GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

mixlock

package

v0.1.8 Latest Latest Go to latest Published: Apr 7, 2025 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Package mixlock extracts erlang mix.lock files.

View Source

const (
	// Name is the unique name of this extractor.
	Name = "erlang/mixlock"
)

This section is empty.

func New() filesystem.Extractor

New returns a new instance of this Extractor.

type Extractor struct{}

Extractor extracts erlang mix.lock files.

func (e Extractor) Ecosystem(i *extractor.Inventory) string

Ecosystem returns the OSV Ecosystem of the software extracted by this extractor.

func (e Extractor) Extract(ctx context.Context, input *filesystem.ScanInput) ([]*extractor.Inventory, error)

Extract extracts packages from Erlang mix.lock files passed through the scan input.

func (e Extractor) FileRequired(api filesystem.FileAPI) bool

FileRequired returns true if the specified file is a mix.lock file.

func (e Extractor) Name() string

Name of the extractor

func (e Extractor) Requirements() *plugin.Capabilities

Requirements of the extractor

func (e Extractor) ToPURL(i *extractor.Inventory) *purl.PackageURL

ToPURL converts an inventory created by this extractor into a PURL using mixlockutils.

func (e Extractor) Version() int

Version of the extractor

Path	Synopsis
mixlockutils Package mixlockutils provides common functions for parsing Mix.lock lockfiles.	Package mixlockutils provides common functions for parsing Mix.lock lockfiles.