consolidation

package
v0.15.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jun 28, 2026 License: Apache-2.0 Imports: 6 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func BuildPackageRegistry

func BuildPackageRegistry(consolidated sdk.ConsolidatedGraph) *sdk.PackageRegistry

BuildPackageRegistry seeds a PURL-keyed package registry from a consolidated graph. Each dependency node contributes one registry package (deduplicated by PURL); detection-time license facts stashed on the node by SBOM-backed detectors are lifted into the registry package. Matchers later enrich these packages in place. Dependency nodes are linked to their package via PackageRef.

func ConsolidateGraphs

func ConsolidateGraphs(results []sdk.DetectionResult) (sdk.ConsolidatedGraph, error)

ConsolidateGraphs merges resolved subproject graph containers while preserving manifest roots.

func ManifestDedupPriority

func ManifestDedupPriority(origin sdk.DetectorOrigin) int

ManifestDedupPriority returns the precedence rank used when multiple detectors resolve the same manifest. Lower values win.

Priority order: 0. External detectors 1. Core detectors (Bomly-native implementations) 2. Bundled third-party detectors (e.g. Syft fallback)

Types

This section is empty.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL