vex

Documentation

Index

• type CSAF
  • func (v *CSAF) Filter(result *types.Result, bom *core.BOM)
  • func (v *CSAF) NotAffected(vuln types.DetectedVulnerability, product, subProduct *core.Component) (types.ModifiedFinding, bool)
• type CycloneDX
  • func (v *CycloneDX) Filter(result *types.Result, _ *core.BOM)
• type NotAffected
• type OpenVEX
  • func (v *OpenVEX) Filter(result *types.Result, bom *core.BOM)
  • func (v *OpenVEX) Matches(vuln types.DetectedVulnerability, product, subComponent *core.Component) []openvex.Statement
  • func (v *OpenVEX) NotAffected(vuln types.DetectedVulnerability, product, subComponent *core.Component) (types.ModifiedFinding, bool)
• type Statement
• type VEX
  • func New(filePath string, report types.Report) (VEX, error)

Types

type CSAF

type CSAF struct {
	// contains filtered or unexported fields
}

func (*CSAF) Filter

func (v *CSAF) Filter(result *types.Result, bom *core.BOM)

func (*CSAF) NotAffected

func (v *CSAF) NotAffected(vuln types.DetectedVulnerability, product, subProduct *core.Component) (types.ModifiedFinding, bool)

type CycloneDX

type CycloneDX struct {
	// contains filtered or unexported fields
}

func (*CycloneDX) Filter

func (v *CycloneDX) Filter(result *types.Result, _ *core.BOM)

type NotAffected

type NotAffected func(vuln types.DetectedVulnerability, product, subComponent *core.Component) (types.ModifiedFinding, bool)

type OpenVEX

type OpenVEX struct {
	// contains filtered or unexported fields
}

func (*OpenVEX) Filter

func (v *OpenVEX) Filter(result *types.Result, bom *core.BOM)

func (*OpenVEX) Matches

func (v *OpenVEX) Matches(vuln types.DetectedVulnerability, product, subComponent *core.Component) []openvex.Statement

func (*OpenVEX) NotAffected

func (v *OpenVEX) NotAffected(vuln types.DetectedVulnerability, product, subComponent *core.Component) (types.ModifiedFinding, bool)

type Statement

type Statement struct {
	VulnerabilityID string
	Affects         []string
	Status          types.FindingStatus
	Justification   string
}

type VEX

type VEX interface {
	Filter(*types.Result, *core.BOM)
}

VEX represents Vulnerability Exploitability eXchange. It abstracts multiple VEX formats. Note: This is in the experimental stage and does not yet support many specifications. The implementation may change significantly.

func New

func New(filePath string, report types.Report) (VEX, error)