Versions in this module Expand all Collapse all v0 v0.4.1 Mar 27, 2026 v0.4.0 Mar 22, 2026 v0.3.2 Mar 16, 2026 v0.3.1 Mar 13, 2026 v0.3.0 Mar 13, 2026 Changes in this version + func BuildSummary(result *ScanResult, detail string) (tile, body string) + func ConfidenceLabel(c VerifyConfidence) string + func ExtractRegistry(ref string) string + func InferEcosystem(pkg, installed string) string + func NormalizePackageName(pkg, ecosystem string) string + func ResolveDetailLevel(cfg config.SecurityConfig, cliOverride string, policies config.PoliciesConfig) string + func WriteAdvisories(outputDir, imageRef string, vulns []Vulnerability) error + type Advisory struct + Ecosystem string + FixedIn string + ID string + Installed string + Package string + Severity string + Source string + func ReadAdvisories(rootDir string) ([]Advisory, error) + type AdvisoryFile struct + Advisories []Advisory + Generator string + Image string + SchemaVersion int + type CandidateInfo struct + Digest string + ObservedDigest string + ObservedDigestAlt string + Ref string + Stability RefStability + type RefStability string + const StabilityDigest + const StabilityTag + const StabilityTagWithDigest + func ClassifyRefStability(ref string, knownDigest string) RefStability + type ScanConfig struct + Enabled bool + FailOnCritical bool + GrypeEnabled bool + ImageRef string + OutputDir string + SBOMEnabled bool + SectionWriter io.Writer + TrivyEnabled bool + type ScanResult struct + Artifacts []string + Critical int + EngineVersion string + High int + Low int + Medium int + OS string + Partial bool + ScannersFailed []ScannerInfo + ScannersRun []ScannerInfo + Status string + Summary string + Target ScanTarget + Vulnerabilities []Vulnerability + func Scan(ctx context.Context, cfg ScanConfig) (*ScanResult, error) + type ScanTarget struct + Candidates []CandidateInfo + Digest string + DigestMatch *bool + DiscoveredTag string + ExpectedCommit string + ExpectedTags []string + ObservedDigest string + ObservedDigestAlt string + Ref string + SelectionReason string + SigningAttempted bool + Source TargetSource + Stability RefStability + type ScannerInfo struct + Name string + Version string + type TargetSource string + const TargetExplicit + const TargetPositionalArg + const TargetPublishManifest + type VerificationResult struct + ActualTag string + AttestationValid *bool + Confidence VerifyConfidence + DigestMatch *bool + ExpectedDigest string + ExpectedTags []string + Failures []string + IdentityMatched *bool + ObservedConsistent *bool + ProvenanceMatched *bool + ResolvedDigest string + SignatureValid *bool + SigningAttempted bool + TagBindingMatch *bool + func Verify(ctx context.Context, opts VerifyOpts) *VerificationResult + type VerifyConfidence string + const ConfidenceDegraded + const ConfidenceHigh + const ConfidenceNone + type VerifyOpts struct + ActualRef string + ActualTag string + Attestation *build.AttestationRecord + CosignKeyPath string + CredRef string + CredResolver func(string) (string, string) + ExpectedCommit string + ExpectedDigest string + ExpectedTags []string + ObservedDigest string + ObservedDigestAlt string + SigningAttempted bool + type Vulnerability struct + Description string + FixedIn string + ID string + Installed string + Package string + Severity string + Source string
Go to main page