scan

package
v1.0.0-rc.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Nov 24, 2025 License: AGPL-3.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func NewSBOMScanner

func NewSBOMScanner(purlComparer comparer, cveRepository shared.CveRepository) *sbomScanner

Types

type PurlComparer

type PurlComparer struct {
	// contains filtered or unexported fields
}

func NewPurlComparer

func NewPurlComparer(db shared.DB) *PurlComparer

func (*PurlComparer) GetAffectedComponents

func (comparer *PurlComparer) GetAffectedComponents(purl, version string) ([]models.AffectedComponent, error)

GetAffectedComponents finds security vulnerabilities for a software package

func (*PurlComparer) GetVulns

func (comparer *PurlComparer) GetVulns(purl string, version string, _ string) ([]models.VulnInPackage, error)

some purls do contain versions, which cannot be found in the database. An example is git. the purl looks like: pkg:deb/debian/git@v2.30.2-1, while the version we would like it to match is: 1:2.30.2-1 ("1:" prefix)

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL