guacanalytics

Documentation

Index

• func SearchDependentsFromStartPackage(ctx context.Context, gqlClient graphql.Client, startID string, stopID *string, ...) (map[string]BfsNode, []string, error)
• func SearchForSBOMViaArtifact(ctx context.Context, gqlclient graphql.Client, searchString string, ...) ([]string, []table.Row, error)
• func SearchForSBOMViaPkg(ctx context.Context, gqlclient graphql.Client, searchString string, ...) ([]string, []table.Row, error)
• func TopoSortFromBfsNodeMap(ctx context.Context, gqlClient graphql.Client, nodeMap map[string]BfsNode) (map[int][]string, []string, error)
• func VexSubjectString(s model.AllCertifyVEXStatementSubjectPackageOrArtifact) string
• type BfsNode
• type NodeType

Functions

func SearchDependentsFromStartPackage

func SearchDependentsFromStartPackage(ctx context.Context, gqlClient graphql.Client, startID string, stopID *string, maxDepth int) (map[string]BfsNode, []string, error)

func SearchForSBOMViaArtifact

func SearchForSBOMViaArtifact(ctx context.Context, gqlclient graphql.Client, searchString string, maxLength int) ([]string, []table.Row, error)

func SearchForSBOMViaPkg

func SearchForSBOMViaPkg(ctx context.Context, gqlclient graphql.Client, searchString string, maxLength int, isPurl bool) ([]string, []table.Row, error)

SearchForSBOMViaPkg takes in either a purl or URI for the initial value to find the hasSBOM node. From there is recursively searches through all the dependencies to determine if it contains hasSBOM nodes. It concurrent checks the package version node if it contains vulnerabilities and VEX data. The isPurl parameter is used to know whether the searchString is expected to be a PURL.

func TopoSortFromBfsNodeMap

func TopoSortFromBfsNodeMap(ctx context.Context, gqlClient graphql.Client, nodeMap map[string]BfsNode) (map[int][]string, []string, error)

TopoSortFromBfsNodeMap sorts the nodes such that it returns a map of level -> list of nodeIDs at that level

func VexSubjectString

func VexSubjectString(s model.AllCertifyVEXStatementSubjectPackageOrArtifact) string

Types

type BfsNode

type BfsNode struct {
	Expanded bool // true once all node neighbors are added to queue
	Parents  []string
	Depth    int
	Type     NodeType

	PointOfContact   model.AllPointOfContact
	NotInBlastRadius bool // true if it is solely an informational node, not to be included in the blast radius subgraph
	// contains filtered or unexported fields
}

type NodeType

type NodeType int

const (
	PackageName NodeType = iota
	PackageVersion
	SourceName
	Artifact
)