Documentation ¶
Index ¶
- Variables
- func DictionaryFind(p pkg.Package) (cpe.CPE, bool)
- func Generate(p pkg.Package) []cpe.CPE
- func GetIndexedDictionary() (_ *dictionary.Indexed, err error)
- func GetManifestFieldGroupIDs(manifest *pkg.JavaManifest, fields []string) (groupIDs []string)
- func GroupIDsFromJavaMetadata(pkgName string, metadata pkg.JavaArchive) (groupIDs []string)
- func GroupIDsFromJavaPackage(p pkg.Package) (groupIDs []string)
Constants ¶
This section is empty.
Variables ¶
View Source
var ( PrimaryJavaManifestGroupIDFields = []string{ "Bundle-SymbolicName", "Extension-Name", "Specification-Vendor", "Implementation-Vendor", "Implementation-Vendor-Id", "Implementation-Title", "Bundle-Activator", } SecondaryJavaManifestGroupIDFields = []string{ "Automatic-Module-Name", "Main-Class", "Package", } )
View Source
var DefaultArtifactIDToGroupID = map[string]string{}/* 1854 elements not displayed */
Functions ¶
func Generate ¶
Generate Create a list of CPEs for a given package, trying to guess the vendor, product tuple. We should be trying to generate the minimal set of representative CPEs, which implies that optional fields should not be included (such as target SW).
func GetIndexedDictionary ¶ added in v0.86.0
func GetIndexedDictionary() (_ *dictionary.Indexed, err error)
func GetManifestFieldGroupIDs ¶ added in v0.88.0
func GetManifestFieldGroupIDs(manifest *pkg.JavaManifest, fields []string) (groupIDs []string)
func GroupIDsFromJavaMetadata ¶ added in v0.61.0
func GroupIDsFromJavaMetadata(pkgName string, metadata pkg.JavaArchive) (groupIDs []string)
GroupIDsFromJavaMetadata returns the possible group IDs for a Java package This function is similar to GroupIDFromJavaPackage, but returns all possible group IDs and is less strict It is used as a way to generate possible candidates for CPE matching.
func GroupIDsFromJavaPackage ¶ added in v0.38.0
Types ¶
This section is empty.
Source Files ¶
Directories ¶
Path | Synopsis |
---|---|
index-generator
This program downloads the latest CPE dictionary from NIST and processes it into a JSON file that can be embedded into Syft for more accurate CPE results.
|
This program downloads the latest CPE dictionary from NIST and processes it into a JSON file that can be embedded into Syft for more accurate CPE results. |
Click to show internal directories.
Click to hide internal directories.