library

Documentation

Index

• func Detect(ctx context.Context, libType ftypes.LangType, pkgs []ftypes.Package) ([]types.DetectedVulnerability, error)
• type Driver
  • func NewDriver(libType ftypes.LangType) (Driver, bool)
  • func (d *Driver) DetectVulnerabilities(pkgID, pkgName, pkgVer string) ([]types.DetectedVulnerability, error)
  • func (d *Driver) Type() string

Functions

func Detect

func Detect(ctx context.Context, libType ftypes.LangType, pkgs []ftypes.Package) ([]types.DetectedVulnerability, error)

Detect scans language-specific packages and returns vulnerabilities.

Types

type Driver

type Driver struct {
	// contains filtered or unexported fields
}

Driver represents security advisories for each programming language

func NewDriver

func NewDriver(libType ftypes.LangType) (Driver, bool)

NewDriver returns a driver according to the library type

func (*Driver) DetectVulnerabilities

func (d *Driver) DetectVulnerabilities(pkgID, pkgName, pkgVer string) ([]types.DetectedVulnerability, error)

DetectVulnerabilities scans buckets with the prefix according to the ecosystem. If "ecosystem" is pip, it looks for buckets with "pip::" and gets security advisories from those buckets. It allows us to add a new data source with the ecosystem prefix (e.g. pip::new-data-source) and detect vulnerabilities without specifying a specific bucket name.

func (*Driver) Type

func (d *Driver) Type() string

Type returns the driver ecosystem