context

Documentation

Overview

Package context offers a set of methods which permit components to

add information about the context of each vulnerability
this information is highly depended on the actual vulnerability and the component.
For example for SAST components, context can be a call graph or
a few lines of code before and after the line that triggered the finding.
For DAST components it can be a serialised request/response.

Index

• Constants
• func ExtractCode(finding *v1.Issue) (string, error)

Constants

const DefaultLineRange = 10

DefaultLineRange controls how many lines of code context will be returned by default

Functions

func ExtractCode

func ExtractCode(finding *v1.Issue) (string, error)

ExtractCode takes a path and line (or line range) for a vulnerable code segment and returns the DefaultLineRange lines above and the DefaultLineRange lines below the vulnerability. It does not take into account end of function.