grype

Documentation

Index

• func FindVulnerabilities(store store.Store, userImageStr string, scopeOpt source.Scope, ...) (match.Matches, pkg.Context, []pkg.Package, error)
• func FindVulnerabilitiesForPackage(store store.Store, d *linux.Release, matchers []matcher.Matcher, ...) match.Matches
• func HasSeverityAtOrAbove(store vulnerability.MetadataProvider, severity vulnerability.Severity, ...) bool
• func LoadVulnerabilityDB(cfg db.Config, update bool) (*store.Store, *db.Status, *db.Closer, error)
• func SetBus(b *partybus.Bus)
• func SetLogger(l logger.Logger)
• type VulnerabilityMatcher
  • func DefaultVulnerabilityMatcher(store store.Store) *VulnerabilityMatcher
  • func (m *VulnerabilityMatcher) FailAtOrAboveSeverity(severity *vulnerability.Severity) *VulnerabilityMatcher
  • func (m *VulnerabilityMatcher) FindMatches(pkgs []pkg.Package, context pkg.Context) (remainingMatches *match.Matches, ignoredMatches []match.IgnoredMatch, ...)
  • func (m *VulnerabilityMatcher) WithIgnoreRules(ignoreRules []match.IgnoreRule) *VulnerabilityMatcher
  • func (m *VulnerabilityMatcher) WithMatchers(matchers []matcher.Matcher) *VulnerabilityMatcher

Functions

func FindVulnerabilities

func FindVulnerabilities(store store.Store, userImageStr string, scopeOpt source.Scope, registryOptions *image.RegistryOptions) (match.Matches, pkg.Context, []pkg.Package, error)

TODO: deprecated, will remove before v1.0.0

func FindVulnerabilitiesForPackage

func FindVulnerabilitiesForPackage(store store.Store, d *linux.Release, matchers []matcher.Matcher, packages []pkg.Package) match.Matches

TODO: deprecated, will remove before v1.0.0

func HasSeverityAtOrAbove

func HasSeverityAtOrAbove(store vulnerability.MetadataProvider, severity vulnerability.Severity, matches match.Matches) bool

func LoadVulnerabilityDB

func LoadVulnerabilityDB(cfg db.Config, update bool) (*store.Store, *db.Status, *db.Closer, error)

func SetBus

func SetBus(b *partybus.Bus)

func SetLogger

func SetLogger(l logger.Logger)

Types

type VulnerabilityMatcher

type VulnerabilityMatcher struct {
	Store          store.Store
	Matchers       []matcher.Matcher
	IgnoreRules    []match.IgnoreRule
	FailSeverity   *vulnerability.Severity
	NormalizeByCVE bool
	VexProcessor   *vex.Processor
}

func DefaultVulnerabilityMatcher

func DefaultVulnerabilityMatcher(store store.Store) *VulnerabilityMatcher

func (*VulnerabilityMatcher) FailAtOrAboveSeverity

func (m *VulnerabilityMatcher) FailAtOrAboveSeverity(severity *vulnerability.Severity) *VulnerabilityMatcher

func (*VulnerabilityMatcher) FindMatches

func (m *VulnerabilityMatcher) FindMatches(pkgs []pkg.Package, context pkg.Context) (remainingMatches *match.Matches, ignoredMatches []match.IgnoredMatch, err error)

func (*VulnerabilityMatcher) WithIgnoreRules

func (m *VulnerabilityMatcher) WithIgnoreRules(ignoreRules []match.IgnoreRule) *VulnerabilityMatcher

func (*VulnerabilityMatcher) WithMatchers

func (m *VulnerabilityMatcher) WithMatchers(matchers []matcher.Matcher) *VulnerabilityMatcher