dxtypes

Documentation

Index

• func CanMerge(p *Package, p2 *Package) int
• func CanMergeWithVersionRange(version, versionRange string) bool
• func CompareVersionRange(target, versionRange string) bool
• func CreateCycloneDXSBOMByDXPackages(pkgs []*Package) *cdx.BOM
• func MarshalCycloneDXBomToJSON(bom *cdx.BOM) ([]byte, error)
• type Package
  • func (p *Package) From() ([]string, []string)
  • func (p *Package) HasVersionRange() bool
  • func (p *Package) Identifier() string
  • func (down *Package) LinkDepend(up *Package)
  • func (p *Package) Merge(p2 *Package) *Package
  • func (p *Package) SetFrom(analyzer, file string)
  • func (p Package) String() string
• type PackageRelationShip
• type Service

Functions

func CanMerge

func CanMerge(p *Package, p2 *Package) int

func CanMergeWithVersionRange

func CanMergeWithVersionRange(version, versionRange string) bool

p2 is version range

func CompareVersionRange

func CompareVersionRange(target, versionRange string) bool

func CreateCycloneDXSBOMByDXPackages

func CreateCycloneDXSBOMByDXPackages(pkgs []*Package) *cdx.BOM

func MarshalCycloneDXBomToJSON

func MarshalCycloneDXBomToJSON(bom *cdx.BOM) ([]byte, error)

Types

type Package

type Package struct {
	Name           string
	Version        string
	IsVersionRange bool // Version is a version range

	FromFile     []string
	FromAnalyzer []string

	// sha1:abc
	// md5:abc
	// sha256:abc
	// ...
	Verification string

	License []string

	// Related
	// id -> package
	UpStreamPackages   map[string]*Package
	DownStreamPackages map[string]*Package

	DependsOn PackageRelationShip

	Potential bool

	// 订正 CPE 和 强制关联 CVE
	AmendedCPE    []string
	AssociatedCVE []string
}

func (*Package) From

func (p *Package) From() ([]string, []string)

func (*Package) HasVersionRange

func (p *Package) HasVersionRange() bool

func (*Package) Identifier

func (p *Package) Identifier() string

func (*Package) LinkDepend

func (down *Package) LinkDepend(up *Package)

func (*Package) Merge

func (p *Package) Merge(p2 *Package) *Package

merge p2 to p1

func (*Package) SetFrom

func (p *Package) SetFrom(analyzer, file string)

func (Package) String

func (p Package) String() string

type PackageRelationShip

type PackageRelationShip struct {
	And map[string]string   // key: package name, value: version range
	Or  []map[string]string // key: package name, value: version range
}

type Service

type Service struct {
	// contab / systemctl / nginx
	ApplicationName string

	// config / network / fs / command
	ServiceType    string
	ServiceName    string
	ServiceContent string
}

Service for describing service config, for systemctl, crontab, rc[\d]{,2}.d/ nginx/httpd/apache2 config and docker containers ports / fs mount and soon.