GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

inventory

package

v0.2.1 Latest Latest Go to latest Published: May 20, 2025 License: Apache-2.0 Imports: 2 Imported by: 3

Details

Package inventory stores the scan result types SCALIBR can return.

This section is empty.

This section is empty.

This section is empty.

type Inventory struct {
	Packages []*extractor.Package
	Findings []*detector.Finding
}

Inventory stores the artifacts (e.g. software packages, security findings) that a scan found.

func (i *Inventory) Append(other ...Inventory)

Append adds one or more inventories to the current one.

func (i Inventory) IsEmpty() bool

IsEmpty returns true if there are no packages, findings, etc. in this Inventory.