sca

Documentation

Index

• Constants
• Variables
• func BuildImpactPathsForScanResponse(scanResult []services.ScanResponse, dependencyTree []*xrayUtils.GraphNode) []services.ScanResponse
• func CreateTestWorkspace(t *testing.T, sourceDir string) (string, func())
• func GetExcludePattern(params utils.AuditParams) string
• func GetMsgToUserForCurationBlock(isCurationCmd bool, tech techutils.Technology, cmdOutput string) (msgToUser string)
• func GetScaScansStatusCode(err error, results ...services.ScanResponse) int
• func LogExecutableVersion(executable string)
• func RunXrayDependenciesTreeScanGraph(scanGraphParams *scangraph.ScanGraphParams) (results []services.ScanResponse, err error)

Constants

const (
	// Visual Studio inner directory.
	DotVsRepoSuffix = ".vs"
)

Variables

var CurationErrorMsgToUserTemplate = "Failed to retrieve the dependencies tree for the %s project. Please contact your " +
	"Artifactory administrator to verify pass-through for Curation audit is enabled for your project"

Functions

func BuildImpactPathsForScanResponse

func BuildImpactPathsForScanResponse(scanResult []services.ScanResponse, dependencyTree []*xrayUtils.GraphNode) []services.ScanResponse

BuildImpactPathsForScanResponse builds the full impact paths for each vulnerability found in the scanResult argument, using the dependencyTrees argument. Returns the updated services.ScanResponse slice.

func CreateTestWorkspace

func CreateTestWorkspace(t *testing.T, sourceDir string) (string, func())

func GetExcludePattern

func GetExcludePattern(params utils.AuditParams) string

func GetMsgToUserForCurationBlock

func GetMsgToUserForCurationBlock(isCurationCmd bool, tech techutils.Technology, cmdOutput string) (msgToUser string)

func GetScaScansStatusCode

func GetScaScansStatusCode(err error, results ...services.ScanResponse) int

Infer the status code of SCA Xray scan, must have at least one result, if err occurred or any of the results is `failed` return 1, otherwise return 0.

func LogExecutableVersion

func LogExecutableVersion(executable string)

GetExecutableVersion gets an executable version and prints to the debug log if possible. Only supported for package managers that use "--version".

func RunXrayDependenciesTreeScanGraph

func RunXrayDependenciesTreeScanGraph(scanGraphParams *scangraph.ScanGraphParams) (results []services.ScanResponse, err error)