Documentation
¶
Overview ¶
Package sbom holds sbom related files
Package sbom holds sbom related files ¶
Package sbom holds sbom related files
Index ¶
- Constants
- type Data
- type Event
- type PackagesReport
- type Resolver
- func (r *Resolver) Delete(id containerutils.ContainerID)
- func (r *Resolver) GetWorkload(id containerutils.ContainerID) *SBOM
- func (r *Resolver) OnCGroupDeletedEvent(cgroup *cgroupModel.CacheEntry)
- func (r *Resolver) OnWorkloadSelectorResolvedEvent(workload *tags.Workload)
- func (r *Resolver) RefreshSBOM(containerID containerutils.ContainerID) error
- func (r *Resolver) ResolvePackage(pc *model.ProcessContext, file *model.FileEvent) *sbomtypes.Package
- func (r *Resolver) SendStats() error
- func (r *Resolver) SetPolicyGeneratorCallback(cb func(workloadKey string, containerID containerutils.ContainerID, ...))
- func (r *Resolver) Start(ctx context.Context) error
- type SBOM
Constants ¶
const ( LastAccessProperty = "LastSeenRunning" HasSetSuidBitProperty = "HasSetSuidBit" RunningAsRootProperty = "RunningAsRoot" )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Data ¶
type Data struct {
// contains filtered or unexported fields
}
Data use the keep the result of a scan of a same workload across multiple container
type PackagesReport ¶
type PackagesReport struct {
// contains filtered or unexported fields
}
PackagesReport wraps package data and implements the sbom.Report interface
func NewPackagesReport ¶
func NewPackagesReport(packages []sbomtypes.PackageWithInstalledFiles, containerID containerutils.ContainerID) *PackagesReport
NewPackagesReport creates a new PackagesReport from a slice of packages
func (*PackagesReport) ID ¶
func (r *PackagesReport) ID() string
ID returns a unique identifier for this report
func (*PackagesReport) ToCycloneDX ¶
func (r *PackagesReport) ToCycloneDX() *cyclonedx_v1_4.Bom
ToCycloneDX converts the packages to a CycloneDX BOM with LastAccess properties
type Resolver ¶
type Resolver struct {
*utils.Notifier[Event, *sbompkg.ScanResult]
// contains filtered or unexported fields
}
Resolver is the Software Bill-Of-material resolver
func NewSBOMResolver ¶
func NewSBOMResolver(c *config.RuntimeSecurityConfig, statsdClient statsd.ClientInterface, wmeta workloadmeta.Component) (*Resolver, error)
NewSBOMResolver returns a new instance of Resolver
func (*Resolver) Delete ¶
func (r *Resolver) Delete(id containerutils.ContainerID)
Delete removes the SBOM of the provided cgroup id
func (*Resolver) GetWorkload ¶
func (r *Resolver) GetWorkload(id containerutils.ContainerID) *SBOM
GetWorkload returns the sbom of a provided ID
func (*Resolver) OnCGroupDeletedEvent ¶
func (r *Resolver) OnCGroupDeletedEvent(cgroup *cgroupModel.CacheEntry)
OnCGroupDeletedEvent is used to handle a CGroupDeleted event
func (*Resolver) OnWorkloadSelectorResolvedEvent ¶
OnWorkloadSelectorResolvedEvent is used to handle the creation of a new cgroup with its resolved tags
func (*Resolver) RefreshSBOM ¶
func (r *Resolver) RefreshSBOM(containerID containerutils.ContainerID) error
RefreshSBOM regenerates a SBOM for a container
func (*Resolver) ResolvePackage ¶
func (r *Resolver) ResolvePackage(pc *model.ProcessContext, file *model.FileEvent) *sbomtypes.Package
ResolvePackage returns the Package that owns the provided file. Make sure the internal fields of "file" are properly resolved.
func (*Resolver) SetPolicyGeneratorCallback ¶
func (r *Resolver) SetPolicyGeneratorCallback(cb func(workloadKey string, containerID containerutils.ContainerID, policyDef *rules.PolicyDef))
SetPolicyGeneratorCallback sets a callback to be called when an SBOM is computed This callback can be used to generate policies based on the SBOM data
type SBOM ¶
type SBOM struct {
sync.RWMutex
ContainerID containerutils.ContainerID
// contains filtered or unexported fields
}
SBOM defines an SBOM
func NewSBOM ¶
func NewSBOM(id containerutils.ContainerID, cgroup *cgroupModel.CacheEntry, workloadKey workloadKey) *SBOM
NewSBOM returns a new empty instance of SBOM
func (*SBOM) IsComputed ¶
IsComputed returns true if SBOM was successfully generated
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package collectorv2 holds sbom related files
|
Package collectorv2 holds sbom related files |
|
Package types holds types related to sbom
|
Package types holds types related to sbom |