sources

Documentation

Index

• Constants
• Variables
• type Cve
• type Findings
• type Severity
  • func (s Severity) ToInt32() int32
• type Source
  • func NewDependencytrackSource(client dependencytrack.Client, log *logrus.Entry) Source
• type SuppressedVulnerability
• type Vulnerability
• type VulnerabilityMatch
• type VulnerabilityMetadata
• type VulnerabilitySummary
• type Workload

Constants

const DependencytrackSourceName = "dependencytrack"

const SeverityCritical = Severity("CRITICAL")

const SeverityHigh = Severity("HIGH")

const SeverityLow = Severity("LOW")

const SeverityMedium = Severity("MEDIUM")

const SeverityUnassigned = Severity("UNASSIGNED")

Variables

var ErrNoMetrics = fmt.Errorf("no metrics found")

var ErrNoProject = fmt.Errorf("no project found")

Types

type Cve

type Cve struct {
	Id          string
	Description string
	Title       string
	Link        string
	Severity    Severity
	References  map[string]string
}

type Findings

type Findings struct {
	WorkloadRef     *Workload
	Vulnerabilities []*Vulnerability
}

type Severity

type Severity string

func (Severity) ToInt32

func (s Severity) ToInt32() int32

type Source

type Source interface {
	Name() string
	SuppressVulnerability(ctx context.Context, suppressedVulnerability *SuppressedVulnerability) error
	GetVulnerabilities(ctx context.Context, imageName, imageTag string, includeSuppressed bool) ([]*Vulnerability, error)
	// TODO: add includeSuppressed bool
	GetVulnerabilitySummary(ctx context.Context, imageName, imageTag string) (*VulnerabilitySummary, error)
	MaintainSuppressedVulnerabilities(ctx context.Context, suppressed []*SuppressedVulnerability) error
}

func NewDependencytrackSource

func NewDependencytrackSource(client dependencytrack.Client, log *logrus.Entry) Source

TODO: add a cache? maybe for projects only?

type SuppressedVulnerability

type SuppressedVulnerability struct {
	ImageName    string
	ImageTag     string
	CveId        string
	Package      string
	SuppressedBy string
	Reason       string
	State        string
	Suppressed   bool
	Metadata     VulnerabilityMetadata
}

type Vulnerability

type Vulnerability struct {
	Package       string
	Suppressed    bool
	Cve           *Cve
	LatestVersion string
	Metadata      VulnerabilityMetadata
}

type VulnerabilityMatch

type VulnerabilityMatch struct {
	Finding  client.Finding
	VulnId   string
	VulnUuid string
	Found    bool
}

type VulnerabilityMetadata

type VulnerabilityMetadata interface {
}

type VulnerabilitySummary

type VulnerabilitySummary struct {
	Id         string
	Critical   int32
	High       int32
	Medium     int32
	Low        int32
	Unassigned int32
	RiskScore  int32
}

type Workload

type Workload struct {
	Cluster   string
	Namespace string
	Name      string
	Type      string
	ImageName string
	ImageTag  string
}