CSUP is a commandline tool designed to interface into Tenable.io's Container Security toolset for the purposes of uploading docker containers, fetching the image reports, and checking the policy compliance and status of the image tests.
usage: csup [GLOBAL OPTIONS] {upload,report,policy,status} [ACTION OPTIONS]
There are a few methods for installing the csup tool. The first one is to simply download the packaged binaries for both MacOS and Linux. The second method is to install through pip, and is simply a matter of running pip install csup. You could also manually download and install the package directly using pip install . from the resulting folder.
- python-dateutil >= 2.6
- requests >= 2.18
- docker >= 2.6
CSUP is designed to be either run as a standalone tool, or to be embedded as part of the build pipeline.
- TIO_ACCESS_KEY Tenable.io API Access Key
- TIO_SECRET_KEY Tenable.io API Secret Key
- TIO_CS_ADDRESS Tenable.io Container Security Address (default is registry.cloud.tenable.com)
- CS_API Tenable.io Container Security API Path (_default is https://cloud.tenable.com/container-security/api/v1 _)
usage: csup [-h] [--access-key ACCESS] [--secret-key SECRET]
[--consec-path REGISTRY] [--tio-path API]
{upload,report,policy,status} ...
Container Security UPloading and reporting tool (CSUP) is a commandline tool
designed to interface into Tenable.io's Container Security toolset for the
purposes of uploading docker containers, fetching the image reports, and
checking the policy compliance and status of the image tests. The global
arguments must come before the action and inform csup how to communicate to
Container Security.
optional arguments:
-h, --help show this help message and exit
--access-key ACCESS Tenable.io API access key
--secret-key SECRET Tenable.io API secret sey
--consec-path REGISTRY
alternative Tenable.io registry address
--tio-path API alternative Tenable.io URI
valid actions:
{upload,report,policy,status}
additional help available
usage: csup upload [-h] [-t TAG] [-N CONSEC_NAME] [-T CONSEC_TAG] [-r] [-p]
[-c CVSS] [-m] [-P] [--json]
id
The upload action will upload a docker image to Tenable.io Container Security
and then if specified, will wait for the policy status and/or report to
return. If either the policy returns a non-passing status or if any of the
report thresholds have been tripped, csup will return a non-zero status code.
positional arguments:
id container image name or id
optional arguments:
-h, --help show this help message and exit
-t TAG, --tag TAG container image tag
-N CONSEC_NAME, --consec-name CONSEC_NAME
ContainerSecurity repository & image path
-T CONSEC_TAG, --consec-tag CONSEC_TAG
ContainerSecurity image tag
-r, --report output the test results when tests have completed
-p, --policy output the compliance status when tests have completed
--json returns the data as a JSON object instead of formatted
text
--no-color Remove colorization from the output
usage: csup report [-h] [-w] [-c CVSS] [-m] [-P] [--json] id
Retrieve a report for the image ID specified. If any of the thresholds are set
(and then met), then return a non-zero return status code.
positional arguments:
id container image id
optional arguments:
-h, --help show this help message and exit
-w, --wait wait for testing of the image to complete
--json returns the data as a JSON object instead of formatted
text
--no-color Remove colorization from the output
usage: csup policy [-h] [-w] [--json] id
Retrieve the policy status for the image ID specified. If the policy compliance
status is a failure, then return a non-zero status code.
positional arguments:
id container image id
optional arguments:
-h, --help show this help message and exit
-w, --wait wait for testing of the image to complete
--json returns the data as a JSON object instead of formatted text
--no-color Remove colorization from the output
usage: csup status [-h] [--json] id
Get the current job status of the image ID specified.
positional arguments:
id image id
optional arguments:
-h, --help show this help message and exit
--json returns the data as a JSON object instead of formatted text
--no-color Remove colorization from the output