nginx

func CollectNginxPosture ¶

func CollectNginxPosture(ctx context.Context, services []payload.ServiceEntry, listeners []payload.Listener) *payload.NginxPosture

CollectNginxPosture runs allowlisted nginx -v, -V, and -T when a binary is found. listeners should be the same-scan TCP listener snapshot (may be empty before collect_listeners runs). Returns nil when no nginx binary is present. Omits raw configuration text; denylisted lines are skipped.