Documentation
¶
Overview ¶
Package scanners holds Draugr's built-in scanners, which wrap individual security tools and normalize their output to SARIF.
See docs/ARCHITECTURE.md.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewGitleaks ¶ added in v0.2.0
NewGitleaks returns a Scanner that runs Gitleaks over a checked-out repository to detect leaked secrets (credentials, tokens, keys). It serves the "secrets" control.
func NewTrivy ¶
NewTrivy returns a Scanner that runs Aqua Trivy against container images and returns its native SARIF output. It serves the "images" control.
func NewTrivyFS ¶
NewTrivyFS returns a Scanner that runs Trivy in filesystem mode over a checked-out repository to find dependency vulnerabilities (SCA). It serves the "sca" control. (License findings are not included in Trivy's SARIF output and are tracked separately.)
Types ¶
This section is empty.
Source Files