core

package

Go to main page

Versions in this module

v0

v0.19.2

Nov 4, 2025

v0.19.1

Nov 3, 2025

v0.19.0

Nov 2, 2025

Changes in this version

type ArtifactService

+ FetchBomsFromUpstream func(artifactName string, upstreamURLs []string) ([]*normalize.CdxBom, []string, []string)

+ ReadArtifact func(name string, assetVersionName string, assetID uuid.UUID) (models.Artifact, error)

+ SyncUpstreamBoms func(boms []*normalize.CdxBom, org models.Org, project models.Project, ...) ([]models.DependencyVuln, error)

type AssetVersionRepository

+ UpdateAssetDefaultBranch func(assetID uuid.UUID, defaultBranch string) error

type ComponentRepository

+ CreateComponents func(tx DB, components []models.ComponentDependency) error

+ FetchInformationSources func(artifact *models.Artifact) ([]models.ComponentDependency, error)

+ RemoveInformationSources func(artifact *models.Artifact, rootNodePurls []string) error

type ComponentService

+ FetchInformationSources func(artifact *models.Artifact) ([]models.ComponentDependency, error)

+ RemoveInformationSources func(artifact *models.Artifact, rootNodePurls []string) error

type DependencyVulnRepository

+ ListByAssetIDWithoutHandledExternalEvents func(assetID uuid.UUID, assetVersionName string, pageInfo PageInfo, search string, ...) (Paged[models.DependencyVuln], error)

type DependencyVulnService

+ CreateVulnEventAndApply func(tx DB, assetID uuid.UUID, userID string, dependencyVuln *models.DependencyVuln, ...) (models.VulnEvent, error)

+ type ScanService interface

+ ScanNormalizedSBOM func(org models.Org, project models.Project, asset models.Asset, ...) (int, int, []models.DependencyVuln, error)

+ type ScannerType string

+ const ContainerScan

+ const ScaScanner

+ const TestScanner

+ const VexReport

v0.18.9

Oct 23, 2025

v0.18.8

Oct 20, 2025

v0.18.7

Oct 20, 2025

v0.18.6

Oct 18, 2025

v0.18.5

Oct 16, 2025

Changes in this version

+ func MaybeGetProject(ctx Context) (models.Project, error)

type AccessControl

+ AllowRoleInAsset func(asset string, role Role, object Object, action []Action) error

+ GetAllAssetsForUser func(user string) ([]string, error)

+ GetAllMembersOfAsset func(projectID string) ([]string, error)

+ GetAssetRole func(user string, asset string) (Role, error)

+ GrantRoleInAsset func(subject string, role Role, asset string) error

+ InheritAssetRole func(roleWhichGetsPermissions, roleWhichProvidesPermissions Role, asset string) error

+ IsAllowedInAsset func(asset *models.Asset, user string, object Object, action Action) (bool, error)

+ LinkProjectAndAssetRole func(projectRoleWhichGetsPermission, assetRoleWhichProvidesPermissions Role, ...) error

+ RevokeAllRolesInAssetForUser func(user string, asset string) error

+ RevokeRoleInAsset func(subject string, role Role, asset string) error

type AssetRepository

+ GetAllowedAssetsByProjectID func(allowedAssetIDs []string, projectID uuid.UUID) ([]models.Asset, error)

type AssetService

+ BootstrapAsset func(rbac AccessControl, asset *models.Asset) error

v0.18.4

Oct 13, 2025

v0.18.3

Oct 10, 2025

v0.18.2

Oct 10, 2025

v0.18.1

Oct 10, 2025

v0.18.0

Oct 7, 2025

v0.17.5

Sep 26, 2025

Changes in this version

+ func MaybeGetArtifact(ctx Context) (models.Artifact, error)

v0.17.4

Sep 24, 2025

v0.17.3

Sep 22, 2025

Changes in this version

type GitlabClientFacade

+ CreateNewLabel func(ctx context.Context, projectID int, label *gitlab.CreateLabelOptions) (*gitlab.Label, *gitlab.Response, error)

+ GetProjectIssues func(projectID int, opt *gitlab.ListProjectIssuesOptions) ([]*gitlab.Issue, *gitlab.Response, error)

+ ListLabels func(ctx context.Context, projectID int, opt *gitlab.ListLabelsOptions) ([]*gitlab.Label, *gitlab.Response, error)

+ UpdateLabel func(ctx context.Context, projectID int, labelID int, ...) (*gitlab.Label, *gitlab.Response, error)

type IntegrationAggregate

+ GetUsers func(org models.Org) []User

type Role

+ const RoleUnknown

type ThirdPartyIntegration

+ CreateLabels func(ctx context.Context, asset models.Asset) error

v0.17.2

Sep 17, 2025

v0.17.1

Sep 17, 2025

v0.17.0

Sep 17, 2025

Changes in this version

+ func BootstrapOrg(rbac AccessControl, userID string, userRole Role) error

+ func GetArtifact(ctx Context) models.Artifact

+ func GetArtifactName(ctx Context) (string, error)

+ func GetAssetVersion(ctx Context) models.AssetVersion

+ func GetAssetVersionSlug(ctx Context) (string, error)

+ func GetAttestation(ctx Context) models.Attestation

+ func GetBadgeSVG(label string, values []BadgeValues) string

+ func GetOrg(c Context) models.Org

+ func GetURLDecodedParam(ctx Context, param string) (string, error)

+ func GetVulnID(ctx Context) (string, models.VulnType, error)

+ func HasOrganization(c Context) bool

+ func HasProject(c Context) bool

+ func MaybeGetAssetVersion(ctx Context) (models.AssetVersion, error)

+ func NewAdminClient(client *client.APIClient) adminClientImplementation

+ func SetArtifact(ctx Context, artifact models.Artifact)

+ func SetAssetVersion(ctx Context, assetVersion models.AssetVersion)

+ func SetAttestation(ctx Context, attestation models.Attestation)

+ func SetOrg(c Context, org models.Org)

+ func SetRBAC(ctx Context, rbac AccessControl)

+ func ValidRole(role Role) bool

+ type AccessControl interface

+ AllowRole func(role Role, object Object, action []Action) error

+ AllowRoleInProject func(project string, role Role, object Object, action []Action) error

+ GetAllMembersOfOrganization func() ([]string, error)

+ GetAllMembersOfProject func(projectID string) ([]string, error)

+ GetAllProjectsForUser func(user string) ([]string, error)

+ GetAllRoles func(user string) []string

+ GetDomainRole func(user string) (Role, error)

+ GetExternalEntityProviderID func() *string

+ GetOwnerOfOrganization func() (string, error)

+ GetProjectRole func(user string, project string) (Role, error)

+ GrantRole func(subject string, role Role) error

+ GrantRoleInProject func(subject string, role Role, project string) error

+ HasAccess func(subject string) (bool, error)

+ InheritProjectRole func(roleWhichGetsPermissions, roleWhichProvidesPermissions Role, project string) error

+ InheritProjectRolesAcrossProjects func(roleWhichGetsPermissions, roleWhichProvidesPermissions ProjectRole) error

+ InheritRole func(roleWhichGetsPermissions, roleWhichProvidesPermissions Role) error

+ IsAllowed func(subject string, object Object, action Action) (bool, error)

+ IsAllowedInProject func(project *models.Project, user string, object Object, action Action) (bool, error)

+ LinkDomainAndProjectRole func(domainRoleWhichGetsPermission, projectRoleWhichProvidesPermissions Role, ...) error

+ RevokeAllRolesInProjectForUser func(user string, project string) error

+ RevokeRole func(subject string, role Role) error

+ RevokeRoleInProject func(subject string, role Role, project string) error

+ type Action string

+ const ActionCreate

+ const ActionDelete

+ const ActionRead

+ const ActionUpdate

+ type AdminClient interface

+ GetIdentity func(ctx context.Context, userID string) (client.Identity, error)

+ GetIdentityFromCookie func(ctx context.Context, cookie string) (client.Identity, error)

+ GetIdentityWithCredentials func(ctx context.Context, userID string) (client.Identity, error)

+ ListUser func(client client.IdentityAPIListIdentitiesRequest) ([]client.Identity, error)

+ type AffectedComponentRepository interface

+ DeleteAll func(tx DB, ecosystem string) error

+ GetAllAffectedComponentsID func() ([]string, error)

+ Save func(tx DB, affectedComponent *models.AffectedComponent) error

+ SaveBatch func(tx DB, affectedPkgs []models.AffectedComponent) error

+ type ArtifactObject struct

+ ArtifactName string

+ type ArtifactRepository interface

+ DeleteArtifact func(assetID uuid.UUID, assetVersionName string, artifactName string) error

+ GetByAssetIDAndAssetVersionName func(assetID uuid.UUID, assetVersionName string) ([]models.Artifact, error)

+ ReadArtifact func(name string, assetVersionName string, assetID uuid.UUID) (models.Artifact, error)

+ type ArtifactRiskHistoryRepository interface

+ GetRiskHistory func(artifactName *string, assetVersionName string, assetID uuid.UUID, ...) ([]models.ArtifactRiskHistory, error)

+ GetRiskHistoryByRelease func(releaseID uuid.UUID, start, end time.Time) ([]models.ArtifactRiskHistory, error)

+ UpdateRiskAggregation func(assetRisk *models.ArtifactRiskHistory) error

+ type ArtifactService interface

+ DeleteArtifact func(assetID uuid.UUID, assetVersionName string, artifactName string) error

+ GetArtifactNamesByAssetIDAndAssetVersionName func(assetID uuid.UUID, assetVersionName string) ([]models.Artifact, error)

+ SaveArtifact func(artifact *models.Artifact) error

+ type AssetObject struct

+ AvailabilityRequirement string

+ CVSSAutomaticTicketThreshold *float64

+ ConfidentialityRequirement string

+ Description string

+ EnableTicketRange bool

+ ExternalEntityID *string

+ ExternalEntityProviderID *string

+ ID uuid.UUID

+ IntegrityRequirement string

+ LastContainerScan *time.Time

+ LastDastScan *time.Time

+ LastIacScan *time.Time

+ LastSastScan *time.Time

+ LastScaScan *time.Time

+ LastSecretScan *time.Time

+ Name string

+ ProjectID uuid.UUID

+ ReachableFromInternet bool

+ RepositoryID *string

+ RepositoryName *string

+ RiskAutomaticTicketThreshold *float64

+ SigningPubKey *string

+ Slug string

+ func ToAssetObject(a models.Asset) AssetObject

+ type AssetRepository interface

+ Delete func(tx DB, id uuid.UUID) error

+ FindAssetByExternalProviderID func(externalEntityProviderID string, externalEntityID string) (*models.Asset, error)

+ FindByName func(name string) (models.Asset, error)

+ GetAllAssetsFromDB func() ([]models.Asset, error)

+ GetAssetIDByBadgeSecret func(badgeSecret uuid.UUID) (models.Asset, error)

+ GetAssetIDBySlug func(projectID uuid.UUID, slug string) (uuid.UUID, error)

+ GetByOrgID func(organizationID uuid.UUID) ([]models.Asset, error)

+ GetByProjectID func(projectID uuid.UUID) ([]models.Asset, error)

+ GetFQNByID func(id uuid.UUID) (string, error)

+ ReadBySlug func(projectID uuid.UUID, slug string) (models.Asset, error)

+ ReadBySlugUnscoped func(projectID uuid.UUID, slug string) (models.Asset, error)

+ ReadWithAssetVersions func(assetID uuid.UUID) (models.Asset, error)

+ Update func(tx DB, asset *models.Asset) error

+ type AssetService interface

+ CreateAsset func(asset models.Asset) (*models.Asset, error)

+ GetCVSSBadgeSVG func(results []models.ArtifactRiskHistory) string

+ UpdateAssetRequirements func(asset models.Asset, responsible string, justification string) error

+ type AssetVersionObject struct

+ AssetID uuid.UUID

+ DefaultBranch bool

+ Metadata map[string]any

+ Name string

+ SigningPubKey *string

+ Slug string

+ Type string

+ func ToAssetVersionObject(av models.AssetVersion) AssetVersionObject

+ type AssetVersionRepository interface

+ All func() ([]models.AssetVersion, error)

+ Delete func(tx DB, assetVersion *models.AssetVersion) error

+ FindOrCreate func(assetVersionName string, assetID uuid.UUID, tag bool, ...) (models.AssetVersion, error)

+ GetAllAssetsVersionFromDBByAssetID func(tx DB, assetID uuid.UUID) ([]models.AssetVersion, error)

+ GetDB func(DB) DB

+ GetDefaultAssetVersion func(assetID uuid.UUID) (models.AssetVersion, error)

+ GetDefaultAssetVersionsByProjectID func(projectID uuid.UUID) ([]models.AssetVersion, error)

+ GetDefaultAssetVersionsByProjectIDs func(projectIDs []uuid.UUID) ([]models.AssetVersion, error)

+ Read func(assetVersionName string, assetID uuid.UUID) (models.AssetVersion, error)

+ ReadBySlug func(assetID uuid.UUID, slug string) (models.AssetVersion, error)

+ Save func(tx DB, assetVersion *models.AssetVersion) error

+ type AssetVersionService interface

+ BuildOpenVeX func(asset models.Asset, assetVersion models.AssetVersion, organizationSlug string, ...) vex.VEX

+ BuildSBOM func(assetVersion models.AssetVersion, artifactName string, version, orgName string, ...) (*cdx.BOM, error)

+ BuildVeX func(asset models.Asset, assetVersion models.AssetVersion, orgName string, ...) *cdx.BOM

+ GetAssetVersionsByAssetID func(assetID uuid.UUID) ([]models.AssetVersion, error)

+ HandleFirstPartyVulnResult func(org models.Org, project models.Project, asset models.Asset, ...) ([]models.FirstPartyVuln, []models.FirstPartyVuln, []models.FirstPartyVuln, ...)

+ HandleScanResult func(org models.Org, project models.Project, asset models.Asset, ...) (opened []models.DependencyVuln, closed []models.DependencyVuln, ...)

+ UpdateSBOM func(org models.Org, project models.Project, asset models.Asset, ...) error

+ type AttestationRepository interface

+ GetByAssetID func(assetID uuid.UUID) ([]models.Attestation, error)

+ GetByAssetVersionAndAssetID func(assetID uuid.UUID, assetVersion string) ([]models.Attestation, error)

type AuthSession

+ GetScopes func() []string

+ type BadgeValues struct

+ Color string

+ Key string

+ Value int

+ type ComponentProjectRepository interface

+ type ComponentRepository interface

+ FindByPurl func(tx DB, purl string) (models.Component, error)

+ GetLicenseDistribution func(tx DB, assetVersionName string, assetID uuid.UUID, artifactName *string) (map[string]int, error)

+ HandleStateDiff func(tx DB, assetVersionName string, assetID uuid.UUID, ...) (bool, error)

+ LoadComponents func(tx DB, assetVersionName string, assetID uuid.UUID, artifactName *string) ([]models.ComponentDependency, error)

+ LoadComponentsWithProject func(tx DB, overwrittenLicenses []models.LicenseRisk, assetVersionName string, ...) (Paged[models.ComponentDependency], error)

+ LoadPathToComponent func(tx DB, assetVersionName string, assetID uuid.UUID, pURL string, ...) ([]models.ComponentDependency, error)

+ SaveBatch func(tx DB, components []models.Component) error

+ type ComponentService interface

+ GetAndSaveLicenseInformation func(assetVersion models.AssetVersion, artifactName *string, forceRefresh bool) ([]models.Component, error)

+ GetLicense func(component models.Component) (models.Component, error)

+ RefreshComponentProjectInformation func(project models.ComponentProject)

+ type ConfigRepository interface

+ GetDB func(tx DB) DB

+ Save func(tx DB, config *models.Config) error

+ type ConfigService interface

+ GetJSONConfig func(key string, v any) error

+ SetJSONConfig func(key string, v any) error

type Context

+ func GoroutineSafeContext(c Context) Context

+ type CveRepository interface

+ FindAllListPaged func(tx DB, pageInfo PageInfo, filter []FilterQuery, sort []SortQuery) (Paged[models.CVE], error)

+ FindByID func(id string) (models.CVE, error)

+ FindCVE func(tx DB, id string) (models.CVE, error)

+ FindCVEs func(tx DB, ids []string) ([]models.CVE, error)

+ GetAllCVEsID func() ([]string, error)

+ GetLastModDate func() (time.Time, error)

+ Save func(tx DB, cve *models.CVE) error

+ SaveCveAffectedComponents func(tx DB, cveID string, affectedComponentHashes []string) error

+ type CweRepository interface

+ GetAllCWEsID func() ([]string, error)

+ SaveBatch func(tx DB, cwes []models.CWE) error

+ type DependencyVulnRepository interface

+ ApplyAndSave func(tx DB, dependencyVuln *models.DependencyVuln, vulnEvent *models.VulnEvent) error

+ GetAllByAssetIDAndState func(tx DB, assetID uuid.UUID, state models.VulnState, ...) ([]models.DependencyVuln, error)

+ GetAllOpenVulnsByAssetVersionNameAndAssetID func(tx DB, artifactName *string, assetVersionName string, assetID uuid.UUID) ([]models.DependencyVuln, error)

+ GetAllVulnsByAssetID func(tx DB, assetID uuid.UUID) ([]models.DependencyVuln, error)

+ GetByAssetVersionPaged func(tx DB, assetVersionName string, assetID uuid.UUID, pageInfo PageInfo, ...) (Paged[models.DependencyVuln], map[string]int, error)

+ GetDefaultDependencyVulnsByOrgIDPaged func(tx DB, userAllowedProjectIds []string, pageInfo PageInfo, search string, ...) (Paged[models.DependencyVuln], error)

+ GetDefaultDependencyVulnsByProjectIDPaged func(tx DB, projectID uuid.UUID, pageInfo PageInfo, search string, ...) (Paged[models.DependencyVuln], error)

+ GetDependencyVulnsByAssetVersion func(tx DB, assetVersionName string, assetID uuid.UUID, artifactName *string) ([]models.DependencyVuln, error)

+ GetDependencyVulnsByAssetVersionPagedAndFlat func(tx DB, assetVersionName string, assetVersionID uuid.UUID, pageInfo PageInfo, ...) (Paged[models.DependencyVuln], error)

+ GetDependencyVulnsByDefaultAssetVersion func(tx DB, assetID uuid.UUID, artifactName *string) ([]models.DependencyVuln, error)

+ GetDependencyVulnsByOtherAssetVersions func(tx DB, assetVersionName string, assetID uuid.UUID) ([]models.DependencyVuln, error)

+ GetDependencyVulnsByPurl func(tx DB, purls []string) ([]models.DependencyVuln, error)

+ GetHintsInOrganizationForVuln func(tx DB, orgID uuid.UUID, pURL string, cveID string) (common.DependencyVulnHints, error)

+ ListByAssetAndAssetVersion func(assetVersionName string, assetID uuid.UUID) ([]models.DependencyVuln, error)

+ ListUnfixedByAssetAndAssetVersion func(assetVersionName string, assetID uuid.UUID, artifactName *string) ([]models.DependencyVuln, error)

+ type DependencyVulnService interface

+ RecalculateRawRiskAssessment func(tx DB, responsible string, dependencyVulns []models.DependencyVuln, ...) error

+ SyncAllIssues func(org models.Org, project models.Project, asset models.Asset, ...) error

+ SyncIssues func(org models.Org, project models.Project, asset models.Asset, ...) error

+ UpdateDependencyVulnState func(tx DB, assetID uuid.UUID, userID string, dependencyVuln *models.DependencyVuln, ...) (models.VulnEvent, error)

+ UserDetectedDependencyVulnInAnotherArtifact func(tx DB, vulnerabilities []models.DependencyVuln, artifactName string) error

+ UserDetectedDependencyVulns func(tx DB, artifactName string, dependencyVulns []models.DependencyVuln, ...) error

+ UserDetectedExistingVulnOnDifferentBranch func(tx DB, artifactName string, dependencyVulns []models.DependencyVuln, ...) error

+ UserDidNotDetectDependencyVulnInArtifactAnymore func(tx DB, vulnerabilities []models.DependencyVuln, artifactName string) error

+ UserFixedDependencyVulns func(tx DB, userID string, dependencyVulns []models.DependencyVuln, ...) error

+ type DependencyVulnsDetectedEvent struct

+ Artifact ArtifactObject

+ Asset AssetObject

+ AssetVersion AssetVersionObject

+ Org OrgObject

+ Project ProjectObject

+ Vulns any

+ type ExploitRepository interface

+ GetAllExploitsID func() ([]string, error)

+ SaveBatch func(tx DB, exploits []models.Exploit) error

+ type ExternalEntityProviderService interface

+ RefreshExternalEntityProviderProjects func(ctx Context, org models.Org, user string) error

+ SyncOrgs func(c Context) ([]*models.Org, error)

+ TriggerOrgSync func(c Context) error

+ type ExternalEntitySlug string

+ func FromStringToExternalEntitySlug(s string) (ExternalEntitySlug, error)

+ func (e ExternalEntitySlug) IsValid() bool

+ func (e ExternalEntitySlug) ProviderID() string

+ func (e ExternalEntitySlug) SameAs(slug string) bool

+ func (e ExternalEntitySlug) Slug() string

+ func (e ExternalEntitySlug) String() string

+ type ExternalUserRepository interface

+ FindByOrgID func(tx DB, orgID uuid.UUID) ([]models.ExternalUser, error)

+ GetDB func(tx DB) DB

+ Save func(db DB, user *models.ExternalUser) error

type FilterQuery

+ Field string

+ FieldValue string

+ Operator string

+ type FireAndForgetSynchronizer interface

+ FireAndForget func(fn func())

+ type FirstPartyVulnRepository interface

+ ApplyAndSave func(tx DB, dependencyVuln *models.FirstPartyVuln, vulnEvent *models.VulnEvent) error

+ Begin func() DB

+ GetByAssetID func(tx DB, assetID uuid.UUID) ([]models.FirstPartyVuln, error)

+ GetByAssetVersion func(tx DB, assetVersionName string, assetID uuid.UUID) ([]models.FirstPartyVuln, error)

+ GetByAssetVersionPaged func(tx DB, assetVersionName string, assetID uuid.UUID, pageInfo PageInfo, ...) (Paged[models.FirstPartyVuln], map[string]int, error)

+ GetDefaultFirstPartyVulnsByOrgIDPaged func(tx DB, userAllowedProjectIds []string, pageInfo PageInfo, search string, ...) (Paged[models.FirstPartyVuln], error)

+ GetDefaultFirstPartyVulnsByProjectIDPaged func(tx DB, projectID uuid.UUID, pageInfo PageInfo, search string, ...) (Paged[models.FirstPartyVuln], error)

+ GetFirstPartyVulnsByOtherAssetVersions func(tx DB, assetVersionName string, assetID uuid.UUID, scannerID string) ([]models.FirstPartyVuln, error)

+ ListByScanner func(assetVersionName string, assetID uuid.UUID, scannerID string) ([]models.FirstPartyVuln, error)

+ Save func(tx DB, vuln *models.FirstPartyVuln) error

+ SaveBatch func(tx DB, vulns []models.FirstPartyVuln) error

+ Transaction func(txFunc func(DB) error) error

+ type FirstPartyVulnService interface

+ SyncAllIssues func(org models.Org, project models.Project, asset models.Asset, ...) error

+ SyncIssues func(org models.Org, project models.Project, asset models.Asset, ...) error

+ UpdateFirstPartyVulnState func(tx DB, userID string, firstPartyVuln *models.FirstPartyVuln, statusType string, ...) (models.VulnEvent, error)

+ UserDetectedExistingFirstPartyVulnOnDifferentBranch func(tx DB, scannerID string, firstPartyVulns []models.FirstPartyVuln, ...) error

+ UserDetectedFirstPartyVulns func(tx DB, userID string, scannerID string, ...) error

+ UserFixedFirstPartyVulns func(tx DB, userID string, firstPartyVulns []models.FirstPartyVuln) error

+ type FirstPartyVulnsDetectedEvent struct

+ Asset AssetObject

+ AssetVersion AssetVersionObject

+ Org OrgObject

+ Project ProjectObject

+ Vulns any

+ type GitLabOauth2TokenRepository interface

+ CreateIfNotExists func(tokens []*models.GitLabOauth2Token) error

+ Delete func(tx DB, tokens []models.GitLabOauth2Token) error

+ DeleteByUserIDAndProviderID func(userID string, providerID string) error

+ FindByUserID func(userID string) ([]models.GitLabOauth2Token, error)

+ FindByUserIDAndProviderID func(userID string, providerID string) (*models.GitLabOauth2Token, error)

+ Save func(tx DB, model ...*models.GitLabOauth2Token) error

+ type GithubAppInstallationRepository interface

+ Delete func(tx DB, installationID int) error

+ FindByOrganizationID func(orgID uuid.UUID) ([]models.GithubAppInstallation, error)

+ Read func(installationID int) (models.GithubAppInstallation, error)

+ Save func(tx DB, model *models.GithubAppInstallation) error

+ type GitlabClientFacade interface

+ AddProjectHook func(ctx context.Context, projectID int, opt *gitlab.AddProjectHookOptions) (*gitlab.ProjectHook, *gitlab.Response, error)

+ CreateIssue func(ctx context.Context, pid int, opt *gitlab.CreateIssueOptions) (*gitlab.Issue, *gitlab.Response, error)

+ CreateIssueComment func(ctx context.Context, pid int, issue int, opt *gitlab.CreateIssueNoteOptions) (*gitlab.Note, *gitlab.Response, error)

+ CreateMergeRequest func(ctx context.Context, project string, opt *gitlab.CreateMergeRequestOptions) (*gitlab.MergeRequest, *gitlab.Response, error)

+ CreateVariable func(ctx context.Context, projectID int, opt *gitlab.CreateProjectVariableOptions) (*gitlab.ProjectVariable, *gitlab.Response, error)

+ DeleteProjectHook func(ctx context.Context, projectID int, hookID int) (*gitlab.Response, error)

+ EditIssue func(ctx context.Context, pid int, issue int, opt *gitlab.UpdateIssueOptions) (*gitlab.Issue, *gitlab.Response, error)

+ EditIssueLabel func(ctx context.Context, pid int, issue int, labels []*gitlab.CreateLabelOptions) (*gitlab.Response, error)

+ FetchGroupAvatarBase64 func(groupID int) (string, error)

+ FetchProjectAvatarBase64 func(projectID int) (string, error)

+ GetClientID func() string

+ GetGroup func(ctx context.Context, groupID int) (*gitlab.Group, *gitlab.Response, error)

+ GetMemberInGroup func(ctx context.Context, userID int, groupID int) (*gitlab.GroupMember, *gitlab.Response, error)

+ GetMemberInProject func(ctx context.Context, userID int, projectID int) (*gitlab.ProjectMember, *gitlab.Response, error)

+ GetProject func(ctx context.Context, projectID int) (*gitlab.Project, *gitlab.Response, error)

+ GetVersion func(ctx context.Context) (*gitlab.Version, *gitlab.Response, error)

+ InviteReporter func(ctx context.Context, projectID int, userID int) (*gitlab.ProjectMember, *gitlab.Response, error)

+ IsProjectMember func(ctx context.Context, projectID int, userID int, ...) (bool, error)

+ ListGroups func(ctx context.Context, opt *gitlab.ListGroupsOptions) ([]*gitlab.Group, *gitlab.Response, error)

+ ListProjectHooks func(ctx context.Context, projectID int, options *gitlab.ListProjectHooksOptions) ([]*gitlab.ProjectHook, *gitlab.Response, error)

+ ListProjects func(ctx context.Context, opt *gitlab.ListProjectsOptions) ([]*gitlab.Project, *gitlab.Response, error)

+ ListProjectsInGroup func(ctx context.Context, groupID int, opt *gitlab.ListGroupProjectsOptions) ([]*gitlab.Project, *gitlab.Response, error)

+ ListVariables func(ctx context.Context, projectID int, ...) ([]*gitlab.ProjectVariable, *gitlab.Response, error)

+ RemoveVariable func(ctx context.Context, projectID int, key string) (*gitlab.Response, error)

+ UpdateVariable func(ctx context.Context, projectID int, key string, ...) (*gitlab.ProjectVariable, *gitlab.Response, error)

+ Whoami func(ctx context.Context) (*gitlab.User, *gitlab.Response, error)

+ type GitlabClientFactory interface

+ FromAccessToken func(accessToken string, baseURL string) (GitlabClientFacade, error)

+ FromIntegration func(integration models.GitLabIntegration) (GitlabClientFacade, error)

+ FromIntegrationUUID func(id uuid.UUID) (GitlabClientFacade, error)

+ FromOauth2Token func(token models.GitLabOauth2Token, enableClientCache bool) (GitlabClientFacade, error)

+ type GitlabIntegrationRepository interface

+ Delete func(tx DB, id uuid.UUID) error

+ FindByOrganizationID func(orgID uuid.UUID) ([]models.GitLabIntegration, error)

+ Read func(id uuid.UUID) (models.GitLabIntegration, error)

+ Save func(tx DB, model *models.GitLabIntegration) error

+ type InTotoLinkRepository interface

+ FindByAssetAndSupplyChainID func(assetID uuid.UUID, supplyChainID string) ([]models.InTotoLink, error)

+ FindBySupplyChainID func(supplyChainID string) ([]models.InTotoLink, error)

+ Save func(tx DB, model *models.InTotoLink) error

+ type InTotoVerifierService interface

+ VerifySupplyChain func(supplyChainID string) (bool, error)

+ VerifySupplyChainByDigestOnly func(digest string) (bool, error)

+ VerifySupplyChainWithOutputDigest func(supplyChainID string, digest string) (bool, error)

type IntegrationID

+ const JiraIntegrationID

+ const WebhookIntegrationID

+ type InvitationRepository interface

+ Delete func(tx DB, id uuid.UUID) error

+ FindByCode func(code string) (models.Invitation, error)

+ Save func(tx DB, invitation *models.Invitation) error

+ type JiraIntegrationRepository interface

+ Delete func(tx DB, id uuid.UUID) error

+ FindByOrganizationID func(orgID uuid.UUID) ([]models.JiraIntegration, error)

+ GetClientByIntegrationID func(integrationID uuid.UUID) (models.JiraIntegration, error)

+ Read func(id uuid.UUID) (models.JiraIntegration, error)

+ Save func(tx DB, model *models.JiraIntegration) error

+ type LicenseRiskRepository interface

+ ApplyAndSave func(tx DB, licenseRisk *models.LicenseRisk, vulnEvent *models.VulnEvent) error

+ DeleteByComponentPurl func(assetID uuid.UUID, assetVersionName string, purl packageurl.PackageURL) error

+ GetAllLicenseRisksForAssetVersion func(assetID uuid.UUID, assetVersionName string) ([]models.LicenseRisk, error)

+ GetAllLicenseRisksForAssetVersionPaged func(tx DB, assetID uuid.UUID, assetVersionName string, pageInfo PageInfo, ...) (Paged[models.LicenseRisk], error)

+ GetAllOverwrittenLicensesForAssetVersion func(assetID uuid.UUID, assetVersionName string) ([]models.LicenseRisk, error)

+ GetLicenseRisksByOtherAssetVersions func(tx DB, assetVersionName string, assetID uuid.UUID) ([]models.LicenseRisk, error)

+ ListByArtifactName func(assetVersionName string, assetID uuid.UUID, scannerID string) ([]models.LicenseRisk, error)

+ MaybeGetLicenseOverwriteForComponent func(assetID uuid.UUID, assetVersionName string, pURL packageurl.PackageURL) (models.LicenseRisk, error)

+ type LicenseRiskService interface

+ FindLicenseRisksInComponents func(assetVersion models.AssetVersion, components []models.Component, ...) error

+ MakeFinalLicenseDecision func(vulnID, finalLicense, justification, userID string) error

+ UpdateLicenseRiskState func(tx DB, userID string, licenseRisk *models.LicenseRisk, statusType string, ...) (models.VulnEvent, error)

type ManualMitigateEvent

+ Justification string

+ type Object string

+ const ObjectAsset

+ const ObjectOrganization

+ const ObjectProject

+ const ObjectUser

+ type OpenSourceInsightService interface

+ GetProject func(ctx context.Context, projectID string) (common.OpenSourceInsightsProjectResponse, error)

+ GetVersion func(ctx context.Context, ecosystem, packageName, version string) (common.OpenSourceInsightsVersionResponse, error)

+ type OrgObject struct

+ ContactPhoneNumber *string

+ Country *string

+ CriticalInfrastructure bool

+ Description string

+ ExternalEntityProviderID *string

+ Grundschutz bool

+ ID uuid.UUID

+ ISO27001 bool

+ Industry *string

+ IsPublic bool

+ Language string

+ NIST bool

+ Name string

+ NumberOfEmployees *int

+ Slug string

+ func ToOrgObject(o models.Org) OrgObject

+ type OrgService interface

+ CreateOrganization func(ctx Context, organization *models.Org) error

+ ReadBySlug func(slug string) (*models.Org, error)

+ type OrganizationRepository interface

+ ContentTree func(orgID uuid.UUID, projects []string) []any

+ GetOrgByID func(id uuid.UUID) (models.Org, error)

+ ReadBySlug func(slug string) (models.Org, error)

+ Update func(tx DB, organization *models.Org) error

+ type PersonalAccessTokenRepository interface

+ DeleteByFingerprint func(fingerprint string) error

+ FindByUserIDs func(userID []uuid.UUID) ([]models.PAT, error)

+ GetByFingerprint func(fingerprint string) (models.PAT, error)

+ ListByUserID func(userID string) ([]models.PAT, error)

+ MarkAsLastUsedNow func(fingerprint string) error

+ type PolicyRepository interface

+ FindByOrganizationID func(organizationID uuid.UUID) ([]models.Policy, error)

+ FindByProjectID func(projectID uuid.UUID) ([]models.Policy, error)

+ FindCommunityManagedPolicies func() ([]models.Policy, error)

+ type ProjectObject struct

+ Description string

+ ExternalEntityID *string

+ ExternalEntityProviderID *string

+ ID uuid.UUID

+ IsPublic bool

+ Name string

+ Parent *ProjectObject

+ ParentID *uuid.UUID

+ RepositoryID *string

+ RepositoryName *string

+ Slug string

+ Type string

+ func ToProjectObject(p models.Project) ProjectObject

+ type ProjectRepository interface

+ Activate func(tx DB, projectID uuid.UUID) error

+ Create func(tx DB, project *models.Project) error

+ Delete func(tx DB, projectID uuid.UUID) error

+ DisablePolicyForProject func(tx DB, projectID uuid.UUID, policyID uuid.UUID) error

+ EnableCommunityManagedPolicies func(tx DB, projectID uuid.UUID) error

+ EnablePolicyForProject func(tx DB, projectID uuid.UUID, policyID uuid.UUID) error

+ GetByOrgID func(organizationID uuid.UUID) ([]models.Project, error)

+ GetDirectChildProjects func(projectID uuid.UUID) ([]models.Project, error)

+ GetProjectByAssetID func(assetID uuid.UUID) (models.Project, error)

+ List func(idSlice []uuid.UUID, parentID *uuid.UUID, organizationID uuid.UUID) ([]models.Project, error)

+ ListPaged func(projectIDs []uuid.UUID, parentID *uuid.UUID, orgID uuid.UUID, ...) (Paged[models.Project], error)

+ Read func(projectID uuid.UUID) (models.Project, error)

+ ReadBySlug func(organizationID uuid.UUID, slug string) (models.Project, error)

+ ReadBySlugUnscoped func(organizationID uuid.UUID, slug string) (models.Project, error)

+ RecursivelyGetChildProjects func(projectID uuid.UUID) ([]models.Project, error)

+ Update func(tx DB, project *models.Project) error

+ Upsert func(projects *[]*models.Project, conflictingColumns []clause.Column, ...) error

+ UpsertSplit func(tx DB, externalProviderID string, projects []*models.Project) ([]*models.Project, []*models.Project, error)

+ type ProjectRiskHistoryRepository interface

+ GetRiskHistory func(projectID uuid.UUID, start, end time.Time) ([]models.ProjectRiskHistory, error)

+ UpdateRiskAggregation func(projectRisk *models.ProjectRiskHistory) error

+ type ProjectRole struct

+ Project string

+ Role Role

+ type ProjectService interface

+ BootstrapProject func(rbac AccessControl, project *models.Project) error

+ CreateProject func(ctx Context, project *models.Project) error

+ GetDirectChildProjects func(projectID uuid.UUID) ([]models.Project, error)

+ ListAllowedProjects func(ctx Context) ([]models.Project, error)

+ ListAllowedProjectsPaged func(c Context) (Paged[models.Project], error)

+ ListProjectsByOrganizationID func(organizationID uuid.UUID) ([]models.Project, error)

+ ReadBySlug func(ctx Context, organizationID uuid.UUID, slug string) (models.Project, error)

+ RecursivelyGetChildProjects func(projectID uuid.UUID) ([]models.Project, error)

+ type RBACMiddleware = func(obj Object, act Action) echo.MiddlewareFunc

+ type RBACProvider interface

+ DomainsOfUser func(user string) ([]string, error)

+ GetDomainRBAC func(domain string) AccessControl

+ type ReleaseRepository interface

+ CreateReleaseItem func(tx DB, item *models.ReleaseItem) error

+ DeleteReleaseItem func(tx DB, id uuid.UUID) error

+ GetByProjectID func(projectID uuid.UUID) ([]models.Release, error)

+ GetByProjectIDPaged func(tx DB, projectID uuid.UUID, pageInfo PageInfo, search string, ...) (Paged[models.Release], error)

+ GetCandidateItemsForRelease func(projectID uuid.UUID, releaseID *uuid.UUID) ([]models.Artifact, []models.Release, error)

+ ReadRecursive func(id uuid.UUID) (models.Release, error)

+ ReadWithItems func(id uuid.UUID) (models.Release, error)

type Repository

+ Description string

+ GitProvider string

+ Image string

+ IsDeveloper bool

+ IsMaintainer bool

+ IsOwner bool

+ type Role string

+ const RoleAdmin

+ const RoleGuest

+ const RoleMember

+ const RoleOwner

+ type SBOMCreatedEvent struct

+ Artifact ArtifactObject

+ Asset AssetObject

+ AssetVersion AssetVersionObject

+ Org OrgObject

+ Project ProjectObject

+ SBOM *cdx.BOM

+ type SBOMScanner interface

+ Scan func(bom normalize.SBOM) ([]models.VulnInPackage, error)

type SortQuery

+ func (s SortQuery) GetField() string

+ type StatisticsRepository interface

+ AverageFixingTime func(artifactNam *string, assetVersionName string, assetID uuid.UUID, ...) (time.Duration, error)

+ AverageFixingTimeByCvss func(artifactName *string, assetVersionName string, assetID uuid.UUID, ...) (time.Duration, error)

+ AverageFixingTimeByCvssForRelease func(releaseID uuid.UUID, cvssIntervalStart, cvssIntervalEnd float64) (time.Duration, error)

+ AverageFixingTimeForRelease func(releaseID uuid.UUID, riskIntervalStart, riskIntervalEnd float64) (time.Duration, error)

+ CVESWithKnownExploitsInAssetVersion func(assetVersion models.AssetVersion) ([]models.CVE, error)

+ TimeTravelDependencyVulnState func(artifactName *string, assetVersionName string, assetID uuid.UUID, ...) ([]models.DependencyVuln, error)

+ type StatisticsService interface

+ GetArtifactRiskHistory func(artifactName *string, assetVersionName string, assetID uuid.UUID, ...) ([]models.ArtifactRiskHistory, error)

+ GetAverageFixingTime func(artifactName *string, assetVersionName string, assetID uuid.UUID, ...) (time.Duration, error)

+ GetAverageFixingTimeByCvss func(artifactName *string, assetVersionName string, assetID uuid.UUID, ...) (time.Duration, error)

+ GetAverageFixingTimeByCvssForRelease func(releaseID uuid.UUID, severity string) (time.Duration, error)

+ GetAverageFixingTimeForRelease func(releaseID uuid.UUID, severity string) (time.Duration, error)

+ GetComponentRisk func(artifactName *string, assetVersionName string, assetID uuid.UUID) (map[string]models.Distribution, error)

+ GetReleaseRiskHistory func(releaseID uuid.UUID, start time.Time, end time.Time) ([]models.ArtifactRiskHistory, error)

+ UpdateArtifactRiskAggregation func(artifact *models.Artifact, assetID uuid.UUID, begin time.Time, end time.Time) error

+ type SupplyChainRepository interface

+ FindByDigest func(digest string) ([]models.SupplyChain, error)

+ FindBySupplyChainID func(supplyChainID string) ([]models.SupplyChain, error)

+ PercentageOfVerifiedSupplyChains func(assetVersionName string, assetID uuid.UUID) (float64, error)

type ThirdPartyIntegration

+ CreateIssue func(ctx context.Context, asset models.Asset, assetVersionName string, ...) error

+ HasAccessToExternalEntityProvider func(ctx Context, externalEntityProviderID string) (bool, error)

+ ListGroups func(ctx context.Context, userID string, providerID string) ([]models.Project, []Role, error)

+ ListOrgs func(ctx Context) ([]models.Org, error)

+ ListProjects func(ctx context.Context, userID string, providerID string, groupID string) ([]models.Asset, []Role, error)

+ UpdateIssue func(ctx context.Context, asset models.Asset, vuln models.Vuln) error

+ type Verifier interface

+ VerifyRequestSignature func(req *http.Request) (string, string, error)

+ type VulnEvent struct

+ Ctx Context

+ Event models.VulnEvent

+ type VulnEventRepository interface

+ ReadAssetEventsByVulnID func(vulnID string, vulnType models.VulnType) ([]models.VulnEventDetail, error)

+ ReadEventsByAssetIDAndAssetVersionName func(assetID uuid.UUID, assetVersionName string, pageInfo PageInfo, ...) (Paged[models.VulnEventDetail], error)

+ Save func(db DB, event *models.VulnEvent) error

+ SaveBatch func(db DB, events []models.VulnEvent) error

+ type VulnRepository interface

+ ApplyAndSave func(tx DB, dependencyVuln models.Vuln, vulnEvent *models.VulnEvent) error

+ FindByTicketID func(tx DB, ticketID string) (models.Vuln, error)

+ GetOrgFromVuln func(vuln models.Vuln) (models.Org, error)

+ Save func(db DB, vuln *models.Vuln) error

+ Transaction func(fn func(tx DB) error) error

+ type WebhookIntegrationRepository interface

+ Delete func(tx DB, id uuid.UUID) error

+ FindByOrgIDAndProjectID func(orgID uuid.UUID, projectID uuid.UUID) ([]models.WebhookIntegration, error)

+ GetClientByIntegrationID func(integrationID uuid.UUID) (models.WebhookIntegration, error)

+ GetProjectWebhooks func(orgID uuid.UUID, projectID uuid.UUID) ([]models.WebhookIntegration, error)

+ Read func(id uuid.UUID) (models.WebhookIntegration, error)

+ Save func(tx DB, model *models.WebhookIntegration) error

v0.16.1-test.3

Sep 16, 2025

v0.16.1-test.2

Sep 16, 2025

v0.16.1-test.1

Sep 16, 2025

v0.5.15

Dec 27, 2024

Changes in this version

+ func GetRepositoryID(c Context) (string, error)

+ func SetProject(c Context, project models.Project)

v0.5.14

Dec 24, 2024

Changes in this version

+ func IsPublicRequest(c Context) bool

+ func SetAsset(c Context, asset models.Asset)

+ func SetAssetSlug(c Context, assetSlug string)

+ func SetIsPublicRequest(c Context)

+ func SetOrgSlug(c Context, orgSlug string)

+ func SetProjectSlug(c Context, projectSlug string)

+ func SetSession(ctx Context, session AuthSession)

+ type IntegrationAggregate interface

+ GetIntegration func(id IntegrationID) ThirdPartyIntegration

+ type IntegrationID string

+ const AggregateID

+ const GitHubIntegrationID

+ const GitLabIntegrationID

type ThirdPartyIntegration

+ GetID func() IntegrationID

type User

+ Role string

v0.5.3

Aug 8, 2024

v0.5.2

Aug 8, 2024

v0.5.1

Aug 7, 2024

Changes in this version

+ func GetOrgSlug(c Context) (string, error)

+ type FlawEvent struct

+ Ctx Context

+ Event models.FlawEvent

+ type ManualMitigateEvent struct

+ Ctx Context

type ThirdPartyIntegration

+ GetUsers func(org models.Org) []User

+ type User struct

+ AvatarURL *string

+ ID string

+ Name string

v0.5.0

Jul 17, 2024

v0.4.19

Jul 17, 2024

Changes in this version

+ func GetAuthAdminClient(c Context) *client.APIClient

+ func SetAuthAdminClient(c Context, i *client.APIClient)

+ func SetThirdPartyIntegration(c Context, i ThirdPartyIntegration)

+ type FlawDetectedEvent struct

+ AssetID string

+ RepositoryID string

+ type Repository struct

+ ID string

+ Label string

+ type ThirdPartyIntegration interface

+ FinishInstallation func(ctx Context) error

+ HandleEvent func(event any) error

+ HandleWebhook func(ctx Context) error

+ IntegrationEnabled func(ctx Context) bool

+ ListRepositories func(ctx Context) ([]Repository, error)

+ WantsToFinishInstallation func(ctx Context) bool

+ WantsToHandleWebhook func(ctx Context) bool

+ func GetThirdPartyIntegration(c Context) ThirdPartyIntegration

v0.4.18

Jul 8, 2024

v0.4.17

Jul 7, 2024

Changes in this version

+ var V = validator.New()

+ func AccessControlMiddleware(obj accesscontrol.Object, act accesscontrol.Action) echo.MiddlewareFunc

+ func GetAsset(c Context) models.Asset

+ func GetAssetSlug(c Context) (string, error)

+ func GetFlawID(c Context) (string, error)

+ func GetOryClient(c Context) *client.APIClient

+ func GetParam(c Context, param string) string

+ func GetProject(c Context) models.Project

+ func GetProjectSlug(c Context) (string, error)

+ func GetRBAC(c Context) accesscontrol.AccessControl

+ func GetTenant(c Context) models.Org

+ func InitLogger()

+ func LoadConfig() error

+ func Ptr[T any](t T) *T

+ func SanitizeParam(s string) string

+ type AuthSession interface

+ GetUserID func() string

+ func GetSession(ctx Context) AuthSession

+ type Context = echo.Context

+ type DB = *gorm.DB

+ func DatabaseFactory() (DB, error)

+ type Environmental struct

+ AvailabilityRequirements string

+ ConfidentialityRequirements string

+ IntegrityRequirements string

+ func GetEnvironmental(ctx Context) Environmental

+ func GetEnvironmentalFromAsset(m models.Asset) Environmental

+ func SanitizeEnv(env Environmental) Environmental

+ type FilterQuery struct

+ func GetFilterQuery(ctx Context) []FilterQuery

+ func (f FilterQuery) SQL() string

+ func (f FilterQuery) Value() any

+ type MiddlewareFunc = echo.MiddlewareFunc

+ type PageInfo struct

+ Page int

+ PageSize int

+ func GetPageInfo(ctx Context) PageInfo

+ func (p PageInfo) ApplyOnDB(db DB) DB

+ type Paged struct

+ Data []T

+ Total int64

+ func NewPaged[T any](pageInfo PageInfo, total int64, data []T) Paged[T]

+ func (p Paged[T]) Map(f func(T) any) Paged[any]

+ type Server = *echo.Group

+ type SortQuery struct

+ Field string

+ Operator string

+ func GetSortQuery(ctx Context) []SortQuery

+ func (s SortQuery) SQL() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL