GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

homebrew

package

v0.1.3 Latest Latest Go to latest Published: Sep 20, 2024 License: Apache-2.0 Imports: 8 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/google/osv-scalibr

Links

Open Source Insights

Documentation ¶

Overview ¶

Package homebrew extracts package information from OSX homebrew INSTALL_RECEIPT.json files.

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type BrewPath ¶

type BrewPath struct {
	AppName    string
	AppVersion string
	AppFile    string
}

BrewPath struct holds homebrew package information from homebrew package path. ../${appClass}/${appName}/${version}/${appFile} e.g. ../Caskroom/firefox/1.1/firefox.wrapper.sh or ../Cellar/tree/1.1/INSTALL_RECEIPT.json

func SplitPath ¶

func SplitPath(path string) *BrewPath

SplitPath takes the package path and splits it into its recognised struct components

type Extractor ¶

type Extractor struct{}

Extractor extracts software details from a OSX Homebrew package path.

func (Extractor) Ecosystem ¶

func (Extractor) Ecosystem(i *extractor.Inventory) (string, error)

Ecosystem returns the OSV Ecosystem of the software extracted by this extractor.

func (Extractor) Extract ¶

func (e Extractor) Extract(ctx context.Context, input *filesystem.ScanInput) ([]*extractor.Inventory, error)

Extract parses the recognised Homebrew file path and returns information about the installed package.

func (Extractor) FileRequired ¶

func (e Extractor) FileRequired(path string, fileinfo fs.FileInfo) bool

FileRequired returns true if the specified file path matches the homebrew path.

func (Extractor) Name ¶

func (e Extractor) Name() string

Name of the extractor.

func (Extractor) Requirements ¶

func (e Extractor) Requirements() *plugin.Capabilities

Requirements of the extractor.

func (Extractor) ToCPEs ¶

func (e Extractor) ToCPEs(i *extractor.Inventory) ([]string, error)

ToCPEs is not applicable as this extractor does not infer CPEs from the Inventory.

func (Extractor) ToPURL ¶

func (e Extractor) ToPURL(i *extractor.Inventory) (*purl.PackageURL, error)

ToPURL converts an inventory created by this extractor into a PURL.

func (Extractor) Version ¶

func (e Extractor) Version() int

Version of the extractor.

Source Files ¶

View all Source files

extractor.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL