Documentation
¶
Overview ¶
Package controllers holds Draugr's built-in controllers (e.g. images, sast, opensource, dast), each orchestrating scanners for one security control.
See docs/ARCHITECTURE.md.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewSecrets ¶ added in v0.2.0
func NewSecrets() plugin.Controller
NewSecrets returns the secrets controller.
Types ¶
type Images ¶
type Images struct{}
Images is the container-image security control. It plans one Trivy scan per image in a component and aggregates the results.
func (Images) Info ¶
func (Images) Info() plugin.ControllerInfo
Info identifies the controller (component-scoped).
type SCA ¶
type SCA struct{}
SCA is the Software Composition Analysis control: dependency vulnerabilities (and, later, licenses) for a component's source repositories. It plans one scan per repository.
func (SCA) Info ¶
func (SCA) Info() plugin.ControllerInfo
Info identifies the controller (component-scoped).
type Secrets ¶ added in v0.2.0
type Secrets struct{}
Secrets is the secret-detection control: it scans a component's repositories for leaked credentials. Any detected secret is treated as an error — a leaked secret should fail the gate regardless of how the scanner rated it.
func (Secrets) Aggregate ¶ added in v0.2.0
Aggregate merges the scan reports and escalates every finding to error severity — a detected secret is always gate-failing.
func (Secrets) Info ¶ added in v0.2.0
func (Secrets) Info() plugin.ControllerInfo
Info identifies the controller (component-scoped).
Source Files