policy

Documentation

Index

• Constants
• type Client
  • func NewClient(cacheDir string, quiet bool, policyBundleRepo string, opts ...Option) (*Client, error)
  • func (c *Client) Clear() error
  • func (c *Client) DownloadBuiltinPolicies(ctx context.Context) error
  • func (c *Client) GetMetadata() (*Metadata, error)
  • func (c *Client) LoadBuiltinPolicies() ([]string, error)
  • func (c *Client) NeedsUpdate(ctx context.Context) (bool, error)
• type Metadata
  • func (m Metadata) String() string
• type Option
  • func WithClock(c clock.Clock) Option
  • func WithOCIArtifact(art *oci.Artifact) Option

Constants

const (
	BundleVersion    = 0 // Latest released MAJOR version for defsec
	BundleRepository = "ghcr.io/aquasecurity/trivy-policies"
)

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client implements policy operations

func NewClient

func NewClient(cacheDir string, quiet bool, policyBundleRepo string, opts ...Option) (*Client, error)

NewClient is the factory method for policy client

func (*Client) Clear

func (c *Client) Clear() error

func (*Client) DownloadBuiltinPolicies

func (c *Client) DownloadBuiltinPolicies(ctx context.Context) error

DownloadBuiltinPolicies download default policies from GitHub Pages

func (*Client) GetMetadata

func (c *Client) GetMetadata() (*Metadata, error)

func (*Client) LoadBuiltinPolicies

func (c *Client) LoadBuiltinPolicies() ([]string, error)

LoadBuiltinPolicies loads default policies

func (*Client) NeedsUpdate

func (c *Client) NeedsUpdate(ctx context.Context) (bool, error)

NeedsUpdate returns if the default policy should be updated

type Metadata

type Metadata struct {
	Digest       string
	DownloadedAt time.Time
}

Metadata holds default policy metadata

func (Metadata) String

func (m Metadata) String() string

type Option

type Option func(*options)

Option is a functional option

func WithClock

func WithClock(c clock.Clock) Option

WithClock takes a clock

func WithOCIArtifact

func WithOCIArtifact(art *oci.Artifact) Option

WithOCIArtifact takes an OCI artifact