vex

Documentation

Index

• type CSAF
  • func (v *CSAF) Filter(result *types.Result, _ *core.BOM)
• type CycloneDX
  • func (v *CycloneDX) Filter(result *types.Result, _ *core.BOM)
• type OpenVEX
  • func (v *OpenVEX) Filter(result *types.Result, bom *core.BOM)
  • func (v *OpenVEX) Matches(vuln types.DetectedVulnerability, bom *core.BOM) []openvex.Statement
• type Statement
• type VEX
  • func New(filePath string, report types.Report) (VEX, error)

Types

type CSAF

type CSAF struct {
	// contains filtered or unexported fields
}

func (*CSAF) Filter

func (v *CSAF) Filter(result *types.Result, _ *core.BOM)

type CycloneDX

type CycloneDX struct {
	// contains filtered or unexported fields
}

func (*CycloneDX) Filter

func (v *CycloneDX) Filter(result *types.Result, _ *core.BOM)

type OpenVEX

type OpenVEX struct {
	// contains filtered or unexported fields
}

func (*OpenVEX) Filter

func (v *OpenVEX) Filter(result *types.Result, bom *core.BOM)

func (*OpenVEX) Matches

func (v *OpenVEX) Matches(vuln types.DetectedVulnerability, bom *core.BOM) []openvex.Statement

type Statement

type Statement struct {
	VulnerabilityID string
	Affects         []string
	Status          types.FindingStatus
	Justification   string
}

type VEX

type VEX interface {
	Filter(*types.Result, *core.BOM)
}

VEX represents Vulnerability Exploitability eXchange. It abstracts multiple VEX formats. Note: This is in the experimental stage and does not yet support many specifications. The implementation may change significantly.

func New

func New(filePath string, report types.Report) (VEX, error)