matcher

Documentation

Index

• func CompareVersions(a, b string) int
• func IsInRange(version string, introduced, fixed, lastAffected string) bool
• type Matcher
  • func New(nvdAPIKey, githubToken, cacheDir string, cacheTTLHours int) *Matcher
  • func NewOffline(db *cve.OfflineDB) *Matcher
  • func (m *Matcher) Close()
  • func (m *Matcher) Match(ctx context.Context, depList *deps.DependencyList) ([]cve.Finding, error)

Functions

func CompareVersions

func CompareVersions(a, b string) int

CompareVersions compares two version strings. Returns -1 if a < b, 0 if a == b, 1 if a > b. Handles semver (1.2.3), calver (2024.01.15), and numeric versions.

func IsInRange

func IsInRange(version string, introduced, fixed, lastAffected string) bool

IsInRange checks if a version falls within an affected range.

Types

type Matcher

type Matcher struct {
	// contains filtered or unexported fields
}

Matcher matches project dependencies against CVE databases.

func New

func New(nvdAPIKey, githubToken, cacheDir string, cacheTTLHours int) *Matcher

func NewOffline

func NewOffline(db *cve.OfflineDB) *Matcher

NewOffline creates a Matcher backed by the offline OSV database.

func (*Matcher) Close

func (m *Matcher) Close()

Close releases resources held by the Matcher (e.g. the SQLite cache).

func (*Matcher) Match

func (m *Matcher) Match(ctx context.Context, depList *deps.DependencyList) ([]cve.Finding, error)

Match queries CVE databases for all dependencies using batch queries.