scan

package

v1.17.2 Latest Latest Go to latest Published: Oct 28, 2026 License: AGPL-3.0 Imports: 17 Imported by: 0

Details

This section is empty.

This section is empty.

func NewSBOMScanner(purlComparer comparer, cveRepository shared.CveRepository) *sbomScanner

func WithPreloads(preloads ...func(*gorm.DB) *gorm.DB) func(*PurlComparer)

WithPreloads replaces the default CVE preloads. Callers can customize what gets preloaded.

type AffectedComponentsCache struct {
	// contains filtered or unexported fields
}

func NewAffectedComponentsCache(cacheSize *int) *AffectedComponentsCache

cache Size is the maximum number of elements held at one time if 0 is provided the cache gets disabled if nil is provided the default is used

func (acc *AffectedComponentsCache) Flush()

func (acc *AffectedComponentsCache) GetByCandidate(candidate *candidate) ([]models.AffectedComponent, bool)

func (acc *AffectedComponentsCache) GetCurrentGeneration() int

func (acc *AffectedComponentsCache) SetForCandidates(candidates []*candidate, candidatesGeneration int)

type PurlComparer struct {
	// contains filtered or unexported fields
}

func NewPurlComparer(db shared.DB, eventBroker events.Broker, cacheSize *int, opts ...func(*PurlComparer)) *PurlComparer

cache Size is the maximum number of elements held at one time if 0 is provided the cache gets disabled if nil is provided the default is used

func (comparer *PurlComparer) FlushCache()

flush cache externally (e.g. vulndb import)

func (comparer *PurlComparer) GetAffectedComponents(ctx context.Context, purl packageurl.PackageURL) ([]models.AffectedComponent, error)

GetAffectedComponents finds the affected components for a single software package.

func (comparer *PurlComparer) GetAffectedComponentsBatch(ctx context.Context, purls []packageurl.PackageURL) ([]*candidate, error)

wrapper for calling resolve candidates itself with multiple purls

func (comparer *PurlComparer) GetVulns(ctx context.Context, purls []packageurl.PackageURL) ([]models.VulnInPackage, error)

GetVulns resolves the vulnerabilities for a set of purls. Callers looking at a single purl pass a one element slice.