Add type "buildx|event" to ElasticDocuments (#7)

Co-authored-by: Mads Jon Nielsen <mjn@cego.dk>

Author: firecow

model/model.go

@@ -39,6 +39,7 @@ type ElasticDocument struct {
 	Timestamp string `json:"@timestamp"`
 	Message   string `json:"message"`
 	ImageName string `json:"dopetes.image_name"`
+	Type      string `json:"dopetes.type"`
 	EventRaw  string `json:"dopetes.event.raw"`
 }
 

routines/docker_buildx_history.go

@@ -66,6 +66,7 @@ func PushDockerBuildxHistoryToElastic(logger cego.Logger, config *model.DopetesC
 				Timestamp: time.Now().Format(time.RFC3339),
 				Message:   fmt.Sprintf("dopetes detected docker buildx history inspect material URI  %s", imageRef),
 				ImageName: imageRef,
+				Type:      "buildx",
 				EventRaw:  string(out),
 			}
 			data, _ := json.Marshal(document)

routines/docker_events_channel.go

@@ -54,6 +54,7 @@ func StartDockerEventsChannel(ctx context.Context, dockerClient *client.Client,
 					Timestamp: time.Now().Format(time.RFC3339),
 					Message:   "dopetes detected docker pull event for " + imageName,
 					ImageName: imageName,
+					Type:      "event",
 					EventRaw:  string(res),
 				}
 				elasticDocumentChan <- dockerPullEvent
@@ -73,6 +74,7 @@ func StartDockerEventsChannel(ctx context.Context, dockerClient *client.Client,
 					Timestamp: time.Now().Format(time.RFC3339),
 					Message:   fmt.Sprintf("dopetes detected docker create event of type %s for %s", message.Type, imageName),
 					ImageName: imageName,
+					Type:      "event",
 					EventRaw:  string(res),
 				}
 				elasticDocumentChan <- dockerPullEvent