GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

io

package

v0.71.2 Latest Latest Go to latest Published: Jun 19, 2026 License: Apache-2.0 Imports: 23 Imported by: 8

Details

This section is empty.

View Source

var (
	ErrPURLEmpty       = errors.New("purl empty error")
	ErrUnsupportedType = errors.New("unsupported type")
)

This section is empty.

type Decoder struct {
	// contains filtered or unexported fields
}

func NewDecoder(bom *core.BOM) *Decoder

func (m *Decoder) Decode(ctx context.Context, sbom *types.SBOM) error

type Encoder struct {
	// contains filtered or unexported fields
}

func NewEncoder(opts ...EncoderOption) *Encoder

func (e *Encoder) Encode(report types.Report) (*core.BOM, error)

type EncoderOption func(*Encoder)

func ForceRegenerate() EncoderOption

ForceRegenerate forces regeneration of BOM instead of reusing existing one

func WithBOMRef() EncoderOption

WithBOMRef enables BOM-Ref generation for CycloneDX components

func WithParents() EncoderOption

WithParents enables holding parent maps in the BOM structure