Versions in this module Expand all Collapse all v1 v1.18.0 Nov 5, 2026 Changes in this version + const PathPatternWildcard + var SoftMatchCelEnv = sync.OnceValues(func() (*cel.Env, error) { ... }) + var VEXCelEnv = sync.OnceValues(func() (*cel.Env, error) { ... }) + func CompileVEXRules(ctx context.Context, rules []models.UpstreamVEXRule) (map[string]CompiledVEXRule, error) + func CompileVEXRulesForSoftMatching(ctx context.Context, rules []models.UpstreamVEXRule) (map[string]CompiledVEXRule, error) + func EvalCompiledVEXRules(ctx context.Context, compiled map[string]CompiledVEXRule, ...) (map[string][]string, error) + func EvaluatePackage(rules []CompiledPackageRule, p Package) (bool, string, error) + func IdentityOfRule(rule models.UpstreamVEXRule) (string, error) + func PrepareVulnsForEval(ctx context.Context, vulns []models.DependencyVuln) ([]map[string]any, error) + func PrepareVulnsForEvalMap(ctx context.Context, vulns []models.DependencyVuln) (map[string]map[string]any, error) + func PurlVersionMatches(patternPurl, pathPurl packageurl.PackageURL) (bool, error) + func ToCELExpression(cveID string, pattern PathPattern) string + func VexRuleTitle(cveID string, pattern PathPattern) string + type Action string + const ActionAllow + const ActionDeny + type CompiledPackageRule struct + Program cel.Program + Rule PackageRule + func CompilePackageRules(rules []PackageRule) ([]CompiledPackageRule, error) + func ParsePackageRules(content string) ([]CompiledPackageRule, error) + type CompiledVEXRule struct + CVEScope *string + Program cel.Program + type Package struct + Ecosystem string + Name string + Provenance *Provenance + Publisher *Publisher + Purl string + Registry string + ReleasedAt time.Time + Suite string + Version string + func (p Package) ToCELMap() map[string]any + type PackageRule struct + Action Action + Expr string + Name string + type PathPattern []string + func (p PathPattern) Matches(path []string, artifactPurls []string) bool + func (p PathPattern) SoftMatches(path []string) bool + type Provenance struct + Builder string + SourceRepository string + type Publisher struct + ChangedSinceLastVersion bool + Name string