Directories
¶
| Path | Synopsis |
|---|---|
|
Package aibom discovers evidence of AI coding agents and AI-SDK usage in a codebase and maps it to a CycloneDX AI Bill of Materials.
|
Package aibom discovers evidence of AI coding agents and AI-SDK usage in a codebase and maps it to a CycloneDX AI Bill of Materials. |
|
aibomgen
command
Command aibomgen renders the AIBOM detection documentation from the single source of truth: the embedded catalog (internal/aibom/catalog/*.json).
|
Command aibomgen renders the AIBOM detection documentation from the single source of truth: the embedded catalog (internal/aibom/catalog/*.json). |
|
Package analytics provides Google Analytics 4 (GA4) Measurement Protocol integration for server-side event tracking from the Vulnetix CLI.
|
Package analytics provides Google Analytics 4 (GA4) Measurement Protocol integration for server-side event tracking from the Vulnetix CLI. |
|
Package analyze produces the `vulnetix analyze` report: a repository's tech-stack graph, the cross-repo join keys other repositories match against, and the metrics for that repository — each metric carrying the evidence that produced it.
|
Package analyze produces the `vulnetix analyze` report: a repository's tech-stack graph, the cross-repo join keys other repositories match against, and the metrics for that repository — each metric carrying the evidence that produced it. |
|
forge
Package forge talks to the code-hosting platform — today, GitHub.
|
Package forge talks to the code-hosting platform — today, GitHub. |
|
Package cbom discovers cryptographic usage in a codebase — in source, config, certificates/keys on disk and declared crypto libraries — and maps it to a CycloneDX Cryptography Bill of Materials, classifying each algorithm for post-quantum posture (quantum-safe | quantum-vulnerable | deprecated | hybrid).
|
Package cbom discovers cryptographic usage in a codebase — in source, config, certificates/keys on disk and declared crypto libraries — and maps it to a CycloneDX Cryptography Bill of Materials, classifying each algorithm for post-quantum posture (quantum-safe | quantum-vulnerable | deprecated | hybrid). |
|
cbomgen
command
Command cbomgen renders the CBOM detection documentation from the single source of truth: the embedded catalog (internal/cbom/catalog/*.json).
|
Command cbomgen renders the CBOM detection documentation from the single source of truth: the embedded catalog (internal/cbom/catalog/*.json). |
|
Package ecosystems resolves the on-disk locations where a project's dependencies are installed/cached, per programming-language / package-manager ecosystem.
|
Package ecosystems resolves the on-disk locations where a project's dependencies are installed/cached, per programming-language / package-manager ecosystem. |
|
Package ignore implements .gitignore-style path matching shared by the scan and sast filesystem walkers.
|
Package ignore implements .gitignore-style path matching shared by the scan and sast filesystem walkers. |
|
Package managedfile writes and reverts Vulnetix-owned regions of a user's config files without disturbing the rest of the file.
|
Package managedfile writes and reverts Vulnetix-owned regions of a user's config files without disturbing the rest of the file. |
|
Package memory manages the .vulnetix/memory.yaml file that persists scan state between runs — last scan summary, history, and cached findings.
|
Package memory manages the .vulnetix/memory.yaml file that persists scan state between runs — last scan summary, history, and cached findings. |
|
Package reachability runs tree-sitter S-expression queries supplied by vdb-manager against source files to determine whether a known- vulnerable code pattern is present (direct mode) or reachable from first-party code (transitive mode).
|
Package reachability runs tree-sitter S-expression queries supplied by vdb-manager against source files to determine whether a known- vulnerable code pattern is present (direct mode) or reachable from first-party code (transitive mode). |
|
secretsgen
command
Command secretsgen renders the high-fidelity secret-detection rule set and its documentation from a single source of truth: catalog.json.
|
Command secretsgen renders the high-fidelity secret-detection rule set and its documentation from a single source of truth: catalog.json. |
|
Package secretscan provides binary file inspection and git history scanning helpers used by the secrets detection stage.
|
Package secretscan provides binary file inspection and git history scanning helpers used by the secrets detection stage. |
|
Package suppress holds the shared "ignore rule" matching logic used by every scanner pipeline (SAST family, SCA, license, malscan) to drop findings that an org-level or local Suppression covers, before report output is generated.
|
Package suppress holds the shared "ignore rule" matching logic used by every scanner pipeline (SAST family, SCA, license, malscan) to drop findings that an org-level or local Suppression covers, before report output is generated. |
|
Package suppressdrift relocates code-anchored suppressions (nosec directives and file/line ignore rules) as the code they pin to moves through git history.
|
Package suppressdrift relocates code-anchored suppressions (nosec directives and file/line ignore rules) as the code they pin to moves through git history. |
|
Package testsuite detects whether a source-code finding lives in a project's test suite, and identifies the testing framework responsible.
|
Package testsuite detects whether a source-code finding lives in a project's test suite, and identifies the testing framework responsible. |
|
Package treesitter wires the vdb-manager language identifiers used in x_treeSitterQueries.language to concrete tree-sitter grammars bundled via github.com/smacker/go-tree-sitter.
|
Package treesitter wires the vdb-manager language identifiers used in x_treeSitterQueries.language to concrete tree-sitter grammars bundled via github.com/smacker/go-tree-sitter. |
|
Package triage provides a provider abstraction for fetching vulnerability alerts from external sources (GitHub Dependabot, Snyk, etc.) and enriching them with VDB remediation data.
|
Package triage provides a provider abstraction for fetching vulnerability alerts from external sources (GitHub Dependabot, Snyk, etc.) and enriching them with VDB remediation data. |
|
Package versions provides SemVer-aware version parsing, comparison, range evaluation, and CVE 5.1 affected/unaffected status determination.
|
Package versions provides SemVer-aware version parsing, comparison, range evaluation, and CVE 5.1 affected/unaffected status determination. |
Click to show internal directories.
Click to hide internal directories.