/usr/bin/env python3
|
|
"""Docker Bench Security Assessment Runner and Parser."""
|
|
|
|
import subprocess
|
|
import json
|
|
import sys
|
|
import re
|
|
|
|
def run_docker_bench():
|
|
"""Run Docker Bench Security and parse results."""
|
|
cmd = [
|
|
"docker", "run", "--rm", "--net", "host", "--pid", "host",
|
|
"--userns", "host", "--cap-add", "audit_control",
|
|
"-v", "/etc:/etc:ro", "-v", "/var/lib:/var/lib:ro",
|
|
"-v", "/var/run/docker.sock:/var/run/docker.sock:ro",
|
|
"docker/docker-bench-security"
|
|
]
|
|
try:
|
|
result = subprocess.run(cmd, capture_output=True, text=True, timeout=300)
|
|
output = result.stdout + result.stderr
|
|
except (subprocess.TimeoutExpired, FileNotFoundError) as e:
|
|
print(f"[!] Failed to run Docker Bench: {e}")
|
|
sys.exit(1)
|
|
|
|
results = {"PASS": [], "FAIL": [], "WARN": [], "INFO": []}
|
|
for line in output.split("\n"):
|
|
for status in ["PASS", "FAIL", "WARN", "INFO"]:
|
|
if f"[{status}]" in line:
|
|
check = line.strip()
|
|
results[status].append(check)
|
|
break
|
|
|
|
print(f"\n{'='*60}")
|
|
print("DOCKER BENCH SECURITY RESULTS")
|
|
print(f"{'='*60}")
|
|
print(f"PASS: {len(results['PASS'])}")
|
|
print(f"FAIL: {len(results['FAIL'])}")
|
|
print(f"WARN: {len(results['WARN'])}")
|
|
print(f"INFO: {len(results['INFO'])}")
|
|
|
|
total = len(results['PASS']) + len(results['FAIL'])
|
|
if total > 0:
|
|
score = (len(results['PASS']) / total) * 100
|
|
print(f"Score: {score:.1f}%")
|
|
|
|
if results["FAIL"]:
|
|
print(f"\nFAILED CHECKS:")
|
|
for f in results["FAIL"]:
|
|
print(f" {f}")
|
|
|
|
with open("docker_bench_results.json", "w") as fh:
|
|
json.dump(results, fh, indent=2)
|
|
print(f"\n[*] Results saved to docker_bench_results.json")
|
|
|
|
if __name__ == "__main__":
|
|
run_docker_bench()
|