dxtypes

Documentation

Index

• func CanMerge(p *Package, p2 *Package) int
• func CanMergeWithVersionRange(version, versionRange string) bool
• func CompareVersionRange(target, versionRange string) bool
• type Package
  • func (p *Package) From() ([]string, []string)
  • func (p *Package) HasVersionRange() bool
  • func (p *Package) Identifier() string
  • func (down *Package) LinkDepend(up *Package)
  • func (p *Package) Merge(p2 *Package) *Package
  • func (p *Package) SetFrom(analyzer, file string)
  • func (p Package) String() string
• type PackageRelationShip
• type SCABom
• type Service

Functions

func CanMerge

func CanMerge(p *Package, p2 *Package) int

func CanMergeWithVersionRange

func CanMergeWithVersionRange(version, versionRange string) bool

p2 is version range

func CompareVersionRange

func CompareVersionRange(target, versionRange string) bool

Types

type Package

type Package struct {
	Name           string
	Version        string
	IsVersionRange bool // Version is a version range

	FromFile     []string
	FromAnalyzer []string

	// sha1:abc
	// md5:abc
	// sha256:abc
	// ...
	Verification string

	License []string

	// Related
	// id -> package
	UpStreamPackages   map[string]*Package
	DownStreamPackages map[string]*Package

	DependsOn PackageRelationShip

	Potential bool

	// 订正 CPE 和 强制关联 CVE
	AmendedCPE    []string
	AssociatedCVE []string
}

func (*Package) From

func (p *Package) From() ([]string, []string)

func (*Package) HasVersionRange

func (p *Package) HasVersionRange() bool

func (*Package) Identifier

func (p *Package) Identifier() string

func (*Package) LinkDepend

func (down *Package) LinkDepend(up *Package)

func (*Package) Merge

func (p *Package) Merge(p2 *Package) *Package

merge p2 to p1

func (*Package) SetFrom

func (p *Package) SetFrom(analyzer, file string)

func (Package) String

func (p Package) String() string

type PackageRelationShip

type PackageRelationShip struct {
	And map[string]string   // key: package name, value: version range
	Or  []map[string]string // key: package name, value: version range
}

type SCABom

type SCABom struct {
	// Packages is a list of packages that are direct dependencies of the
	// scanned application.
	Packages []*Package `json:"packages"`
	Services []*Service `json:"services,omitempty"`
}

type Service

type Service struct {
	// contab / systemctl / nginx
	ApplicationName string

	// config / network / fs / command
	ServiceType    string
	ServiceName    string
	ServiceContent string
}

Service for describing service config, for systemctl, crontab, rc[\d]{,2}.d/ nginx/httpd/apache2 config and docker containers ports / fs mount and soon.