context

Documentation

Overview

Package context offers a set of methods which permit components to

add information about the context of each vulnerability
this information is highly depended on the actual vulnerability and the component.
For example for SAST components, context can be a call graph or
a few lines of code before and after the line that triggered the finding.
For DAST components it can be a serialised request/response.

Index

• Constants
• func ExtractCode(finding *v1.Issue) (string, error)
• func ExtractCodeFromFileTarget(issueTarget string) (string, error)

Constants

const DefaultLineRange = 10

DefaultLineRange controls how many lines of code context will be returned by default

Functions

func ExtractCode

func ExtractCode(finding *v1.Issue) (string, error)

ExtractCode takes a path and line (or line range) for a vulnerable code segment and returns the DefaultLineRange lines above and the DefaultLineRange lines below the vulnerability. It does not take into account end of function.

Deprecated: This should not be used. Use ExtractCodeFromFileTarget instead.

func ExtractCodeFromFileTarget

func ExtractCodeFromFileTarget(issueTarget string) (string, error)

ExtractCodeFromFileTarget takes a filepath target and returns the code snippet. It expects the target to be in the format of producers.GetFileTarget