results

Feb 23, 2026

Changes in this version

+ func CdxEvidencesToLocations(component cyclonedx.Component) (evidences []formats.Location)

+ func CdxEvidencesToPreferredLocation(component cyclonedx.Component) (location *formats.Location)

+ func FormalTechOrCdxCompType(cdxCompType string, pretty bool) string

+ func GetBestLocation(component formats.ComponentRow) string

Jan 21, 2026

Changes in this version

+ func ExtractComponentDirectComponentsInBOM(bom *cyclonedx.BOM, component cyclonedx.Component, ...) (directComponents []formats.ComponentRow)

Dec 31, 2025

Changes in this version

+ const CmdStepMaliciousCode

+ const MaxUniqueAppearances

type JasScanResults

+ MaliciousScanResults []*sarif.Run

type ResultsStatus

+ MaliciousScanStatusCode *int

Nov 25, 2025

Changes in this version

+ const CmdStepContextualAnalysis

+ const CmdStepIaC

+ const CmdStepSast

+ const CmdStepSbom

+ const CmdStepSca

+ const CmdStepSecrets

+ const CmdStepViolations

+ func CollectRuns(runs ...[]*sarif.Run) []*sarif.Run

+ func ConvertJfrogResearchInformation(extendedInfo *services.ExtendedInformation) *formats.JfrogResearchInformation

+ func GetBestScaEvidenceMatch(target ScanTarget, descriptors []string) string

+ func GetFixedVersions(affectedComponent cyclonedx.Affects) (fixedVersions *[]cyclonedx.AffectedVersions)

+ func GetXrayService() *cyclonedx.Service

+ type ResultsMetaData struct

+ CmdType utils.CommandType

+ EntitledForJas bool

+ GeneralError error

+ GitContext *xscServices.XscGitInfoContext

+ MultiScanId string

+ ResultContext ResultContext

+ ResultsPlatformUrl string

+ SecretValidation bool

+ StartTime time.Time

+ XrayVersion string

+ XscVersion string

+ type ResultsStatus struct

+ ContextualAnalysisStatusCode *int

+ IacScanStatusCode *int

+ SastScanStatusCode *int

+ SbomScanStatusCode *int

+ ScaScanStatusCode *int

+ SecretsScanStatusCode *int

+ ViolationsStatusCode *int

+ func (status *ResultsStatus) IsScanFailed(step SecurityCommandStep) bool

+ func (status *ResultsStatus) UpdateStatus(step SecurityCommandStep, statusCode *int)

type SecurityCommandResults

+ Violations *violationutils.Violations

+ ViolationsStatusCode *int

+ func (r *SecurityCommandResults) GetStatusCodes() ResultsStatus

+ func (r *SecurityCommandResults) SetResultsPlatformUrl(resultsPlatformUrl string) *SecurityCommandResults

+ func (r *SecurityCommandResults) SetViolations(statusCode int, violations violationutils.Violations) *SecurityCommandResults

+ type SecurityCommandStep string

type TargetResults

+ ResultsStatus ResultsStatus

+ func (sr *TargetResults) AddApplicabilityScanResults(exitCode int, runs ...*sarif.Run)

+ func (sr *TargetResults) AddJasScanResults(scanType jasutils.JasScanType, vulnerabilitiesRuns []*sarif.Run, ...)

Nov 4, 2025

Changes in this version

+ func GetFinalApplicabilityStatus(applicabilityStatuses []jasutils.ApplicabilityStatus) jasutils.ApplicabilityStatus

Sep 16, 2025

Changes in this version

type SecurityCommandResults

+ GitContext *xscServices.XscGitInfoContext

+ func (r *SecurityCommandResults) SetGitContext(gitContext *xscServices.XscGitInfoContext) *SecurityCommandResults

Jul 10, 2025

Changes in this version

+ const ApplicabilityEvidencePropertyTemplate

+ const ApplicabilityEvidenceReasonPropertyTemplate

+ const ApplicabilityStatusPropertyName

+ const LocationIdTemplate

+ func AddFileIssueAffects(issue *cyclonedx.Vulnerability, fileComponent cyclonedx.Component, ...)

+ func AttachApplicabilityToVulnerability(destination *cyclonedx.BOM, vulnerability *cyclonedx.Vulnerability, ...)

+ func BomToFlatTree(sbom *cyclonedx.BOM, convertToXrayCompId bool) (flatTree *xrayUtils.GraphNode)

+ func BomToFullCompTree(sbom *cyclonedx.BOM, isBuildInfoXray bool) (fullDependencyTrees []*xrayUtils.BinaryGraphNode)

+ func BomToFullTree(sbom *cyclonedx.BOM, convertToXrayCompId bool) (fullDependencyTrees []*xrayUtils.GraphNode)

+ func BomToTree(sbom *cyclonedx.BOM) (flatTree *xrayUtils.GraphNode, fullDependencyTrees []*xrayUtils.GraphNode)

+ func BuildImpactPath(affectedComponent cyclonedx.Component, components []cyclonedx.Component, ...) (impactPathsRows [][]formats.ComponentRow)

+ func CdxEvidenceToLocation(evidence *cyclonedx.Evidence) (location *formats.Location)

+ func CdxToFixedVersions(affectedVersions *[]cyclonedx.AffectedVersions) (fixedVersion []string)

+ func CdxVulnToCveRows(vulnerability cyclonedx.Vulnerability, applicability *formats.Applicability) (cveRows []formats.CveRow)

+ func CreateCveRatings(cve formats.CveRow) (ratings []cyclonedx.VulnerabilityRating)

+ func CreateScaComponentFromBinaryNode(node *xrayUtils.BinaryGraphNode) (component cyclonedx.Component)

+ func CreateScaComponentFromXrayCompId(xrayImpactedPackageId string, properties ...cyclonedx.Property) (component cyclonedx.Component)

+ func DepsTreeToSbom(trees ...*xrayUtils.GraphNode) (components *[]cyclonedx.Component, dependencies *[]cyclonedx.Dependency)

+ func ExtractCdxDependenciesCves(bom *cyclonedx.BOM) (directCves []string, indirectCves []string)

+ func ExtractCvesFromScanResponse(xrayScanResults []services.ScanResponse, directDependencies []string) (directCves []string, indirectCves []string)

+ func ExtractIssuesInfoForCdx(issueId string, cves []formats.CveRow, severity severityutils.Severity, ...) (cveIds []string, statuses []*formats.Applicability, cwe [][]string, ...)

+ func ForEachJasIssue(runs []*sarif.Run, entitledForJas bool, handler ParseJasIssueFunc) error

+ func ForEachLicense(target ScanTarget, licenses []services.License, handler ParseLicenseFunc) error

+ func ForEachSbomComponent(bom *cyclonedx.BOM, handler ParseSbomComponentFunc) (err error)

+ func ForEachScaBomVulnerability(target ScanTarget, bom *cyclonedx.BOM, entitledForJas bool, ...) error

+ func ForEachScanGraphViolation(target ScanTarget, violations []services.Violation, entitledForJas bool, ...) (watches []string, failBuild bool, err error)

+ func ForEachScanGraphVulnerability(target ScanTarget, vulnerabilities []services.Vulnerability, ...) error

+ func GetCveApplicabilityFieldAndFilterDisqualify(cveId string, applicabilityScanResults []*sarif.Run, ...) (applicability *formats.Applicability)

+ func GetDirectDependenciesAsComponentRows(component cyclonedx.Component, components []cyclonedx.Component, ...) (directComponents []formats.ComponentRow)

+ func GetJasResultApplicability(result *sarif.Result) *formats.Applicability

+ func GetOrCreateFileComponent(destination *cyclonedx.BOM, filePathOrUri string) (component *cyclonedx.Component)

+ func GetOrCreateScaComponent(destination *cyclonedx.BOM, xrayCompId string) (libComponent *cyclonedx.Component)

+ func GetTargetDirectDependencies(targetResult *TargetResults, flatTree, convertToXrayCompId bool) (slice []string)

+ func IsMultiProject(sbom *cyclonedx.BOM) bool

+ func ScanResponseToSbom(destination *cyclonedx.BOM, scanResponse services.ScanResponse) (err error)

+ func ShouldUpdateStatus(currentStatus, newStatus *int) bool

+ type ParseBomScaVulnerabilityFunc func(vulnerability cyclonedx.Vulnerability, component cyclonedx.Component, ...) error

+ type ParseJasIssueFunc func(run *sarif.Run, rule *sarif.ReportingDescriptor, ...) error

+ type ParseLicenseFunc func(license services.License, impactedPackagesId string, ...) error

+ func ParseScanGraphLicenseToSbom(destination *cyclonedx.BOM) ParseLicenseFunc

+ type ParseSbomComponentFunc func(component cyclonedx.Component, relatedDependencies *cyclonedx.Dependency, ...) error

+ type ParseScanGraphViolationFunc func(violation services.Violation, cves []formats.CveRow, ...) error

+ type ParseScanGraphVulnerabilityFunc func(vulnerability services.Vulnerability, cves []formats.CveRow, ...) error

+ func ParseScanGraphVulnerabilityToSbom(destination *cyclonedx.BOM) ParseScanGraphVulnerabilityFunc

type ScaScanResults

+ DeprecatedXrayResults []ScanResult[services.ScanResponse]

+ Sbom *cyclonedx.BOM

+ ScanStatusCode int

+ Violations []services.Violation

+ func (ssr *ScaScanResults) AddViolations(violations ...services.Violation) *ScaScanResults

type TargetResults

+ AppsConfigModule *jfrogappsconfig.Module

+ func SearchTargetResultsByRelativePath(relativeTarget string, resultsToCompare *SecurityCommandResults) (targetResults *TargetResults)

+ func (sr *TargetResults) EnrichedSbomScanResults(errorCode int, enrichedSbom *cyclonedx.BOM, violations ...services.Violation) *ScaScanResults

+ func (sr *TargetResults) GetDescriptors() []string

+ func (sr *TargetResults) ScaScanResults(errorCode int, responses ...services.ScanResponse) *ScaScanResults

May 27, 2025

Changes in this version

type SbomEntry

+ XrayType string

type SecurityCommandResults

+ func (r *SecurityCommandResults) GetCommonParentPath() string

+ func (r *SecurityCommandResults) GetTargetResults(target string) *TargetResults

type TargetResults

+ JasPackageScanType jasutils.JasPackageScanType

+ Sbom Sbom

+ func SearchTargetResultsByPath(target string, resultsToCompare *SecurityCommandResults) (targetResults *TargetResults)

+ func (sr *TargetResults) SetSbom(sbom Sbom) *TargetResults

Mar 20, 2025

Changes in this version

+ func IdToName(input string) string

Feb 26, 2025

Changes in this version

+ func SortSbom(components []SbomEntry)

type ResultContext

+ IncludeSbom bool

+ type Sbom struct

+ Components []SbomEntry

+ func CompTreeToSbom(graph *xrayCmdUtils.BinaryGraphNode) (sbom Sbom)

+ func DepTreeToSbom(fullDepTrees []*xrayCmdUtils.GraphNode) (sbom Sbom)

+ type SbomEntry struct

+ Component string

+ Direct bool

+ Type string

+ Version string

+ func (se SbomEntry) String() string

type ScaScanResults

+ TargetSbom Sbom

type SecurityCommandResults

+ func (r *SecurityCommandResults) IncludeSbom() bool

Jan 7, 2025

Changes in this version

+ func ApplyHandlerToJasIssues(runs []*sarif.Run, entitledForJas bool, handler ParseJasFunc) error

+ func ApplyHandlerToLicenses(target ScanTarget, licenses []services.License, handler ParseLicensesFunc) error

+ func ApplyHandlerToScaViolations(target ScanTarget, violations []services.Violation, entitledForJas bool, ...) (watches []string, failBuild bool, err error)

+ func ApplyHandlerToScaVulnerabilities(target ScanTarget, vulnerabilities []services.Vulnerability, ...) error

+ func ConvertPolicesToString(policies []services.Policy) []string

+ func GetIssueTechnology(responseTechnology string, targetTech techutils.Technology) techutils.Technology

+ func ScanResultsToRuns(results []ScanResult[[]*sarif.Run]) (runs []*sarif.Run)

+ type JasScanResults struct

+ IacScanResults []ScanResult[[]*sarif.Run]

+ SastScanResults []ScanResult[[]*sarif.Run]

+ SecretsScanResults []ScanResult[[]*sarif.Run]

type JasScansResults

+ JasViolations JasScanResults

+ JasVulnerabilities JasScanResults

+ func (jsr *JasScansResults) AddApplicabilityScanResults(exitCode int, runs ...*sarif.Run)

+ func (jsr *JasScansResults) AddJasScanResults(scanType jasutils.JasScanType, vulnerabilitiesRuns []*sarif.Run, ...)

+ func (jsr *JasScansResults) GetApplicabilityScanResults() (results []*sarif.Run)

+ func (jsr *JasScansResults) GetViolationsResults(scanType jasutils.JasScanType) (results []*sarif.Run)

+ func (jsr *JasScansResults) GetVulnerabilitiesResults(scanType jasutils.JasScanType) (results []*sarif.Run)

+ type ResultContext struct

+ GitRepoHttpsCloneUrl string

+ IncludeLicenses bool

+ IncludeVulnerabilities bool

+ PlatformWatches *xrayApi.ResourcesWatchesBody

+ ProjectKey string

+ RepoPath string

+ Watches []string

+ func (rc *ResultContext) HasViolationContext() bool

+ type ScanResult struct

+ Scan T

+ StatusCode int

+ func (sr *ScanResult[T]) IsScanFailed() bool

type SecurityCommandResults

+ ResultContext ResultContext

+ func (r *SecurityCommandResults) GetTargets() (targets []ScanTarget)

+ func (r *SecurityCommandResults) HasJasScansResults(scanType jasutils.JasScanType) bool

+ func (r *SecurityCommandResults) HasViolationContext() bool

+ func (r *SecurityCommandResults) IncludesLicenses() bool

+ func (r *SecurityCommandResults) IncludesVulnerabilities() bool

+ func (r *SecurityCommandResults) SetResultsContext(context ResultContext) *SecurityCommandResults

type TargetResults

+ func (sr *TargetResults) HasJasScansResults(scanType jasutils.JasScanType) bool

Nov 27, 2024

Changes in this version

type SecurityCommandResults

+ StartTime time.Time

+ XscVersion string

+ func (r *SecurityCommandResults) SetStartTime(startTime time.Time) *SecurityCommandResults

+ func (r *SecurityCommandResults) SetXscVersion(xscVersion string) *SecurityCommandResults

Nov 4, 2024

Changes in this version

type SecurityCommandResults

+ GeneralError error

+ func (r *SecurityCommandResults) AddGeneralError(err error) *SecurityCommandResults

+ func (r *SecurityCommandResults) SetEntitledForJas(entitledForJas bool) *SecurityCommandResults

+ func (r *SecurityCommandResults) SetSecretValidation(secretValidation bool) *SecurityCommandResults

+ func (r *SecurityCommandResults) SetXrayVersion(xrayVersion string) *SecurityCommandResults

type TargetResults

+ func (sr *TargetResults) AddTargetError(err error, allowPartialResults bool) error

Oct 13, 2024

Changes in this version

+ const DirectDependencyIndex

+ const DirectDependencyPathLength

+ const RootIndex

+ var ErrNoTargetConvertor = fmt.Errorf("ParseNewTargetResults must be called before starting to parse issues")

+ var ErrResetConvertor = fmt.Errorf("reset must be called before parsing new scan results metadata")

+ func AppendUniqueImpactPaths(target [][]services.ImpactPathNode, source [][]services.ImpactPathNode, ...) [][]services.ImpactPathNode

+ func AppendUniqueImpactPathsForMultipleRoots(target [][]services.ImpactPathNode, source [][]services.ImpactPathNode) [][]services.ImpactPathNode

+ func CheckIfFailBuild(results []services.ScanResponse) bool

+ func ConvertCvesWithApplicability(cves []services.Cve, entitledForJas bool, applicabilityRuns []*sarif.Run, ...) (convertedCves []formats.CveRow, ...)

+ func FindMaxCVEScore(severity severityutils.Severity, ...) (string, error)

+ func GetApplicableCveStatus(entitledForJas bool, applicabilityScanResults []*sarif.Run, ...) jasutils.ApplicabilityStatus

+ func GetCveApplicabilityField(cveId string, applicabilityScanResults []*sarif.Run, ...) *formats.Applicability

+ func GetCveScore(severity severityutils.Severity, ...) (float32, error)

+ func GetDependencyId(depName, version string) string

+ func GetIssueIdentifier(cvesRow []formats.CveRow, issueId string, delimiter string) string

+ func GetResultPropertyMetadata(result *sarif.Result) string

+ func GetResultPropertyTokenValidation(result *sarif.Result) string

+ func GetRuleUndeterminedReason(rule *sarif.ReportingDescriptor) string

+ func GetScaIssueId(depName, version, issueId string) string

+ func GetUniqueKey(vulnerableDependency, vulnerableVersion, xrayID string, fixVersionExist bool) string

+ func GetViolatedLicenses(allowedLicenses []string, licenses []services.License) (violatedLicenses []services.Violation)

+ func NewFailBuildError() error

+ func PrepareJasIssues(runs []*sarif.Run, entitledForJas bool, handler ParseJasFunc) error

+ func PrepareLicenses(target ScanTarget, licenses []services.License, handler ParseLicensesFunc) error

+ func PrepareScaViolations(target ScanTarget, violations []services.Violation, entitledForJas bool, ...) (watches []string, failBuild bool, err error)

+ func PrepareScaVulnerabilities(target ScanTarget, vulnerabilities []services.Vulnerability, ...) error

+ func SplitComponents(target string, impactedPackages map[string]services.Component) (...)

+ type JasScansResults struct

+ ApplicabilityScanResults []*sarif.Run

+ IacScanResults []*sarif.Run

+ SastScanResults []*sarif.Run

+ SecretsScanResults []*sarif.Run

+ func (jsr *JasScansResults) GetResults(scanType jasutils.JasScanType) (results []*sarif.Run)

+ func (jsr *JasScansResults) HasFindings() bool

+ func (jsr *JasScansResults) HasFindingsByType(scanType jasutils.JasScanType) bool

+ func (jsr *JasScansResults) HasInformation() bool

+ func (jsr *JasScansResults) HasInformationByType(scanType jasutils.JasScanType) bool

+ type ParseJasFunc func(run *sarif.Run, rule *sarif.ReportingDescriptor, ...) error

+ type ParseLicensesFunc func(license services.License, ...) error

+ type ParseScaViolationFunc func(violation services.Violation, cves []formats.CveRow, ...) error

+ type ParseScaVulnerabilityFunc func(vulnerability services.Vulnerability, cves []formats.CveRow, ...) error

+ type ScaScanResults struct

+ Descriptors []string

+ IsMultipleRootProject *bool

+ XrayResults []services.ScanResponse

+ func (ssr *ScaScanResults) HasFindings() bool

+ func (ssr *ScaScanResults) HasInformation() bool

+ type ScanTarget struct

+ Name string

+ Target string

+ Technology techutils.Technology

+ func (st ScanTarget) Copy(newTarget string) ScanTarget

+ func (st ScanTarget) String() (str string)

+ type SecurityCommandResults struct

+ CmdType utils.CommandType

+ EntitledForJas bool

+ Error error

+ MultiScanId string

+ SecretValidation bool

+ Targets []*TargetResults

+ XrayVersion string

+ func NewCommandResults(cmdType utils.CommandType, xrayVersion string, ...) *SecurityCommandResults

+ func (r *SecurityCommandResults) GetErrors() (err error)

+ func (r *SecurityCommandResults) GetJasScansResults(scanType jasutils.JasScanType) (results []*sarif.Run)

+ func (r *SecurityCommandResults) GetScaScansXrayResults() (results []services.ScanResponse)

+ func (r *SecurityCommandResults) GetTargetsPaths() (paths []string)

+ func (r *SecurityCommandResults) GetTechnologies(additionalTechs ...techutils.Technology) []techutils.Technology

+ func (r *SecurityCommandResults) HasFindings() bool

+ func (r *SecurityCommandResults) HasInformation() bool

+ func (r *SecurityCommandResults) HasMultipleTargets() bool

+ func (r *SecurityCommandResults) NewScanResults(target ScanTarget) *TargetResults

+ func (r *SecurityCommandResults) SetMultiScanId(multiScanId string) *SecurityCommandResults

+ type TargetResults struct

+ Errors []error

+ JasResults *JasScansResults

+ ScaResults *ScaScanResults

+ func (sr *TargetResults) AddError(err error)

+ func (sr *TargetResults) GetErrors() (err error)

+ func (sr *TargetResults) GetJasScansResults(scanType jasutils.JasScanType) (results []*sarif.Run)

+ func (sr *TargetResults) GetScaScansXrayResults() (results []services.ScanResponse)

+ func (sr *TargetResults) GetScanIds() []string

+ func (sr *TargetResults) GetTechnologies() []techutils.Technology

+ func (sr *TargetResults) GetWatches() []string

+ func (sr *TargetResults) HasFindings() bool

+ func (sr *TargetResults) HasInformation() bool

+ func (sr *TargetResults) NewScaScanResults(responses ...services.ScanResponse) *ScaScanResults

+ func (sr *TargetResults) SetDescriptors(descriptors ...string) *TargetResults