Help us shape the future of Go! Take the 2026 Go Developer Survey

technologies

package
v1.41.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 28, 2026 License: Apache-2.0 Imports: 23 Imported by: 0

Documentation

Index

Constants

View Source
const (
	// Visual Studio inner directory.
	DotVsRepoSuffix = ".vs"
)

Variables

View Source
var CurationErrorMsgToUserTemplate = "Failed to retrieve the dependencies tree for the %s project. Please contact your " +
	"Artifactory administrator to verify pass-through for Curation audit is enabled for your project"

Functions

func CreateTestWorkspace

func CreateTestWorkspace(t *testing.T, sourceDir string) (string, func())

func EnsureWindowsExeShim added in v1.41.1

func EnsureWindowsExeShim(t *testing.T, dir, bareName string)

EnsureWindowsExeShim drops a real bareName+".exe" next to a fake bareName+".bat" in dir, so Windows launches it reliably. No-op on other platforms.

func GetMsgToUserForCurationBlock

func GetMsgToUserForCurationBlock(isCurationCmd bool, tech techutils.Technology, cmdOutput string) (msgToUser string)

func GetScaExcludePattern added in v1.29.3

func GetScaExcludePattern(configProfile *xscservices.ConfigProfile, isRecursive bool, exclusions ...string) string

func LogExecutableVersion

func LogExecutableVersion(executable string)

GetExecutableVersion gets an executable version and prints to the debug log if possible. Only supported for package managers that use "--version".

func RunXrayDependenciesTreeScanGraph

func RunXrayDependenciesTreeScanGraph(scanGraphParams *scangraph.ScanGraphParams) (results []services.ScanResponse, err error)

Types

type BuildInfoBomGeneratorParams

type BuildInfoBomGeneratorParams struct {
	XrayVersion         string
	Progress            ioUtils.ProgressMgr
	ExclusionPattern    string
	AllowPartialResults bool
	// Artifactory Repository params
	ServerDetails          *config.ServerDetails
	DependenciesRepository string
	IgnoreConfigFile       bool
	InsecureTls            bool
	// Install params
	SkipAutoInstall    bool
	InstallCommandName string
	Args               []string
	InstallCommandArgs []string
	// Curation params
	IsCurationCmd bool
	// AuditId is the curation run's audit ID, forwarded to probes that make their own HTTP requests (e.g. npm/yarn direct-dep probing) so they tag those requests the same way as the main audit flow.
	AuditId              string
	MvnIncludePluginDeps bool
	ParallelRequests     int
	// OutputFormat is the --format flag value forwarded from the curation command.
	// The zero value is treated as outFormat.Table by all renderers.
	// Set by curation commands only; generic audit/scan commands leave this unset.
	OutputFormat outFormat.OutputFormat
	// Java params
	IsMavenDepTreeInstalled       bool
	UseWrapper                    bool
	UseIncludedBuilds             bool
	GradleExcludeTestDependencies bool
	// Python params
	PipRequirementsFile string
	// Npm params
	NpmIgnoreNodeModules    bool
	NpmOverwritePackageLock bool
	NpmRunNative            bool
	NpmLegacyPeerDeps       bool
	// NpmForceLogsMax, when non-empty, is appended as --logs-max <value> to the install command.
	// Leave empty unless ambient logs-max is known to be 0 — never override a nonzero setting.
	NpmForceLogsMax string
	// Yarn params
	// YarnOverwriteYarnLock refreshes yarn.lock when older than package.json (mirrors NpmOverwritePackageLock).
	// Curation sets this to true; audit/scan leave it false to trust the existing lockfile.
	YarnOverwriteYarnLock bool
	// YarnCredentialsFromFallback is true when .yarnrc.yml had no token of its own and
	// ServerDetails' credentials came from the 'jf c' server config instead. When false, the
	// same token is already in use by .yarnrc.yml's native resolution, so injecting it into
	// the subprocess env would just add a redundant network call.
	YarnCredentialsFromFallback bool
	// Pnpm params
	MaxTreeDepth string
	// Docker params
	DockerImageName string
	// Hugging Face params
	// HuggingFaceModel is the model/dataset reference to audit, e.g. "mcpotato/42-eicar-street:main".
	// Set by the curation command's --hugging-face-model flag.
	// When empty, BuildDependencyTree auto-discovers references from HFWorkingDirectory.
	HuggingFaceModel string
	// HFWorkingDirectory is the project root used for Hugging Face auto-discovery.
	// Defaults to "." when empty.
	HFWorkingDirectory string
	// HFProjectName overrides the HF root-node name (falls back to the working
	// directory basename when empty). Set by the curation command to a collision-free
	// name when auditing multiple --working-dirs entries that share a basename.
	HFProjectName string
	// NuGet params
	SolutionFilePath string
	// Uv params
	ScriptPath string
}

func (*BuildInfoBomGeneratorParams) SetConanProfile

func (*BuildInfoBomGeneratorParams) SetNpmScope

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL