Documentation
¶
Overview ¶
Package analysis provides OSV vulnerability database integration for Deputy.
The osv subpackage contains the canonical types and functions for querying the OSV database and processing vulnerability results:
- osv.PkgInput: package query input
- osv.Query: batch queries returning domain types (findings + advisories)
- osv.QueryRaw: batch queries returning flat Vulnerability records
- osv.Client: client interface for OSV API
Downstream processing (consolidation, severity classification, reporting) is handled by internal/vulnerability and internal/scanning.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package advisorysource defines Deputy's advisory-source seam: the abstraction over components that, given a set of packages, return known advisories (vulnerabilities and malware) affecting them.
|
Package advisorysource defines Deputy's advisory-source seam: the abstraction over components that, given a set of packages, return known advisories (vulnerabilities and malware) affecting them. |
|
Package osv provides OSV integration and conversion into Deputy's vulnerability domain types.
|
Package osv provides OSV integration and conversion into Deputy's vulnerability domain types. |
Click to show internal directories.
Click to hide internal directories.