Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func LoadFromMemory ¶
LoadFromMemory reconstructs the scan pretty output from .vulnetix/sbom.cdx.json. When fresh* flags are true, selective API calls are made to refresh that data.
Types ¶
type CommandManifest ¶ added in v3.56.0
type CommandManifest struct {
Commands map[string]ManifestCommand `json:"commands"`
}
CommandManifest is the serialized shape of the Cobra tree.
func BuildCommandManifest ¶ added in v3.56.0
func BuildCommandManifest() CommandManifest
BuildCommandManifest walks the live root command and records every command path with its flags. Persistent flags are attributed to the command that declares them and to every descendant, because that is how a user sees them.
type GateBreach ¶
type GateBreach struct {
Gate string // "malware" | "exploits" | "severity" | "eol"
Count int
Message string // pre-formatted, ready to print
}
GateBreach captures one quality gate's failure details.
type ManifestCommand ¶ added in v3.56.0
type ManifestCommand struct {
Short string `json:"short"`
Flags []string `json:"flags"`
Deprecated []string `json:"deprecatedFlags,omitempty"`
Subs []string `json:"subcommands,omitempty"`
}
ManifestCommand describes one command path (e.g. "auth login").
type MultiPolicyBreachError ¶
type MultiPolicyBreachError struct {
Breaches []GateBreach
}
MultiPolicyBreachError is returned when one or more quality gates are breached.
func (*MultiPolicyBreachError) Error ¶
func (e *MultiPolicyBreachError) Error() string
type PolicyBreachError ¶
type PolicyBreachError interface {
error
// contains filtered or unexported methods
}
PolicyBreachError is implemented by all quality-gate breach errors. Execute() uses this interface to suppress redundant error printing — the command itself has already printed the breach details.
type SeverityBreachError ¶
type SeverityBreachError struct {
// contains filtered or unexported fields
}
SeverityBreachError is returned when --severity threshold is breached. It signals main() to exit with code 1 without printing a redundant error message.
func (*SeverityBreachError) Error ¶
func (e *SeverityBreachError) Error() string
Source Files
¶
- ai_firewall.go
- ai_firewall_apply.go
- ai_firewall_policy.go
- aibom.go
- analyze.go
- auth.go
- banner.go
- binary_scan.go
- cbom.go
- cli_helpers.go
- cli_sca.go
- completion.go
- config.go
- config_ai_firewall.go
- env.go
- fix_prompt.go
- from_memory.go
- gh_dependabot.go
- gha.go
- gha_submit.go
- insights_graph.go
- insights_upload.go
- license.go
- malscan.go
- malscan_curation.go
- malscan_engine.go
- malscan_render.go
- malscan_sarif.go
- manifest.go
- package_firewall.go
- progress.go
- quality_gate_enforce.go
- reconcile.go
- root.go
- sarif_persist.go
- scan.go
- skills.go
- specialized_scans.go
- status_summary.go
- suppress.go
- suppress_filter.go
- suppress_sync.go
- testsuite_scan.go
- update.go
- upload.go
- vdb.go
- vdb_ai.go
- vdb_attack_techniques.go
- vdb_ecosystem.go
- vdb_exploits_poc.go
- vdb_iocs.go
- vdb_kev.go
- vdb_msrc.go
- vdb_nuclei.go
- vdb_raw.go
- vdb_reachability.go
- vdb_sightings.go
- vdb_snort_rules.go
- vdb_trends.go
- vdb_triage.go
- vdb_v2.go
- vdb_vex.go
- vdb_yara_rules.go
- version.go