matcher

package

v1.2.5 Latest Latest Go to latest Published: Feb 17, 2026 License: MIT Imports: 7 Imported by: 0

Details

This section is empty.

This section is empty.

func BulletinToFinding(b *vulners.Bulletin, componentRef string) model.Finding

BulletinToFinding converts a Vulners Bulletin into a Finding.

func NormalizeComponent(c model.Component) model.Component

NormalizeComponent prepares a component for vulnerability matching.

type Enricher struct {
	// contains filtered or unexported fields
}

Enricher enriches govulncheck findings with Vulners intel data.

func NewEnricher(intelClient intel.Client, logger *slog.Logger) *Enricher

NewEnricher creates a new Enricher.

func (e *Enricher) Enrich(ctx context.Context, findings []model.Finding) []model.Finding

Enrich takes govulncheck findings and adds Vulners exploit/severity data. It batch-fetches bulletins for efficiency when possible.

func (e *Enricher) WithAIScore(enabled bool) *Enricher

WithAIScore enables on-demand AI score enrichment for findings that lack one.

type Matcher struct {
	// contains filtered or unexported fields
}

Matcher resolves components to vulnerability findings.

func NewMatcher(intelClient intel.Client, logger *slog.Logger) *Matcher

NewMatcher creates a new Matcher.

func (m *Matcher) Match(ctx context.Context, components []model.Component) ([]model.Finding, error)

Match queries the Vulners API for vulnerabilities affecting the given components.