library

Documentation

Index

• Variables
• type Advisory
  • func NewAdvisory(lang string) *Advisory
  • func (s *Advisory) DetectVulnerabilities(pkgName string, pkgVer *semver.Version) ([]types.DetectedVulnerability, error)
• type Detector
  • func NewDetector(factory Factory) Detector
  • func (d Detector) Detect(_, filePath string, _ time.Time, pkgs []ftypes.LibraryInfo) ([]types.DetectedVulnerability, error)
• type Driver
  • func NewDriver(lang string, advisories ...advisory) Driver
  • func (d *Driver) Detect(pkgName string, pkgVer *semver.Version) ([]types.DetectedVulnerability, error)
  • func (d *Driver) Type() string
• type DriverFactory
  • func (d DriverFactory) NewDriver(filename string) (Driver, error)
• type Factory
• type MockOperation
  • func (_m *MockOperation) ApplyDetectExpectation(e OperationDetectExpectation)
  • func (_m *MockOperation) ApplyDetectExpectations(expectations []OperationDetectExpectation)
  • func (_m *MockOperation) Detect(imageName string, filePath string, created time.Time, pkgs []types.LibraryInfo) ([]pkgtypes.DetectedVulnerability, error)
• type Operation
• type OperationDetectArgs
• type OperationDetectExpectation
• type OperationDetectReturns

Variables

var SuperSet = wire.NewSet(
	wire.Struct(new(DriverFactory)),
	wire.Bind(new(Factory), new(DriverFactory)),
	NewDetector,
	wire.Bind(new(Operation), new(Detector)),
)

Types

type Advisory

type Advisory struct {
	// contains filtered or unexported fields
}

Advisory represents security advisories for each programming language

func NewAdvisory

func NewAdvisory(lang string) *Advisory

func (*Advisory) DetectVulnerabilities

func (s *Advisory) DetectVulnerabilities(pkgName string, pkgVer *semver.Version) ([]types.DetectedVulnerability, error)

DetectVulnerabilities scans buckets with the prefix according to the programming language in "Advisory". If "lang" is python, it looks for buckets with "python::" and gets security advisories from those buckets. It allows us to add a new data source with the lang prefix (e.g. python::new-data-source) and detect vulnerabilities without specifying a specific bucket name.

type Detector

type Detector struct {
	// contains filtered or unexported fields
}

func NewDetector

func NewDetector(factory Factory) Detector

func (Detector) Detect

func (d Detector) Detect(_, filePath string, _ time.Time, pkgs []ftypes.LibraryInfo) ([]types.DetectedVulnerability, error)

type Driver

type Driver struct {
	// contains filtered or unexported fields
}

func NewDriver

func NewDriver(lang string, advisories ...advisory) Driver

func (*Driver) Detect

func (d *Driver) Detect(pkgName string, pkgVer *semver.Version) ([]types.DetectedVulnerability, error)

func (*Driver) Type

func (d *Driver) Type() string

type DriverFactory

type DriverFactory struct{}

func (DriverFactory) NewDriver

func (d DriverFactory) NewDriver(filename string) (Driver, error)

type Factory

type Factory interface {
	NewDriver(filename string) (Driver, error)
}

type MockOperation

type MockOperation struct {
	mock.Mock
}

MockOperation is an autogenerated mock type for the Operation type

func (*MockOperation) ApplyDetectExpectation

func (_m *MockOperation) ApplyDetectExpectation(e OperationDetectExpectation)

func (*MockOperation) ApplyDetectExpectations

func (_m *MockOperation) ApplyDetectExpectations(expectations []OperationDetectExpectation)

func (*MockOperation) Detect

func (_m *MockOperation) Detect(imageName string, filePath string, created time.Time, pkgs []types.LibraryInfo) ([]pkgtypes.DetectedVulnerability, error)

Detect provides a mock function with given fields: imageName, filePath, created, pkgs

type Operation

type Operation interface {
	Detect(imageName string, filePath string, created time.Time, pkgs []ftypes.LibraryInfo) (vulns []types.DetectedVulnerability, err error)
}

type OperationDetectArgs

type OperationDetectArgs struct {
	ImageName         string
	ImageNameAnything bool
	FilePath          string
	FilePathAnything  bool
	Created           time.Time
	CreatedAnything   bool
	Pkgs              []types.LibraryInfo
	PkgsAnything      bool
}

type OperationDetectExpectation

type OperationDetectExpectation struct {
	Args    OperationDetectArgs
	Returns OperationDetectReturns
}

type OperationDetectReturns

type OperationDetectReturns struct {
	Vulns []pkgtypes.DetectedVulnerability
	Err   error
}