model

Documentation

Index

• type Config
  • func BuildConfig(configData ...[]byte) (*Config, error)
  • func LoadConfigsFromDir(path string) (*Config, error)
• type GitHubCommit
  • func (x *GitHubCommit) Validate() error
• type GitHubIssueComment
• type GitHubMetadata
• type GitHubPullRequest
• type GitHubRepo
  • func (x *GitHubRepo) Validate() error
• type GitHubUser
• type IgnoreConfig
• type IgnoreVuln
  • func (x IgnoreVuln) IsActive(now time.Time) bool
• type Scan
• type ScanGitHubRepoInput
  • func (x *ScanGitHubRepoInput) Validate() error
• type ScanRawRecord

Types

type Config

type Config struct {
	IgnoreList []IgnoreConfig
}

func BuildConfig

func BuildConfig(configData ...[]byte) (*Config, error)

func LoadConfigsFromDir

func LoadConfigsFromDir(path string) (*Config, error)

LoadConfigsFromDir loads configuration files from the repository. The configuration files are used to scan the repository with Trivy. The configuration .cue files are read recursively from the root directory of the repository.

type GitHubCommit

type GitHubCommit struct {
	GitHubRepo
	Committer GitHubUser `json:"committer" bigquery:"committer"`
	CommitID  string     `json:"commit_id" bigquery:"commit_id"`
	Branch    string     `json:"branch" bigquery:"branch"`
	Ref       string     `json:"ref" bigquery:"ref"`
}

func (*GitHubCommit) Validate

func (x *GitHubCommit) Validate() error

type GitHubIssueComment

type GitHubIssueComment struct {
	ID          string
	Login       string
	Body        string
	IsMinimized bool
}

type GitHubMetadata

type GitHubMetadata struct {
	GitHubCommit
	PullRequest   *GitHubPullRequest `json:"pull_request"`
	DefaultBranch string             `json:"default_branch"`
}

type GitHubPullRequest

type GitHubPullRequest struct {
	ID           int64      `json:"id"`
	Number       int        `json:"number"`
	BaseBranch   string     `json:"base_branch"`
	BaseCommitID string     `json:"base_commit_id"`
	User         GitHubUser `json:"user"`
}

type GitHubRepo

type GitHubRepo struct {
	RepoID   int64  `json:"repo_id" bigquery:"repo_id"`
	Owner    string `json:"owner" bigquery:"owner"`
	RepoName string `json:"repo_name" bigquery:"repo_name"`
}

func (*GitHubRepo) Validate

func (x *GitHubRepo) Validate() error

type GitHubUser

type GitHubUser struct {
	ID    int64  `json:"id"`
	Login string `json:"login"`
	Email string `json:"email"`
}

type IgnoreConfig

type IgnoreConfig struct {
	Target string
	Vulns  []IgnoreVuln
}

type IgnoreVuln

type IgnoreVuln struct {
	ID        string
	Comment   string
	ExpiresAt time.Time
}

func (IgnoreVuln) IsActive

func (x IgnoreVuln) IsActive(now time.Time) bool

type Scan

type Scan struct {
	ID        types.ScanID   `bigquery:"id" firestore:"id" json:"id"`
	Timestamp time.Time      `bigquery:"timestamp" firestore:"timestamp" json:"timestamp"`
	GitHub    GitHubMetadata `bigquery:"github" firestore:"github" json:"github"`
	Report    trivy.Report   `bigquery:"report" firestore:"report" json:"report"`
	Config    string         `bigquery:"config" firestore:"config" json:"config"`
}

type ScanGitHubRepoInput

type ScanGitHubRepoInput struct {
	GitHubMetadata
	InstallID types.GitHubAppInstallID
}

func (*ScanGitHubRepoInput) Validate

func (x *ScanGitHubRepoInput) Validate() error

type ScanRawRecord

type ScanRawRecord struct {
	Scan
	Timestamp int64 `bigquery:"timestamp" firestore:"timestamp" json:"timestamp"`
}