sarifparser

Documentation

Index

• Constants
• Variables
• func PrepareSarifScaViolations(cmdType utils.CommandType, target results.ScanTarget, ...) ([]*sarif.Result, map[string]*sarif.ReportingDescriptor, error)
• func PrepareSarifScaVulnerabilities(cmdType utils.CommandType, target results.ScanTarget, ...) ([]*sarif.Result, map[string]*sarif.ReportingDescriptor, error)
• type CmdResultsSarifConverter
  • func NewCmdResultsSarifConverter(baseUrl string, ...) *CmdResultsSarifConverter
  • func (sc *CmdResultsSarifConverter) Get() (*sarif.Report, error)
  • func (sc *CmdResultsSarifConverter) ParseIacs(target results.ScanTarget, violations bool, ...) (err error)
  • func (sc *CmdResultsSarifConverter) ParseLicenses(_ results.ScanTarget, _ results.ScanResult[services.ScanResponse]) (err error)
  • func (sc *CmdResultsSarifConverter) ParseNewTargetResults(target results.ScanTarget, errors ...error) (err error)
  • func (sc *CmdResultsSarifConverter) ParseSast(target results.ScanTarget, violations bool, ...) (err error)
  • func (sc *CmdResultsSarifConverter) ParseScaIssues(target results.ScanTarget, violations bool, ...) (err error)
  • func (sc *CmdResultsSarifConverter) ParseSecrets(target results.ScanTarget, violations bool, ...) (err error)
  • func (sc *CmdResultsSarifConverter) Reset(cmdType utils.CommandType, _, xrayVersion string, entitledForJas, _ bool, ...) (err error)

Constants

const (
	CurrentWorkflowNameEnvVar      = "GITHUB_WORKFLOW"
	CurrentWorkflowRunNumberEnvVar = "GITHUB_RUN_NUMBER"
	CurrentWorkflowWorkspaceEnvVar = "GITHUB_WORKSPACE"

	MissingCveScore = "0"

	// #nosec G101 -- Not credentials.
	BinarySecretScannerToolName = "JFrog Binary Secrets Scanner"
	ScaScannerToolName          = "JFrog Xray Scanner"
)

Variables

var (
	GithubBaseWorkflowDir = filepath.Join(".github", "workflows")
)

Functions

func PrepareSarifScaViolations

func PrepareSarifScaViolations(cmdType utils.CommandType, target results.ScanTarget, violations []services.Violation, entitledForJas bool, applicabilityRuns ...*sarif.Run) ([]*sarif.Result, map[string]*sarif.ReportingDescriptor, error)

func PrepareSarifScaVulnerabilities

func PrepareSarifScaVulnerabilities(cmdType utils.CommandType, target results.ScanTarget, vulnerabilities []services.Vulnerability, entitledForJas bool, applicabilityRuns ...*sarif.Run) ([]*sarif.Result, map[string]*sarif.ReportingDescriptor, error)

Types

type CmdResultsSarifConverter

type CmdResultsSarifConverter struct {
	// contains filtered or unexported fields
}

func NewCmdResultsSarifConverter

func NewCmdResultsSarifConverter(baseUrl string, includeVulnerabilities, hasViolationContext, patchBinaryPaths bool) *CmdResultsSarifConverter

func (*CmdResultsSarifConverter) Get

func (sc *CmdResultsSarifConverter) Get() (*sarif.Report, error)

func (*CmdResultsSarifConverter) ParseIacs

func (sc *CmdResultsSarifConverter) ParseIacs(target results.ScanTarget, violations bool, iacs []results.ScanResult[[]*sarif.Run]) (err error)

func (*CmdResultsSarifConverter) ParseLicenses

func (sc *CmdResultsSarifConverter) ParseLicenses(_ results.ScanTarget, _ results.ScanResult[services.ScanResponse]) (err error)

func (*CmdResultsSarifConverter) ParseNewTargetResults

func (sc *CmdResultsSarifConverter) ParseNewTargetResults(target results.ScanTarget, errors ...error) (err error)

func (*CmdResultsSarifConverter) ParseSast

func (sc *CmdResultsSarifConverter) ParseSast(target results.ScanTarget, violations bool, sast []results.ScanResult[[]*sarif.Run]) (err error)

func (*CmdResultsSarifConverter) ParseScaIssues

func (sc *CmdResultsSarifConverter) ParseScaIssues(target results.ScanTarget, violations bool, scaResponse results.ScanResult[services.ScanResponse], applicableScan ...results.ScanResult[[]*sarif.Run]) (err error)

func (*CmdResultsSarifConverter) ParseSecrets

func (sc *CmdResultsSarifConverter) ParseSecrets(target results.ScanTarget, violations bool, secrets []results.ScanResult[[]*sarif.Run]) (err error)

func (*CmdResultsSarifConverter) Reset

func (sc *CmdResultsSarifConverter) Reset(cmdType utils.CommandType, _, xrayVersion string, entitledForJas, _ bool, _ error) (err error)