vexrules

Aug 19, 2026

Changes in this version

+ var SoftMatchCelEnv = sync.OnceValues(func() (*cel.Env, error) { ... })

+ func CompileRulesForSoftMatching(ctx context.Context, rules []models.UpstreamVEXRule) (map[string]CompiledRule, error)

+ func PrepareVulnsForEvalMap(ctx context.Context, vulns []models.DependencyVuln) (map[string]map[string]any, error)

type CompiledRule

+ Program cel.Program

type PathPattern

+ func (p PathPattern) SoftMatches(path []string) bool

Aug 5, 2026

Changes in this version

+ type CompiledRule struct

+ CVEScope *string

Aug 2, 2026

Changes in this version

+ const PathPatternWildcard

+ var CelEnv = sync.OnceValues(func() (*cel.Env, error) { ... })

+ func CompileRules(ctx context.Context, rules []models.UpstreamVEXRule) (map[string]cel.Program, error)

+ func EvalCompiledRules(ctx context.Context, compiled map[string]cel.Program, ...) (map[string][]string, error)

+ func IdentityOfRule(rule models.UpstreamVEXRule) (string, error)

+ func PrepareVulnsForEval(ctx context.Context, vulns []models.DependencyVuln) ([]map[string]any, error)

+ func PurlVersionMatches(patternPurl, pathPurl packageurl.PackageURL) (bool, error)

+ func ToCELExpression(cveID string, pattern PathPattern) string

+ func VexRuleTitle(cveID string, pattern PathPattern) string

+ type PathPattern []string

+ func (p PathPattern) Matches(path []string, artifactPurls []string) bool