Directories
¶
| Path | Synopsis |
|---|---|
|
Package assembly merges per-node CycloneDX BOMs into one consolidated SBOM.
|
Package assembly merges per-node CycloneDX BOMs into one consolidated SBOM. |
|
Package buildinfo provides build and VCS metadata for extract-sbom.
|
Package buildinfo provides build and VCS metadata for extract-sbom. |
|
Package config provides the central configuration types and defaults for extract-sbom.
|
Package config provides the central configuration types and defaults for extract-sbom. |
|
Package extract implements recursive, auditable extraction of archive formats.
|
Package extract implements recursive, auditable extraction of archive formats. |
|
Package identify detects the format of a file and determines whether Syft can handle it natively or whether extract-sbom needs to extract it.
|
Package identify detects the format of a file and determines whether Syft can handle it natively or whether extract-sbom needs to extract it. |
|
Package orchestrator coordinates the end-to-end processing pipeline of extract-sbom.
|
Package orchestrator coordinates the end-to-end processing pipeline of extract-sbom. |
|
Package policy evaluates limit violations and determines processing behavior based on the configured policy mode.
|
Package policy evaluates limit violations and determines processing behavior based on the configured policy mode. |
|
Package report generates audit reports from the processing state.
|
Package report generates audit reports from the processing state. |
|
internal/domain
Package domain holds report-domain aggregation logic shared by renderers.
|
Package domain holds report-domain aggregation logic shared by renderers. |
|
internal/html
Package html implements the self-contained HTML report renderer.
|
Package html implements the self-contained HTML report renderer. |
|
internal/i18n
Package i18n holds the localized label and prose catalog shared by the report renderers, together with a small inline-Markdown-to-HTML converter so the HTML renderer can reuse the Markdown-flavored catalog strings.
|
Package i18n holds the localized label and prose catalog shared by the report renderers, together with a small inline-Markdown-to-HTML converter so the HTML renderer can reuse the Markdown-flavored catalog strings. |
|
internal/json
Package json implements the structured JSON audit report renderer.
|
Package json implements the structured JSON audit report renderer. |
|
internal/markdown
Package markdown implements the active Markdown-based markdown report renderer.
|
Package markdown implements the active Markdown-based markdown report renderer. |
|
internal/model
Package model defines the shared report contracts used across report outputs and the root report facade.
|
Package model defines the shared report contracts used across report outputs and the root report facade. |
|
internal/sarif
Package sarif implements the SARIF 2.1.0 audit report renderer.
|
Package sarif implements the SARIF 2.1.0 audit report renderer. |
|
Package safeguard provides extraction safety checks for extract-sbom.
|
Package safeguard provides extraction safety checks for extract-sbom. |
|
Package sandbox provides isolation wrappers for executing external binaries (7-Zip, unshield) during archive extraction.
|
Package sandbox provides isolation wrappers for executing external binaries (7-Zip, unshield) during archive extraction. |
|
Package scan invokes Syft in library mode to catalog software components.
|
Package scan invokes Syft in library mode to catalog software components. |
|
Package vulnscan performs optional vulnerability enrichment by invoking Grype on the generated SBOM and correlating matches to component BOM refs.
|
Package vulnscan performs optional vulnerability enrichment by invoking Grype on the generated SBOM and correlating matches to component BOM refs. |
Click to show internal directories.
Click to hide internal directories.