detector

func Detect ¶

func Detect(rs []models.ScanResult, dir string) ([]models.ScanResult, error)

Detect vulns and fill CVE detailed information

func DetectCpeURIsCves ¶

func DetectCpeURIsCves(r *models.ScanResult, cpes []vuls2.CPE, sesh *vuls2.Session) error

DetectCpeURIsCves detects CVEs of given CPE-URIs — the complete CPE detection pipeline. Its name and its place in the call order are kept from the master era: it runs after DetectPkgCves (which handles OS-package / KB detection).

All CPE detection sources (NVD with cpematch-expanded criteria, VulnCheck NVD++, JVN, Fortinet, Cisco and PaloAlto) are detected by vuls2.

sesh is the vuls2 db session to query (see vuls2.Session), created with vuls2.NewSession and owned (Closed) by the caller.

func DetectLibsCves ¶

func DetectLibsCves(r *models.ScanResult, trivyOpts config.TrivyOpts, logOpts logging.LogOpts, noProgress bool) (err error)

DetectLibsCves fills LibraryScanner information

func DetectPkgCves ¶

func DetectPkgCves(r *models.ScanResult, sesh *vuls2.Session) error

DetectPkgCves detects OS-package / Microsoft-KB CVEs via the vuls2 library (family-gated), and applies the FixState / ListenPortStats post-processing. macOS has no package security database, so its installed applications and OS are translated to Apple CPEs (vuls2.MacOSCPEs) and detected through the CPE path here. Its name and its place in the call order are kept from the master era: it runs first and DetectCpeURIsCves second, so OS-package / KB detection happens here while user-supplied CPE-URI detection is DetectCpeURIsCves' job.

sesh is the vuls2 db session to query (see vuls2.Session), created with vuls2.NewSession and owned (Closed) by the caller; it is shared with this server's CPE detection and enrichment so all three reuse one warm db connection.

func DetectWordPressCves ¶

func DetectWordPressCves(r *models.ScanResult, wpCnf config.WpScanConf) error

DetectWordPressCves detects CVEs of WordPress

func ListValidJSONDirs ¶

func ListValidJSONDirs(resultsDir string) (dirs []string, err error)

ListValidJSONDirs returns valid json directory as array Returned array is sorted so that recent directories are at the head