GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

binary

package

v0.1.2 Latest Latest Go to latest Published: Jul 29, 2024 License: Apache-2.0 Imports: 12 Imported by: 0

Details

Package binary implements a detector that uses govulncheck to scan for vulns on Go binaries found on the filesystem.

View Source

const (
	// Name is the unique name of this detector.
	Name = "govulncheck/binary"
)

This section is empty.

This section is empty.

type Detector struct {
	OfflineVulnDBPath string
}

Detector is a SCALIBR Detector that uses govulncheck to scan for vulns on Go binaries found on the filesystem.

func (Detector) Name() string

Name of the detector.

func (Detector) RequiredExtractors() []string

RequiredExtractors returns the go binary extractor.

func (d Detector) Scan(ctx context.Context, scanRoot string, ix *inventoryindex.InventoryIndex) ([]*detector.Finding, error)

func (Detector) Version() int

Version of the detector.