Documentation
¶
Index ¶
- Constants
- Variables
- func ApplicabilityRuleIdToCve(sarifRuleId string) string
- func ApplicabilityStatusToImpactAnalysisState(status ApplicabilityStatus) *cyclonedx.ImpactAnalysisState
- func ConvertApplicableToScore(applicability string) int
- func CveToApplicabilityRuleId(cveId string) string
- type ApplicabilityStatus
- type JasScanType
- type TokenValidationStatus
Constants ¶
View Source
const ( ApplicabilityRuleIdPrefix = "applic_" ApplicabilitySarifPropertyKey = "applicability" DynamicTokenValidationMinXrayVersion = "3.101.0" TokenValidationStatusForNonTokens = "Not a token" )
View Source
const SastFingerprintKey = "significant_full_path"
Variables ¶
View Source
var ExposureJasScanTypes = []JasScanType{Secrets, Services, IaC}
exposureJasScanTypes are JAS categories that Xray reports via ExposureDetails (EXP-*). Search order for type detection; extend by appending.
View Source
var TokenValidationOrder = map[string]int{
"Active": 1,
"Unsupported": 2,
"Unavailable": 3,
"Inactive": 4,
"Not a token": 5,
"": 6,
}
Functions ¶
func ApplicabilityStatusToImpactAnalysisState ¶ added in v1.20.0
func ApplicabilityStatusToImpactAnalysisState(status ApplicabilityStatus) *cyclonedx.ImpactAnalysisState
func ConvertApplicableToScore ¶ added in v1.6.0
Types ¶
type ApplicabilityStatus ¶
type ApplicabilityStatus string
const ( Applicable ApplicabilityStatus = "Applicable" NotApplicable ApplicabilityStatus = "Not Applicable" ApplicabilityUndetermined ApplicabilityStatus = "Undetermined" NotCovered ApplicabilityStatus = "Not Covered" MissingContext ApplicabilityStatus = "Missing Context" NotScanned ApplicabilityStatus = "" )
func ConvertToApplicabilityStatus ¶
func ConvertToApplicabilityStatus(status string) ApplicabilityStatus
func (ApplicabilityStatus) String ¶
func (as ApplicabilityStatus) String() string
func (ApplicabilityStatus) ToString ¶
func (as ApplicabilityStatus) ToString(pretty bool) string
type JasScanType ¶
type JasScanType string
const ( Applicability JasScanType = "Applicability" Secrets JasScanType = "Secrets" IaC JasScanType = "IaC" Sast JasScanType = "Sast" Services JasScanType = "Services" MaliciousCode JasScanType = "MaliciousCode" )
func GetJasScanTypes ¶ added in v1.12.0
func GetJasScanTypes() []JasScanType
func SubScanTypeToJasScanType ¶ added in v1.12.0
func SubScanTypeToJasScanType(subScanType utils.SubScanType) JasScanType
func (JasScanType) String ¶
func (jst JasScanType) String() string
type TokenValidationStatus ¶ added in v1.10.0
type TokenValidationStatus string
const ( Active TokenValidationStatus = "Active" Inactive TokenValidationStatus = "Inactive" Unsupported TokenValidationStatus = "Unsupported" NotAToken TokenValidationStatus = TokenValidationStatusForNonTokens )
func (TokenValidationStatus) String ¶ added in v1.10.0
func (tvs TokenValidationStatus) String() string
func (TokenValidationStatus) ToString ¶ added in v1.10.0
func (tvs TokenValidationStatus) ToString() string
Source Files
Click to show internal directories.
Click to hide internal directories.