Documentation
¶
Overview ¶
Package java matches Java packages recorded under a Red Hat product CPE.
Index ¶
Constants ¶
const RepositoryKey = "redhat-java-cpe-repository"
RepositoryKey is the repository key for a Red Hat product CPE attributed to a Java component. It is distinct from the Maven Central repository and from the RPM CPE repository.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type RedHatMatcher ¶
type RedHatMatcher struct{}
RedHatMatcher matches Java packages recorded under a Red Hat product CPE.
func (*RedHatMatcher) Filter ¶
func (*RedHatMatcher) Filter(record *claircore.IndexRecord) bool
Filter implements driver.Matcher.
func (*RedHatMatcher) Query ¶
func (*RedHatMatcher) Query() []driver.MatchConstraint
Query implements driver.Matcher.
func (*RedHatMatcher) Vulnerable ¶
func (*RedHatMatcher) Vulnerable(ctx context.Context, record *claircore.IndexRecord, vuln *claircore.Vulnerability) (bool, error)
Vulnerable implements driver.Matcher.
The vulnerability repository name is a normalized CPE. It must match the indexed CPE, including the Red Hat version-stream rule. An empty FixedInVersion matches any installed version. An empty installed version is not compared when a fix exists: a Maven null version is older than every real fix. Otherwise the installed Maven version is vulnerable when it is strictly older.
Source Files