65 lines
3.8 KiB
JSON
65 lines
3.8 KiB
JSON
 
|
{
|
||
|
|
"title": "CVE-Übersicht (Trivy)",
|
||
|
|
"uid": "cve-overview",
|
||
|
|
"tags": ["security", "cve", "gitops-47"],
|
||
|
|
"timezone": "browser",
|
||
|
|
"schemaVersion": 39,
|
||
|
|
"refresh": "5m",
|
||
|
|
"time": { "from": "now-30d", "to": "now" },
|
||
|
|
"panels": [
|
||
|
|
{
|
||
|
|
"type": "stat", "title": "Offene CRITICAL", "id": 1,
|
||
|
|
"gridPos": { "x": 0, "y": 0, "w": 4, "h": 4 },
|
||
|
|
"fieldConfig": { "defaults": { "color": { "mode": "thresholds" }, "thresholds": { "mode": "absolute", "steps": [ { "color": "green", "value": null }, { "color": "red", "value": 1 } ] } }, "overrides": [] },
|
||
|
|
"targets": [ { "expr": "sum(trivy_vuln_count{severity=\"CRITICAL\"}) or vector(0)", "instant": true, "refId": "A" } ]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "stat", "title": "Offene HIGH", "id": 2,
|
||
|
|
"gridPos": { "x": 4, "y": 0, "w": 4, "h": 4 },
|
||
|
|
"fieldConfig": { "defaults": { "color": { "mode": "thresholds" }, "thresholds": { "mode": "absolute", "steps": [ { "color": "green", "value": null }, { "color": "orange", "value": 1 } ] } }, "overrides": [] },
|
||
|
|
"targets": [ { "expr": "sum(trivy_vuln_count{severity=\"HIGH\"}) or vector(0)", "instant": true, "refId": "A" } ]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "stat", "title": "MEDIUM/LOW (Summe)", "id": 3,
|
||
|
|
"gridPos": { "x": 8, "y": 0, "w": 4, "h": 4 },
|
||
|
|
"targets": [ { "expr": "sum(trivy_vuln_count{severity=~\"MEDIUM|LOW\"}) or vector(0)", "instant": true, "refId": "A" } ]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "stat", "title": "Ältester Scan (Stunden)", "id": 4,
|
||
|
|
"gridPos": { "x": 12, "y": 0, "w": 4, "h": 4 },
|
||
|
|
"fieldConfig": { "defaults": { "unit": "h", "color": { "mode": "thresholds" }, "thresholds": { "mode": "absolute", "steps": [ { "color": "green", "value": null }, { "color": "red", "value": 48 } ] } }, "overrides": [] },
|
||
|
|
"targets": [ { "expr": "(time() - min(trivy_last_scan_timestamp)) / 3600", "instant": true, "refId": "A" } ]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "table", "title": "Offene CVEs (HIGH/CRITICAL) — CVE · Ort · Typ · Paket · Fix · seit", "id": 5,
|
||
|
|
"gridPos": { "x": 0, "y": 4, "w": 24, "h": 12 },
|
||
|
|
"targets": [
|
||
|
|
{ "expr": "trivy_vuln_info", "instant": true, "format": "table", "refId": "A" },
|
||
|
|
{ "expr": "trivy_vuln_first_seen_timestamp * 1000", "instant": true, "format": "table", "refId": "B" }
|
||
|
|
],
|
||
|
|
"transformations": [
|
||
|
|
{ "id": "merge", "options": {} },
|
||
|
|
{ "id": "organize", "options": {
|
||
|
|
"excludeByName": { "Time": true, "__name__": true, "job": true, "instance": true, "Value #A": true },
|
||
|
|
"renameByName": { "cve": "CVE", "severity": "Severity", "host": "Ort (Host)", "target_type": "Typ", "target": "Target", "pkg": "Paket", "installed": "Installiert", "fixed_version": "Fix-Version", "Value #B": "Erstmals gesehen" }
|
||
|
|
} }
|
||
|
|
],
|
||
|
|
"fieldConfig": { "defaults": {}, "overrides": [
|
||
|
|
{ "matcher": { "id": "byName", "options": "Erstmals gesehen" }, "properties": [ { "id": "unit", "value": "dateTimeAsIso" } ] },
|
||
|
|
{ "matcher": { "id": "byName", "options": "CVE" }, "properties": [ { "id": "links", "value": [ { "title": "NVD (Mitigation/Details)", "targetBlank": true, "url": "https://nvd.nist.gov/vuln/detail/${__value.text}" } ] } ] }
|
||
|
|
] }
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "state-timeline", "title": "Zeitstrahl: offene HIGH/CRITICAL je Target", "id": 6,
|
||
|
|
"gridPos": { "x": 0, "y": 16, "w": 24, "h": 8 },
|
||
|
|
"targets": [ { "expr": "count by (target) (trivy_vuln_info)", "legendFormat": "{{target}}", "refId": "A" } ],
|
||
|
|
"fieldConfig": { "defaults": { "custom": { "fillOpacity": 70 } }, "overrides": [] }
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"type": "timeseries", "title": "Funde je Severity über Zeit", "id": 7,
|
||
|
|
"gridPos": { "x": 0, "y": 24, "w": 24, "h": 8 },
|
||
|
|
"targets": [ { "expr": "sum by (severity) (trivy_vuln_count)", "legendFormat": "{{severity}}", "refId": "A" } ]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|