Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ForEachScanGraphViolation ¶
func ForEachScanGraphViolation(target results.ScanTarget, descriptors []string, violations []services.Violation, entitledForJas bool, applicabilityRuns []*sarif.Run, securityHandler ParseScanGraphViolationFunc, licenseHandler ParseScanGraphViolationFunc, operationalRiskHandler ParseScanGraphViolationFunc) (watches []string, failBuild bool, err error)
Allows to iterate over the provided SCA violations and call the provided handler for each impacted component/package with a violation to process it.
func WithAllowedLicenses ¶
func WithAllowedLicenses(allowedLicenses []string) policy.PolicyHandlerOption
Types ¶
type DeprecatedViolationGenerator ¶
type DeprecatedViolationGenerator struct {
AllowedLicenses []string
}
func NewDeprecatedViolationGenerator ¶
func NewDeprecatedViolationGenerator() *DeprecatedViolationGenerator
func (*DeprecatedViolationGenerator) GenerateViolations ¶
func (d *DeprecatedViolationGenerator) GenerateViolations(cmdResults *results.SecurityCommandResults) (convertedViolations violationutils.Violations, err error)
GenerateViolations converts the provided cmdResults violations (deprecated flow, SCA from scan graph, JAS from SARIF AM file) to a slice of policy.Violation
func (*DeprecatedViolationGenerator) WithOptions ¶
func (d *DeprecatedViolationGenerator) WithOptions(options ...policy.PolicyHandlerOption) policy.PolicyHandler
type ParseScanGraphViolationFunc ¶
type ParseScanGraphViolationFunc func(violation services.Violation, cves []formats.CveRow, applicabilityStatus jasutils.ApplicabilityStatus, severity severityutils.Severity, impactedPackagesId string, fixedVersion []string, directComponents []formats.ComponentRow, impactPaths [][]formats.ComponentRow) error
Click to show internal directories.
Click to hide internal directories.