GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

condameta

package

v0.1.8 Latest Latest Go to latest Published: Apr 7, 2025 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/google/osv-scalibr

Links

Open Source Insights

Documentation ¶

Overview ¶

Package condameta extracts Conda package metadata from conda-meta JSON files.

Constants ¶

View Source

const (
	// Name is the unique name of this extractor.
	Name = "python/condameta"
)

Variables ¶

This section is empty.

Functions ¶

func NewDefault ¶ added in v0.1.7

func NewDefault() filesystem.Extractor

NewDefault returns an extractor with the default config settings.

Types ¶

type Config ¶

type Config struct {
	Stats            stats.Collector
	MaxFileSizeBytes int64
}

Config is the configuration for the Extractor.

func DefaultConfig ¶

func DefaultConfig() Config

DefaultConfig returns the default configuration for the extractor.

type Extractor ¶

type Extractor struct {
	// contains filtered or unexported fields
}

Extractor extracts packages from Conda package metadata.

func New ¶

func New(cfg Config) *Extractor

New returns a Conda package metadata extractor.

func (Extractor) Config ¶

func (e Extractor) Config() Config

Config returns the configuration of the extractor.

func (Extractor) Ecosystem ¶

func (Extractor) Ecosystem(i *extractor.Inventory) string

Ecosystem returns the OSV ecosystem for Conda packages.

func (Extractor) Extract ¶

func (e Extractor) Extract(ctx context.Context, input *filesystem.ScanInput) ([]*extractor.Inventory, error)

Extract parses and extracts dependency data from Conda metadata files.

func (Extractor) FileRequired ¶

func (e Extractor) FileRequired(api filesystem.FileAPI) bool

FileRequired checks if the file is a valid Conda metadata JSON file.

func (Extractor) Name ¶

func (e Extractor) Name() string

Name of the extractor.

func (Extractor) Requirements ¶

func (e Extractor) Requirements() *plugin.Capabilities

Requirements of the extractor.

func (Extractor) ToPURL ¶

func (e Extractor) ToPURL(i *extractor.Inventory) *purl.PackageURL

ToPURL converts an inventory created by this extractor into a PURL.

func (Extractor) Version ¶

func (e Extractor) Version() int

Version of the extractor.

Source Files ¶

View all Source files

condameta.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL