bom

package

Versions in this module

v1

v1.6.2

Oct 30, 2026 GO-2026-5939

GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Changes in this version

+ const MaxDocument

+ var ErrBadFormat = errors.New("java/bom: bad format")

+ var ErrNoProduct = errors.New("java/bom: no product CPE")

+ var ErrTooLarge = errors.New("java/bom: document exceeds size limit")

+ var HashSHA1 = unique.Make(`sha1`)

+ var HashSHA256 = unique.Make(`sha256`)

+ func FormatFromName(name string) (cyclonedx.BOMFileFormat, error)

+ func LoadCDX(ctx context.Context, r io.ReaderAt, format cyclonedx.BOMFileFormat) (iter.Seq2[Package, error], error)

+ func PopulatePackage(pkg *claircore.Package, bp Package, sbomFile string) error

+ func ReadMax(r io.Reader) ([]byte, error)

+ type Package struct

+ CPEs []cpe.WFN

+ Hashes map[unique.Handle[string]][]byte

+ Location string

+ PURL packageurl.PackageURL

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL