scanner

Documentation

Index

• func AnalyzeLibrary(ctx context.Context, path string, contents []byte, filemode os.FileMode, ...) (libraryScanners []models.LibraryScanner, err error)
• func DetectKBsFromKernelVersion(release, kernelVersion string) (models.WindowsKB, error)
• func EnsureResultDir(resultsDir string, scannedAt time.Time) (currentDir string, err error)
• func ParseInstalledPkgs(distro config.Distro, kernel models.Kernel, pkgList string) (models.Packages, models.SrcPackages, error)
• func ViaHTTP(header http.Header, body string, toLocalFile bool) (models.ScanResult, error)
• type DetectedCveID
• type DummyFileInfo
  • func (d *DummyFileInfo) IsDir() bool
  • func (d *DummyFileInfo) ModTime() time.Time
  • func (d *DummyFileInfo) Mode() os.FileMode
  • func (d *DummyFileInfo) Name() string
  • func (d *DummyFileInfo) Size() int64
  • func (d *DummyFileInfo) Sys() interface{}
• type Scanner
  • func (s Scanner) Configtest() error
  • func (s Scanner) Scan() error

Functions

func AnalyzeLibrary

func AnalyzeLibrary(ctx context.Context, path string, contents []byte, filemode os.FileMode, isOffline bool) (libraryScanners []models.LibraryScanner, err error)

AnalyzeLibrary : detects library defined in artifact such as lockfile or jar

func DetectKBsFromKernelVersion

func DetectKBsFromKernelVersion(release, kernelVersion string) (models.WindowsKB, error)

func EnsureResultDir

func EnsureResultDir(resultsDir string, scannedAt time.Time) (currentDir string, err error)

EnsureResultDir ensures the directory for scan results

func ParseInstalledPkgs

func ParseInstalledPkgs(distro config.Distro, kernel models.Kernel, pkgList string) (models.Packages, models.SrcPackages, error)

ParseInstalledPkgs parses installed pkgs line

func ViaHTTP

func ViaHTTP(header http.Header, body string, toLocalFile bool) (models.ScanResult, error)

ViaHTTP scans servers by HTTP header and body

Types

type DetectedCveID

type DetectedCveID struct {
	CveID      string
	Confidence models.Confidence
}

DetectedCveID has CveID, Confidence and DetectionMethod fields LenientMatching will be true if this vulnerability is not detected by accurate version matching. see https://github.com/future-architect/vuls/pull/328

type DummyFileInfo

type DummyFileInfo struct {
	// contains filtered or unexported fields
}

DummyFileInfo is a dummy struct for libscan

func (*DummyFileInfo) IsDir

func (d *DummyFileInfo) IsDir() bool

IsDir is

func (*DummyFileInfo) ModTime

func (d *DummyFileInfo) ModTime() time.Time

ModTime is

func (*DummyFileInfo) Mode

func (d *DummyFileInfo) Mode() os.FileMode

Mode is

func (*DummyFileInfo) Name

func (d *DummyFileInfo) Name() string

Name is

func (*DummyFileInfo) Size

func (d *DummyFileInfo) Size() int64

Size is

func (*DummyFileInfo) Sys

func (d *DummyFileInfo) Sys() interface{}

Sys is

type Scanner

type Scanner struct {
	ResultsDir     string
	TimeoutSec     int
	ScanTimeoutSec int
	CacheDBPath    string
	Debug          bool
	LogToFile      bool
	LogDir         string
	Quiet          bool
	DetectIPS      bool

	Targets map[string]config.ServerInfo
}

Scanner has functions for scan

func (Scanner) Configtest

func (s Scanner) Configtest() error

Configtest checks if the server is scannable.

func (Scanner) Scan

func (s Scanner) Scan() error

Scan execute scan