local

package
v1.24.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 17, 2025 License: Apache-2.0 Imports: 16 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func ForEachScanGraphViolation

func ForEachScanGraphViolation(target results.ScanTarget, descriptors []string, violations []services.Violation, entitledForJas bool, applicabilityRuns []*sarif.Run, securityHandler ParseScanGraphViolationFunc, licenseHandler ParseScanGraphViolationFunc, operationalRiskHandler ParseScanGraphViolationFunc) (watches []string, failBuild bool, err error)

Allows to iterate over the provided SCA violations and call the provided handler for each impacted component/package with a violation to process it.

func WithAllowedLicenses

func WithAllowedLicenses(allowedLicenses []string) policy.PolicyHandlerOption

Types

type DeprecatedViolationGenerator

type DeprecatedViolationGenerator struct {
	AllowedLicenses []string
}

func NewDeprecatedViolationGenerator

func NewDeprecatedViolationGenerator() *DeprecatedViolationGenerator

func (*DeprecatedViolationGenerator) GenerateViolations

func (d *DeprecatedViolationGenerator) GenerateViolations(cmdResults *results.SecurityCommandResults) (convertedViolations violationutils.Violations, err error)

GenerateViolations converts the provided cmdResults violations (deprecated flow, SCA from scan graph, JAS from SARIF AM file) to a slice of policy.Violation

func (*DeprecatedViolationGenerator) WithOptions

type ParseScanGraphViolationFunc

type ParseScanGraphViolationFunc func(violation services.Violation, cves []formats.CveRow, applicabilityStatus jasutils.ApplicabilityStatus, severity severityutils.Severity, impactedPackagesId string, fixedVersion []string, directComponents []formats.ComponentRow, impactPaths [][]formats.ComponentRow) error

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL