vulnerability

Documentation

Index

• type Advisory
• type Cvss
• type CvssMetrics
  • func NewCvssMetrics(baseScore, exploitabilityScore, impactScore float64) CvssMetrics
• type Fix
• type FixState
  • func AllFixStates() []FixState
• type Metadata
• type MetadataProvider
• type Provider
• type ProviderByCPE
• type ProviderByDistro
• type ProviderByLanguage
• type Reference
• type Severities
  • func (s Severities) Len() int
  • func (s Severities) Less(i, j int) bool
  • func (s Severities) Swap(i, j int)
• type Severity
  • func AllSeverities() []Severity
  • func ParseSeverity(severity string) Severity
  • func (f Severity) String() string
• type Vulnerability
  • func (v Vulnerability) String() string

Types

type Advisory

type Advisory struct {
	ID   string
	Link string
}

type Cvss

type Cvss struct {
	Source         string
	Type           string
	Version        string
	Vector         string
	Metrics        CvssMetrics
	VendorMetadata interface{}
}

type CvssMetrics

type CvssMetrics struct {
	BaseScore           float64
	ExploitabilityScore *float64
	ImpactScore         *float64
}

func NewCvssMetrics

func NewCvssMetrics(baseScore, exploitabilityScore, impactScore float64) CvssMetrics

type Fix

type Fix struct {
	Versions []string
	State    FixState
}

type FixState

type FixState string

const (
	FixStateUnknown  FixState = "unknown"
	FixStateFixed    FixState = "fixed"
	FixStateNotFixed FixState = "not-fixed"
	FixStateWontFix  FixState = "wont-fix"
)

func AllFixStates

func AllFixStates() []FixState

type Metadata

type Metadata struct {
	ID          string
	DataSource  string
	Namespace   string
	Severity    string
	URLs        []string
	Description string
	Cvss        []Cvss
}

type MetadataProvider

type MetadataProvider interface {
	GetMetadata(id, namespace string) (*Metadata, error)
}

type Provider

type Provider interface {
	Get(id, namespace string) ([]Vulnerability, error)
	ProviderByDistro
	ProviderByLanguage
	ProviderByCPE
}

type ProviderByCPE

type ProviderByCPE interface {
	GetByCPE(cpe.CPE) ([]Vulnerability, error)
}

type ProviderByDistro

type ProviderByDistro interface {
	GetByDistro(*distro.Distro, pkg.Package) ([]Vulnerability, error)
}

type ProviderByLanguage

type ProviderByLanguage interface {
	GetByLanguage(syftPkg.Language, pkg.Package) ([]Vulnerability, error)
}

type Reference

type Reference struct {
	ID        string
	Namespace string
}

type Severities

type Severities []Severity

func (Severities) Len

func (s Severities) Len() int

func (Severities) Less

func (s Severities) Less(i, j int) bool

func (Severities) Swap

func (s Severities) Swap(i, j int)

type Severity

type Severity int

const (
	UnknownSeverity Severity = iota
	NegligibleSeverity
	LowSeverity
	MediumSeverity
	HighSeverity
	CriticalSeverity
)

func AllSeverities

func AllSeverities() []Severity

func ParseSeverity

func ParseSeverity(severity string) Severity

func (Severity) String

func (f Severity) String() string

type Vulnerability

type Vulnerability struct {
	PackageName            string
	Constraint             version.Constraint
	PackageQualifiers      []qualifier.Qualifier
	CPEs                   []cpe.CPE
	ID                     string
	Namespace              string
	Fix                    Fix
	Advisories             []Advisory
	RelatedVulnerabilities []Reference
}

func (Vulnerability) String

func (v Vulnerability) String() string