Directories
¶
| Path | Synopsis |
|---|---|
|
Package cachedregexp provides a cached version of regexp.MustCompile and regexp.Compile.
|
Package cachedregexp provides a cached version of regexp.MustCompile and regexp.Compile. |
|
Package ci provides utility functions for CI integration.
|
Package ci provides utility functions for CI integration. |
|
clients
|
|
|
clientimpl/licensematcher
Package licensematcher implements a client for matching licenses using the deps.dev API.
|
Package licensematcher implements a client for matching licenses using the deps.dev API. |
|
clientimpl/localmatcher
Package localmatcher implements a vulnerability matcher that uses a local database downloaded from osv.dev's export bucket.
|
Package localmatcher implements a vulnerability matcher that uses a local database downloaded from osv.dev's export bucket. |
|
clientimpl/osvmatcher
Package osvmatcher implements two vulnerability matcher using osv.dev's API.
|
Package osvmatcher implements two vulnerability matcher using osv.dev's API. |
|
clientinterfaces
Package clientinterfaces defines interfaces for external accessors used in osv-scanner.
|
Package clientinterfaces defines interfaces for external accessors used in osv-scanner. |
|
Package cmdlogger provides wrapper for slog logging commands.
|
Package cmdlogger provides wrapper for slog logging commands. |
|
Package config manages the configuration for osv-scanner.
|
Package config manages the configuration for osv-scanner. |
|
Package depsdev contains constants and mappings for the deps.dev API.
|
Package depsdev contains constants and mappings for the deps.dev API. |
|
Package grouper groups vulnerabilities by aliases, then sorts them.
|
Package grouper groups vulnerabilities by aliases, then sorts them. |
|
Package identifiers provides functions for sorting vulnerability identifiers.
|
Package identifiers provides functions for sorting vulnerability identifiers. |
|
Package imodels defines internal models for osv-scanner.
|
Package imodels defines internal models for osv-scanner. |
|
results
Package results defines the data structures for scan results.
|
Package results defines the data structures for scan results. |
|
Package output provides functionality for printing scan results in various formats.
|
Package output provides functionality for printing scan results in various formats. |
|
sbom
Package sbom provides functionality to generate SBOMs from scan results.
|
Package sbom provides functionality to generate SBOMs from scan results. |
|
Package reporter provides functionality for reporting scan results in various formats.
|
Package reporter provides functionality for reporting scan results in various formats. |
|
scalibrenricher
|
|
|
govulncheck/source
Package source provides an enricher that uses govulncheck to scan Go source code.
|
Package source provides an enricher that uses govulncheck to scan Go source code. |
|
scalibrextract
|
|
|
filesystem/vendored
Package vendored provides an extractor for vendored C/C++ code.
|
Package vendored provides an extractor for vendored C/C++ code. |
|
language/javascript/nodemodules
Package nodemodules provides an extractor for node_modules directories by reading the .package-lock.json file.
|
Package nodemodules provides an extractor for node_modules directories by reading the .package-lock.json file. |
|
language/osv/osvscannerjson
Package osvscannerjson extracts osv-scanner's json output.
|
Package osvscannerjson extracts osv-scanner's json output. |
|
vcs/gitcommitdirect
Package gitcommitdirect provides a dummy extractor that returns a preset list of commits
|
Package gitcommitdirect provides a dummy extractor that returns a preset list of commits |
|
vcs/gitrepo
Package gitrepo provides an extractor for git repositories and submodules.
|
Package gitrepo provides an extractor for git repositories and submodules. |
|
Package scalibrplugin provides functions related to resolving scalibr plugins
|
Package scalibrplugin provides functions related to resolving scalibr plugins |
|
Package sourceanalysis provides functionality for performing source analysis on code.
|
Package sourceanalysis provides functionality for performing source analysis on code. |
|
govulncheck
Package govulncheck provides data structures for govulncheck results.
|
Package govulncheck provides data structures for govulncheck results. |
|
Package spdx provides functionality for parsing and evaluating SPDX license expressions.
|
Package spdx provides functionality for parsing and evaluating SPDX license expressions. |
|
Package testlogger provides a slog handler which can handle t.Parallel() tests while being a global logging handler, redirecting it to the correct underlying logger for each test thread.
|
Package testlogger provides a slog handler which can handle t.Parallel() tests while being a global logging handler, redirecting it to the correct underlying logger for each test thread. |
|
Package testutility provides utility functions for tests.
|
Package testutility provides utility functions for tests. |
|
thirdparty
|
|
|
xml
Package xml implements a simple XML 1.0 parser that understands XML name spaces.
|
Package xml implements a simple XML 1.0 parser that understands XML name spaces. |
|
Package url provides functionality for converting file paths to file URLs.
|
Package url provides functionality for converting file paths to file URLs. |
|
utility
|
|
|
depgroup
Package depgroups provides functionality for working with dependency groups.
|
Package depgroups provides functionality for working with dependency groups. |
|
purl
Package purl provides functionality for working with PURLs.
|
Package purl provides functionality for working with PURLs. |
|
results
Package results provides utility functions for working with scan results.
|
Package results provides utility functions for working with scan results. |
|
semverlike
Package semverlike provides functionality to parse and compare version strings that are similar to semantic versioning, but with more flexibility.
|
Package semverlike provides functionality to parse and compare version strings that are similar to semantic versioning, but with more flexibility. |
|
severity
Package severity provides functionality for calculating vulnerability severity.
|
Package severity provides functionality for calculating vulnerability severity. |
|
vulns
Package vulns provides utility functions for working with vulnerabilities.
|
Package vulns provides utility functions for working with vulnerabilities. |
|
Package version stores the version of osv-scanner.
|
Package version stores the version of osv-scanner. |
Click to show internal directories.
Click to hide internal directories.