models

Documentation

Index

• Constants
• type Code
• type CodeIgnore
• type Configuration
  • func (c *Configuration) GetFailBuilds() bool
• type Dependencies
• type DependenciesIgnore
• type Notification
• type NotificationEventAll
• type NotificationEventNewAPIFindings
• type NotificationEventNewCodeFindings
• type NotificationEventNewDependencyFindings
• type NotificationEventNewSecretFindings
• type NotificationEvents
• type NotificationTargetEmail
• type NotificationTargetSlack
• type NotificationTargetWebhook
• type NotificationTargets
• type ScheduledNotification
• type ScheduledNotificationTargetEmail
• type ScheduledNotificationTargetSlack
• type ScheduledNotificationTargets
• type ScheduledNotificationTopics
• type Secrets
• type SecretsIgnore

Constants

const (
	ScheduledNotificationTopicTypeAll          = "all"
	ScheduledNotificationTopicTypeCode         = "code"
	ScheduledNotificationTopicTypeIaC          = "iac"
	ScheduledNotificationTopicTypeDependencies = "dependencies"
	ScheduledNotificationTopicTypeSecrets      = "secrets"
	ScheduledNotificationTopicTypeDAST         = "dast"
)

const (
	SeverityCritical = "CRITICAL"
	SeverityHigh     = "HIGH"
	SeverityMedium   = "MEDIUM"
	SeverityLow      = "LOW"
	SeverityUnknown  = "UNKNOWN"
)

Types

type Code

type Code struct {
	Ignore []CodeIgnore `yaml:"ignore,omitempty"`
}

type CodeIgnore

type CodeIgnore struct {
	CWEs    []int    `yaml:"cwes,omitempty"`
	RuleIDs []string `yaml:"rule_ids,omitempty"`
	Reason  string   `yaml:"reason,omitempty"`
	Dirs    []string `yaml:"dirs,omitempty"`
	Paths   []string `yaml:"paths,omitempty"`
	Expiry  string   `yaml:"expiry,omitempty"`

	// global config only
	Repositories []string `yaml:"repositories,omitempty"`
}

type Configuration

type Configuration struct {
	FailBuilds             *bool                            `yaml:"fail_builds,omitempty"`
	SeverityThreshold      string                           `yaml:"severity_threshold,omitempty"`
	IgnoreDirs             []string                         `yaml:"ignore_dirs,omitempty"`
	IgnorePaths            []string                         `yaml:"ignore_paths,omitempty"`
	Code                   Code                             `yaml:"code,omitempty"`
	Dependencies           Dependencies                     `yaml:"dependencies,omitempty"`
	Secrets                Secrets                          `yaml:"secrets,omitempty"`
	SecretsWhitelist       []string                         `yaml:"secrets_whitelist,omitempty"` // TODO deprecate
	Notifications          map[string]Notification          `yaml:"notifications,omitempty"`
	ScheduledNotifications map[string]ScheduledNotification `yaml:"scheduled_notifications,omitempty"`
}

func (*Configuration) GetFailBuilds

func (c *Configuration) GetFailBuilds() bool

type Dependencies

type Dependencies struct {
	Ignore []DependenciesIgnore `yaml:"ignore,omitempty"`
}

type DependenciesIgnore

type DependenciesIgnore struct {
	CVE    string   `yaml:"cve,omitempty"`
	Reason string   `yaml:"reason,omitempty"`
	Expiry string   `yaml:"expiry,omitempty"`
	Dirs   []string `yaml:"dirs,omitempty"`
	Paths  []string `yaml:"paths,omitempty"`

	// global config only
	Repositories []string `yaml:"repositories,omitempty"`
}

type Notification

type Notification struct {
	Events  NotificationEvents  `yaml:"events,omitempty"`
	Targets NotificationTargets `yaml:"targets,omitempty"`

	// global config only
	Repositories []string `yaml:"repositories,omitempty"`
}

type NotificationEventAll

type NotificationEventAll struct {
	MinimumSeverity string   `yaml:"minimum_severity,omitempty"`
	MinimumPriority int      `yaml:"minimum_priority,omitempty"`
	CWEs            []int    `yaml:"cwes,omitempty"`
	CVEs            []string `yaml:"cves,omitempty"`
	SecretTypes     []string `yaml:"secret_types,omitempty"`
}

type NotificationEventNewAPIFindings

type NotificationEventNewAPIFindings struct {
	MinimumSeverity string `yaml:"minimum_severity,omitempty"`
	MinimumPriority int    `yaml:"minimum_priority,omitempty"`
	CWEs            []int  `yaml:"cwes,omitempty"`
}

type NotificationEventNewCodeFindings

type NotificationEventNewCodeFindings struct {
	MinimumSeverity string `yaml:"minimum_severity,omitempty"`
	MinimumPriority int    `yaml:"minimum_priority,omitempty"`
	CWEs            []int  `yaml:"cwes,omitempty"`
}

type NotificationEventNewDependencyFindings

type NotificationEventNewDependencyFindings struct {
	MinimumSeverity string   `yaml:"minimum_severity,omitempty"`
	MinimumPriority int      `yaml:"minimum_priority,omitempty"`
	CWEs            []int    `yaml:"cwes,omitempty"`
	CVEs            []string `yaml:"cves,omitempty"`
}

type NotificationEventNewSecretFindings

type NotificationEventNewSecretFindings struct {
	Types []string `yaml:"types,omitempty"`
}

type NotificationEvents

type NotificationEvents struct {
	All                   *NotificationEventAll                   `yaml:"all,omitempty"`
	NewAPIFindings        *NotificationEventNewAPIFindings        `yaml:"new_api_findings,omitempty"`
	NewCodeFindings       *NotificationEventNewCodeFindings       `yaml:"new_code_findings,omitempty"`
	NewDependencyFindings *NotificationEventNewDependencyFindings `yaml:"new_dependency_findings,omitempty"`
	NewSecretFindings     *NotificationEventNewSecretFindings     `yaml:"new_secret_findings,omitempty"`
}

type NotificationTargetEmail

type NotificationTargetEmail struct {
	Address   string   `yaml:"address,omitempty"`
	Addresses []string `yaml:"addresses,omitempty"`
}

type NotificationTargetSlack

type NotificationTargetSlack struct {
	Channel  string   `yaml:"channel,omitempty"`
	Channels []string `yaml:"channels,omitempty"`
}

type NotificationTargetWebhook

type NotificationTargetWebhook struct {
	URLs []string `yaml:"urls,omitempty"`
	URL  string   `yaml:"url,omitempty"`
}

type NotificationTargets

type NotificationTargets struct {
	Webhook *NotificationTargetWebhook `yaml:"webhook,omitempty"`
	Email   *NotificationTargetEmail   `yaml:"email,omitempty"`
	Slack   *NotificationTargetSlack   `yaml:"slack,omitempty"`
}

type ScheduledNotification

type ScheduledNotification struct {
	Schedule string                       `yaml:"schedule,omitempty"`
	Timezone string                       `yaml:"timezone,omitempty"`
	Topics   ScheduledNotificationTopics  `yaml:"topics,omitempty"`
	Targets  ScheduledNotificationTargets `yaml:"targets,omitempty"`

	// global config only
	Repositories []string `yaml:"repositories,omitempty"`
}

type ScheduledNotificationTargetEmail

type ScheduledNotificationTargetEmail struct {
	Address   string   `yaml:"address,omitempty"`
	Addresses []string `yaml:"addresses,omitempty"`
}

type ScheduledNotificationTargetSlack

type ScheduledNotificationTargetSlack struct {
	Channel  string   `yaml:"channel,omitempty"`
	Channels []string `yaml:"channels,omitempty"`
}

type ScheduledNotificationTargets

type ScheduledNotificationTargets struct {
	Email *ScheduledNotificationTargetEmail `yaml:"email,omitempty"`
	Slack *ScheduledNotificationTargetSlack `yaml:"slack,omitempty"`
}

type ScheduledNotificationTopics

type ScheduledNotificationTopics struct {
	All             bool `yaml:"all,omitempty"`
	AllNewFindings  bool `yaml:"all_new_findings,omitempty"`
	NewAPIFindings  bool `yaml:"new_api_findings,omitempty"`
	NewCodeFindings bool `yaml:"new_code_findings,omitempty"`
	NewCVEs         bool `yaml:"new_cves,omitempty"`
	NewSecrets      bool `yaml:"new_secrets,omitempty"`
}

type Secrets

type Secrets struct {
	Ignore []SecretsIgnore `yaml:"ignore,omitempty"`
}

type SecretsIgnore

type SecretsIgnore struct {
	Value   string   `yaml:"value,omitempty"`
	Pattern string   `yaml:"pattern,omitempty"`
	Reason  string   `yaml:"reason,omitempty"`
	Expiry  string   `yaml:"expiry,omitempty"`
	Dirs    []string `yaml:"dirs,omitempty"`
	Paths   []string `yaml:"paths,omitempty"`

	// global config only
	Repositories []string `yaml:"repositories,omitempty"`
}