Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func RegisterLegacyCheckIDAlias ¶ added in v0.10.0
RegisterLegacyCheckIDAlias records that newID was previously known as one or more oldIDs, so shouldAddScan keeps matching the old IDs after a check is renamed or split. Intended to be called from a check package's init().
Types ¶
type OperationScan ¶ added in v0.4.6
type Scan ¶
type Scan struct {
*ScanOptions
Operations operation.Operations
OperationsScans []OperationScan
// contains filtered or unexported fields
}
func NewScan ¶ added in v0.3.0
func NewScan(operations operation.Operations, opts *ScanOptions) (*Scan, error)
func (*Scan) AddCheck ¶ added in v0.10.0
AddCheck registers check with the scan. def supplies the CVSS/CWE/OWASP/ CAPEC classification used to build a reportx.Finding when the check reports a vulnerability; pass nil for checks that never do (e.g. pure data-provider checks other checks depend on).
check is always registered with the harnessx engine, even when it doesn't match --scans/--exclude-scans: Execute lets the engine decide the final run set via RunOption, which keeps a check's dependencies intact even if they wouldn't otherwise match the filter (see runOptions). OperationsScans — used for progress reporting — still only counts checks that match, plus internal (data-provider) checks, which are never user-selectable.
func (*Scan) GetOperationsScans ¶ added in v0.4.6
func (s *Scan) GetOperationsScans() []OperationScan
type ScanOptions ¶ added in v0.8.1
type ScanOptions struct {
IncludeScans []string
ExcludeScans []string
// MinSeverity, when set, restricts the scan to checks whose static
// CVSS score (from their CheckDef) is >= *MinSeverity — checks that
// can never reach the severity threshold don't run at all. A
// dependency of a kept check still runs regardless of its own score.
MinSeverity *float64
// Title names the report (e.g. "cURL Scan", "OpenAPI Scan"). Defaults to
// "Scan" when empty.
Title string
// ToolVersion is recorded in the report metadata.
ToolVersion string
}
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
broken_authentication
|
|
|
jwt/jwtcheck
Package jwtcheck holds what vulnapi's JWT delegation to jwtop needs that jwtop itself has no concept of: deciding whether a resource's security scheme is a JWT bearer token worth scanning, and pulling the *operation.Operation back out of a harnessx.Resource.
|
Package jwtcheck holds what vulnapi's JWT delegation to jwtop needs that jwtop itself has no concept of: deciding whether a resource's security scheme is a JWT bearer token worth scanning, and pulling the *operation.Operation back out of a harnessx.Resource. |
|
graphql
|
|
|
misconfiguration
|
|