Documentation
¶
Index ¶
Constants ¶
View Source
const ( AdvisoriesSetResolved = "resolved" AdvisoriesSetAll = "all" AdvisoriesSetConcluded = "concluded" )
View Source
const TriageSourceGovulncheck = "govulncheck"
Variables ¶
View Source
var ValidAdvisoriesSets = []string{AdvisoriesSetResolved, AdvisoriesSetAll, AdvisoriesSetConcluded}
Functions ¶
func NewGrypeVulnerabilityMatcher ¶
func NewGrypeVulnerabilityMatcher(datastore store.Store, useCPEs bool) *grype.VulnerabilityMatcher
Types ¶
type Finding ¶
type Finding struct {
Package Package
Vulnerability Vulnerability
TriageAssessments []TriageAssessment
}
Finding represents a vulnerability finding for a single package.
type GoVulnDBIndex ¶
type GoVulnDBIndex struct {
// contains filtered or unexported fields
}
func BuildIndexForGoVulnDB ¶
func BuildIndexForGoVulnDB(ctx context.Context) (*GoVulnDBIndex, error)
BuildIndexForGoVulnDB builds an index of GoVulnDB entries, keyed by aliases (like CVE IDs and GHSA IDs).
func (*GoVulnDBIndex) Get ¶
func (i *GoVulnDBIndex) Get(id string) (GoVulnDBIndexEntry, bool)
Get returns the GoVulnDB index entry for the given ID, or false if it doesn't exist.
type GoVulnDBIndexEntry ¶
type Scanner ¶
type Scanner struct {
// contains filtered or unexported fields
}
func NewScanner ¶
NewScanner initializes the grype DB for reuse across multiple scans.
type TriageAssessment ¶
type TriageAssessment struct {
// Source is the name of the source of the triage assessment, e.g.
// "govulncheck".
Source string
// TruePositive indicates whether the vulnerability is a true positive. A value
// of false indicates that the vulnerability has been assessed to be a false
// positive.
TruePositive bool
// Reason is the explanation of the triage assessment.
Reason string
}
Click to show internal directories.
Click to hide internal directories.