vulnerability

Documentation

Index

• type Finding
• type Scanner
  • func NewScanner() *Scanner
  • func (s *Scanner) Scan(source, filePath string) []Finding

Types

type Finding

type Finding struct {
	RuleID      string `json:"rule_id"`
	Category    string `json:"category"`
	Description string `json:"description"`
	Severity    string `json:"severity"`
	Reminder    string `json:"reminder"`
	Line        int    `json:"line"`
	Column      int    `json:"column"`
	FilePath    string `json:"file_path,omitempty"` // populated in directory mode for SARIF
}

Finding represents a detected vulnerability pattern.

type Scanner

type Scanner struct {
	// contains filtered or unexported fields
}

Scanner detects vulnerability patterns in source code.

func NewScanner

func NewScanner() *Scanner

NewScanner creates a vulnerability scanner with all 25 security patterns.

func (*Scanner) Scan

func (s *Scanner) Scan(source, filePath string) []Finding

Scan checks source content for vulnerability patterns.