Directories
¶
| Path | Synopsis |
|---|---|
|
Package coverage builds the disco-vs-upstream type coverage matrix for every registered cloud provider.
|
Package coverage builds the disco-vs-upstream type coverage matrix for every registered cloud provider. |
|
Package managed records disco resource types that are UNCONDITIONALLY provider-managed — created automatically by the cloud and not user-deletable (Azure built-in policy/role definitions, AWS-owned prefix lists, per-(account,region) singleton config rows, ...).
|
Package managed records disco resource types that are UNCONDITIONALLY provider-managed — created automatically by the cloud and not user-deletable (Azure built-in policy/role definitions, AWS-owned prefix lists, per-(account,region) singleton config rows, ...). |
|
Package policy is the Rego policy engine for `disco check`: local-store resources are handed to a prepared Rego query, which binds `data.disco.deny` to a set of finding objects.
|
Package policy is the Rego policy engine for `disco check`: local-store resources are handed to a prepared Rego query, which binds `data.disco.deny` to a set of finding objects. |
|
Package providers hosts the cloud-provider Scanner registry.
|
Package providers hosts the cloud-provider Scanner registry. |
|
all
Package all is the single wiring point pulling cloud providers into the binary.
|
Package all is the single wiring point pulling cloud providers into the binary. |
|
aws
Package aws implements cloud resource discovery for Amazon Web Services.
|
Package aws implements cloud resource discovery for Amazon Web Services. |
|
aws/awsregions
Package awsregions is disco's static list of supported AWS commercial-partition regions.
|
Package awsregions is disco's static list of supported AWS commercial-partition regions. |
|
azure
Package azure implements cloud resource discovery for Microsoft Azure via per-service API calls using the Azure SDK for Go (arm* packages), following the two-phase scan pattern.
|
Package azure implements cloud resource discovery for Microsoft Azure via per-service API calls using the Azure SDK for Go (arm* packages), following the two-phase scan pattern. |
|
azure/azureregions
Package azureregions is disco's static list of Azure ARM public-cloud locations.
|
Package azureregions is disco's static list of Azure ARM public-cloud locations. |
|
gcp
Package gcp implements cloud resource discovery for Google Cloud Platform.
|
Package gcp implements cloud resource discovery for Google Cloud Platform. |
|
gcp/gcpregions
Package gcpregions is disco's static list of supported GCP compute regions.
|
Package gcpregions is disco's static list of supported GCP compute regions. |
|
Package redact applies provider-declared redaction rules to resource AttributesJSON at the store boundary.
|
Package redact applies provider-declared redaction rules to resource AttributesJSON at the store boundary. |
|
Package restype defines the unified per-type Descriptor: one declaration site for everything disco knows about a resource type, replacing the four previously-separate per-type registrations (coverage emit, upstream alias, redaction rules, volatile fields) plus the unconditional managed flag.
|
Package restype defines the unified per-type Descriptor: one declaration site for everything disco knows about a resource type, replacing the four previously-separate per-type registrations (coverage emit, upstream alias, redaction rules, volatile fields) plus the unconditional managed flag. |
|
Package scanrun wraps the orchestration core of `disco scan` so the engine is reusable outside the CLI front end (cmd/scan.go).
|
Package scanrun wraps the orchestration core of `disco scan` so the engine is reusable outside the CLI front end (cmd/scan.go). |
|
Package snapshot defines the disco-snapshot envelope: a manifest carrying tool version, scan IDs, generated-at timestamp, and a SHA-256 of the frozen DB.
|
Package snapshot defines the disco-snapshot envelope: a manifest carrying tool version, scan IDs, generated-at timestamp, and a SHA-256 of the frozen DB. |
|
Package util provides small helper functions shared across provider packages.
|
Package util provides small helper functions shared across provider packages. |
|
Package volatile drops provider-declared volatile fields from resource AttributesJSON at the store boundary, BEFORE the version-comparison in Store.UpsertResources.
|
Package volatile drops provider-declared volatile fields from resource AttributesJSON at the store boundary, BEFORE the version-comparison in Store.UpsertResources. |
Click to show internal directories.
Click to hide internal directories.