Versions in this module Expand all Collapse all v0 v0.4.0 Aug 19, 2026 Changes in this version + func NormalizeOriginURL(raw string, repository bool) (string, bool) type Dependency + Origin *PackageOrigin type Digest + Subject DigestSubject + type DigestSubject string + const DigestSubjectArtifact + const DigestSubjectMetadata + const DigestSubjectSourceTree type Package + Attestations []PackageAttestation + Origin *PackageOrigin + type PackageAttestation struct + Digest *Digest + Issuer string + PredicateType string + Source string + URL string + Verified bool + func (a PackageAttestation) Clone() PackageAttestation + type PackageOrigin struct + ArtifactURL string + Disputed bool + Repository string + Revision string + func ArtifactOrigin(rawURL string) *PackageOrigin + func ReconcileOrigin(existing, incoming *PackageOrigin) *PackageOrigin + func RepositoryOrigin(rawURL, revision string) *PackageOrigin + func (o *PackageOrigin) Clone() *PackageOrigin + func (o *PackageOrigin) Empty() bool + func (o *PackageOrigin) Normalized() *PackageOrigin + func (o *PackageOrigin) UnmarshalJSON(data []byte) error + func (o PackageOrigin) MarshalJSON() ([]byte, error) v0.3.0 Aug 12, 2026 Changes in this version type DetectorModule + TargetKinds []ExecutionTargetKind v0.2.0 Aug 11, 2026 Changes in this version + const EnvVerbosity + func ServeModule(m Module) + func ValidateModule(m Module) error + type AnalyzerModule struct + Descriptor AnalyzerDescriptor + New func(context.Context, HostContext) (Analyzer, error) + type AuditorModule struct + Descriptor AuditorDescriptor + New func(context.Context, HostContext) (Auditor, error) + type DetectorModule struct + Descriptor DetectorDescriptor + New func(context.Context, HostContext) (Detector, error) + Support []PackageManagerSupport + type ExecutionMode string + const ExecutionEmbedded + const ExecutionManaged + type HostContext interface + DecodeConfig func(v any) error + HTTPClient func() *HTTPClientProvider + Logger func() *zap.Logger + Runtime func() RuntimeInfo + type MatcherModule struct + Descriptor MatcherDescriptor + New func(context.Context, HostContext) (Matcher, error) + type Module struct + Analyzer *AnalyzerModule + Auditor *AuditorModule + Detector *DetectorModule + Kind PluginKind + Matcher *MatcherModule + type RuntimeInfo struct + CoreVersion string + Execution ExecutionMode v0.1.0 Aug 10, 2026 Changes in this version + const CapabilityPackageUpdates + const EnvHTTPCACertFile + const EnvHTTPNoProxy + const EnvHTTPProxy + const EnvHTTPProxyHost + const EnvHTTPProxyPassword + const EnvHTTPProxyPort + const EnvHTTPProxyType + const EnvHTTPProxyUsername + const EnvPluginConfigFile + const EnvPluginID + const ExploitabilityValueExploitable + const InstalledPluginsSchemaVersion + const MetadataKeyDetectionLicenses + const MetadataKeyNPM + const PackageManifestSchemaVersion + const PluginAPIVersion + const ReachabilityValueReachable + const RuntimeDescriptorSnapshotSchemaVersion + const RuntimeHashiCorpGRPC + const SourceChangeValue + var ErrCycleDetected = errors.New("dependency creates a cycle") + var ErrEmptyNodeID = errors.New("dependency node id is empty") + var ErrNilNode = errors.New("dependency node is nil") + var ErrNodeAlreadyExist = errors.New("dependency node already exists") + var ErrNodeNotFound = errors.New("dependency node not found") + var ErrSelfDependency = errors.New("self dependency is not allowed") + func BuildPackageURL(purlType, namespace, name, version string) string + func CanonicalPackageURLFromDependency(dep *Dependency) string + func CanonicalPackageURLFromParts(existingPURL string, ecosystem Ecosystem, packageManager PackageManager, ...) string + func CanonicalizePackageURL(value string) string + func ClientPluginMap() map[string]hplugin.Plugin + func ConfigSchemaFor(prototype any) (json.RawMessage, error) + func DecodePluginConfigFromEnv(target any) error + func FindingPolicyStatusRank(status FindingPolicyStatus) (int, bool) + func HandshakeConfig() hplugin.HandshakeConfig + func MergeGraph(dst, src *Graph) error + func MustConfigSchemaFor(prototype any) json.RawMessage + func NewHTTPClient(config HTTPClientConfig) (*http.Client, error) + func NodeIsDiffable(node *Dependency) bool + func NodeIsEnrichable(node *Dependency) bool + func NormalizeDependencyIdentity(pkg *Dependency) + func PackageURLBase(value string) string + func PackageURLTypeForValues(values ...any) string + func ParsePackageURL(value string) *packageurl.PackageURL + func RawPluginConfigFromEnv() ([]byte, error) + func ServeAnalyzer(analyzer ServedAnalyzer) + func ServeAuditor(auditor ServedAuditor) + func ServeDetector(detector ServedDetector) + func ServeMatcher(matcher ServedMatcher) + func SetDetectionLicenses(dep *Dependency, licenses []PackageLicense) + func SeverityMeets(candidate SeverityLevel, threshold string) bool + func SeverityRank(severity SeverityLevel) int + func SortDependencyDetailTransitions(transitions []DependencyDetailTransition) + func ValidateAnalyzerDescriptor(descriptor *AnalyzerDescriptor) error + func ValidateAuditorDescriptor(descriptor *AuditorDescriptor) error + func ValidateDetectorDescriptor(descriptor *DetectorDescriptor) error + func ValidateMatcherDescriptor(descriptor *MatcherDescriptor) error + type Affected struct + DatabaseSpecific map[string]any + EcosystemSpecific map[string]any + Ranges []VersionRange + Versions []string + type AffectedSymbol struct + Definition *SourcePosition + Kind SymbolKind + Module string + Package string + Symbol string + func (s AffectedSymbol) Clone() AffectedSymbol + type AnalyzeRequest struct + AcceptPackageUpdates bool + AnalyzerFilter AnalyzerFilter + Ecosystem Ecosystem + ExecutionTarget ExecutionTarget + Graph *Graph + Language Language + PackageManager PackageManager + ProjectPath string + Query PackageQuery + Registry *PackageRegistry + Stderr io.Writer + SubprojectInfo Subproject + Target *Dependency + type AnalyzeResponse = AnalyzeResult + type AnalyzeResult struct + AnalyzerRuns []string + AnalyzerStats map[string]ReachabilityStats + PackageUpdates []*Package + Registry *PackageRegistry + type Analyzer interface + Analyze func(context.Context, AnalyzeRequest) (AnalyzeResult, error) + Applicable func(context.Context, AnalyzeRequest) (bool, error) + Descriptor func() AnalyzerDescriptor + Ready func(context.Context, AnalyzeRequest) error + type AnalyzerDescriptor struct + Aliases []string + Capabilities []string + ConfigSchema json.RawMessage + DisplayName string + Name string + SupportedEcosystems []Ecosystem + SupportedLanguages []Language + SupportedManagers []PackageManager + SupportedTiers []ReachabilityTier + Tags []string + func (d AnalyzerDescriptor) Label() string + type AnalyzerFilter struct + Exclude []string + Include []string + func (f AnalyzerFilter) Excludes(name string) bool + func (f AnalyzerFilter) Includes(name string) bool + type ApplicableResponse struct + Applicable bool + type AuditRequest struct + AuditorFilter AuditorFilter + BaselineGraph *Graph + DependencyDetailChanges []DependencyDetailTransition + Ecosystem Ecosystem + ExecutionTarget ExecutionTarget + Graph *Graph + PackageManager PackageManager + ProjectPath string + Query PackageQuery + Registry *PackageRegistry + Stderr io.Writer + SubprojectInfo Subproject + Target *Dependency + type AuditResponse = AuditResult + type AuditResult struct + AuditorFindings map[string]int + AuditorRuns []string + Findings []Finding + RiskScores []RiskScore + type Auditor interface + Applicable func(context.Context, AuditRequest) (bool, error) + Audit func(context.Context, AuditRequest) (AuditResult, error) + Descriptor func() AuditorDescriptor + Ready func(context.Context, AuditRequest) error + type AuditorDescriptor struct + Aliases []string + ConfigSchema json.RawMessage + DisplayName string + Name string + SupportedEcosystems []Ecosystem + SupportedManagers []PackageManager + Tags []string + func (d AuditorDescriptor) Label() string + type AuditorFilter struct + Exclude []string + Include []string + func (f AuditorFilter) Excludes(name string) bool + func (f AuditorFilter) Includes(name string) bool + type BaseAnalyzer struct + func (BaseAnalyzer) Applicable(context.Context, AnalyzeRequest) (bool, error) + func (BaseAnalyzer) Ready(context.Context, AnalyzeRequest) error + type BaseAuditor struct + func (BaseAuditor) Applicable(context.Context, AuditRequest) (bool, error) + func (BaseAuditor) Ready(context.Context, AuditRequest) error + type BaseDetector struct + func (BaseDetector) Applicable(context.Context, DetectionRequest) (bool, error) + func (BaseDetector) Ready(context.Context, DetectionRequest) error + type BaseMatcher struct + func (BaseMatcher) Applicable(context.Context, MatchRequest) (bool, error) + func (BaseMatcher) Ready(context.Context, MatchRequest) error + type CVSSScore struct + Score float64 + Source string + Vector string + Version SeverityType + type CWE struct + CVE string + ID string + Source string + Type string + type CallFrame struct + Function string + Package string + Position SourcePosition + Receiver string + type CallPath struct + Frames []CallFrame + Sink AffectedSymbol + func (p CallPath) Clone() CallPath + type Client interface + Analyze func(context.Context, *AnalyzeRequest) (*AnalyzeResponse, error) + AnalyzerApplicable func(context.Context, *AnalyzeRequest) (*ApplicableResponse, error) + AnalyzerDescriptor func(context.Context) (*AnalyzerDescriptor, error) + AnalyzerReady func(context.Context, *AnalyzeRequest) (*ReadyResponse, error) + Audit func(context.Context, *AuditRequest) (*AuditResponse, error) + AuditorApplicable func(context.Context, *AuditRequest) (*ApplicableResponse, error) + AuditorDescriptor func(context.Context) (*AuditorDescriptor, error) + AuditorReady func(context.Context, *AuditRequest) (*ReadyResponse, error) + Detect func(context.Context, *DetectRequest) (*DetectResponse, error) + DetectorApplicable func(context.Context, *DetectRequest) (*ApplicableResponse, error) + DetectorDescriptor func(context.Context) (*DetectorDescriptor, error) + DetectorInstall func(context.Context, *DetectRequest) (*InstallResponse, error) + DetectorPackageManagerSupport func(context.Context) ([]PackageManagerSupport, error) + DetectorReady func(context.Context, *DetectRequest) (*ReadyResponse, error) + DetectorRemediationHints func(context.Context, *RemediationHintRequest) (*RemediationHintResponse, error) + Match func(context.Context, *MatchRequest) (*MatchResponse, error) + MatcherApplicable func(context.Context, *MatchRequest) (*ApplicableResponse, error) + MatcherDescriptor func(context.Context) (*MatcherDescriptor, error) + MatcherReady func(context.Context, *MatchRequest) (*ReadyResponse, error) + type ComponentDescriptor struct + Aliases []string + DisplayName string + Name string + SupportedEcosystems []Ecosystem + SupportedManagers []PackageManager + Tags []string + func (d ComponentDescriptor) Label() string + type ConsolidatedGraph struct + ExecutionTarget ExecutionTarget + Graphs *GraphContainer + Manifests []ConsolidatedManifest + Subprojects []ConsolidatedSubproject + type ConsolidatedManifest struct + DetectorName string + Entry GraphEntry + Origin DetectorOrigin + RootManifestID string + Subproject Subproject + Technique DetectorTechnique + type ConsolidatedSubproject struct + DetectorName string + RootManifestIDs []string + Subproject Subproject + type Coordinates struct + Ecosystem Ecosystem + FirstParty bool + Language Language + Name string + Org string + PURL string + PackageManager PackageManager + Type PackageType + Version string + func (i Coordinates) CanonicalPURL() string + func (i Coordinates) DisplayName() string + func (i Coordinates) EcosystemName() string + func (i Coordinates) IdentityKey() string + func (i Coordinates) QualifiedName() string + func (i Coordinates) StableID() string + type Dependency struct + CPEs []string + Copyright string + Digests []Digest + FoundBy string + ID string + Locations []PackageLocation + Matched bool + Metadata map[string]any + PackageRef string + Relationship DependencyRelationship + ResolvedURL string + Scopes []Scope + Source DependencySource + func NewDependency(dep Dependency) *Dependency + func NewDependencyRef(name, version string) *Dependency + func NewDependencyRefWithID(id, name, version string) *Dependency + func NewDependencyWithID(id string, dep Dependency) *Dependency + func (d *Dependency) AddScope(scope Scope) + func (d *Dependency) Clone() *Dependency + func (d *Dependency) DisplayName() string + func (d *Dependency) HasScope(scope Scope) bool + func (d *Dependency) IdentityKey() string + func (d *Dependency) PrimaryScope() Scope + func (d *Dependency) QualifiedName() string + func (d *Dependency) RegistryMatchEligible() bool + func (d *Dependency) StableID() string + func (d *Dependency) WithoutID() Dependency + type DependencyDetailField string + const DependencyDetailRegistryEligibility + const DependencyDetailRelationship + const DependencyDetailSource + type DependencyDetailReviewReason string + const DependencyDetailReviewSourceGit + const DependencyDetailReviewSourceURL + type DependencyDetailTransition struct + After *Dependency + AfterRegistryEligible bool + AfterRelationship DependencyRelationship + Before *Dependency + BeforeRegistryEligible bool + BeforeRelationship DependencyRelationship + ChangedFields []DependencyDetailField + func CloneDependencyDetailTransitions(transitions []DependencyDetailTransition) []DependencyDetailTransition + func CompareDependencyDetails(baseGraph, headGraph *Graph, before, after *Dependency) (DependencyDetailTransition, bool) + func (t DependencyDetailTransition) NeedsReview() bool + func (t DependencyDetailTransition) ReviewReasons() []DependencyDetailReviewReason + type DependencyEdge struct + FromID string + ToID string + type DependencyQuery struct + ID string + Name string + type DependencyRelationship string + const DependencyRelationshipDirect + const DependencyRelationshipTransitive + const DependencyRelationshipUnknown + func MergeDependencyRelationship(current, next DependencyRelationship) DependencyRelationship + func ParseDependencyRelationship(value string) DependencyRelationship + func RelationshipForPath(path []*Dependency) DependencyRelationship + type DependencySource string + const DependencySourceFile + const DependencySourceGit + const DependencySourceProject + const DependencySourceRegistry + const DependencySourceURL + const DependencySourceWorkspace + type DetectRequest = DetectionRequest + type DetectResponse = DetectionResult + type DetectionRequest struct + AllowStdErrLogging bool + CoreVersion string + DetectorFilter DetectorFilter + Ecosystem Ecosystem + EnrichmentEnabled bool + ExecutionTarget ExecutionTarget + InstallArgs []string + InstallFirst bool + Logger *zap.Logger + PackageManager PackageManager + ProjectPath string + Query DependencyQuery + ScopeFilter Scope + Stderr io.Writer + Subproject Subproject + Verbose bool + func (r DetectionRequest) DetectorLogger(fallback *zap.Logger) *zap.Logger + type DetectionResult struct + DetectorName string + FallbackFrom string + FallbackReason string + Graphs *GraphContainer + Origin DetectorOrigin + RootExecutionTarget ExecutionTarget + SubprojectInfo Subproject + Technique DetectorTechnique + Warnings []DetectorWarning + func FilterDetectionResultByScope(result DetectionResult, scope Scope) (DetectionResult, error) + func (r DetectionResult) ConsolidatedGraph() (*Graph, error) + type Detector interface + Applicable func(context.Context, DetectionRequest) (bool, error) + Descriptor func() DetectorDescriptor + PackageManagerSupport func() []PackageManagerSupport + Ready func(context.Context, DetectionRequest) error + ResolveGraph func(context.Context, DetectionRequest) (DetectionResult, error) + type DetectorDescriptor struct + Aliases []string + ConfigSchema json.RawMessage + DisplayName string + FallbackDetectors []string + IgnoredDirectories []string + IgnoredDirectoryMarkers []string + Name string + PackageManagerSupport []PackageManagerSupport + RemediationCapabilities []RemediationCapability + SupportedEcosystems []Ecosystem + SupportedManagers []PackageManager + SupportsInstallFirst bool + Tags []string + Technique DetectorTechnique + func (d DetectorDescriptor) Clone() DetectorDescriptor + func (d DetectorDescriptor) Label() string + type DetectorFilter struct + Exclude []string + Include []string + func (f DetectorFilter) Excludes(name string) bool + func (f DetectorFilter) Includes(name string) bool + type DetectorInstaller interface + Install func(context.Context, *DetectRequest) (*InstallResponse, error) + type DetectorOrigin string + const BundledOrigin + const CoreOrigin + const ExternalOrigin + type DetectorRemediationProvider interface + RemediationHints func(context.Context, RemediationHintRequest) (RemediationHintResponse, error) + type DetectorTechnique string + const BinaryTechnique + const BuildToolTechnique + const ContainerTechnique + const LockfileTechnique + const ManifestTechnique + const MultipleTechnique + const SBOMTechnique + type DetectorWarning struct + Code DetectorWarningCode + Manifest string + Message string + Source string + Subproject string + Type DetectorWarningType + func (w DetectorWarning) DegradesCoverage() bool + type DetectorWarningCode string + const DetectorWarningCodeEnginesConstraint + const DetectorWarningCodeInstallGate + const DetectorWarningCodeLockfileFormat + const DetectorWarningCodeLockfileUnsupported + type DetectorWarningType string + const DetectorWarningFallback + const DetectorWarningPackageManager + const DetectorWarningResolutionFailure + func (t DetectorWarningType) DegradesCoverage() bool + type Diff struct + Added []*Dependency + Removed []*Dependency + Transitions []DependencyDetailTransition + Updated []VersionChange + func Compare(base, head *Graph) Diff + type Digest struct + Algorithm DigestAlgorithm + Value string + type DigestAlgorithm string + const DigestAlgorithmSHA1 + const DigestAlgorithmSHA256 + type EPSSScore struct + CVE string + Date string + EPSS float64 + Percentile float64 + type Ecosystem string + const EcosystemALPM + const EcosystemAPK + const EcosystemCPP + const EcosystemConda + const EcosystemDPKG + const EcosystemDart + const EcosystemDotNet + const EcosystemElixir + const EcosystemErlang + const EcosystemGitHub + const EcosystemGo + const EcosystemHaskell + const EcosystemHomebrew + const EcosystemLua + const EcosystemMaven + const EcosystemNPM + const EcosystemNix + const EcosystemOCaml + const EcosystemOther + const EcosystemPHP + const EcosystemPortage + const EcosystemProlog + const EcosystemPython + const EcosystemR + const EcosystemRPM + const EcosystemRuby + const EcosystemRust + const EcosystemSBOM + const EcosystemScala + const EcosystemSnap + const EcosystemSwift + const EcosystemTerraform + const EcosystemUnknown + const EcosystemWordPress + func ParseEcosystem(value string) (Ecosystem, error) + func (e Ecosystem) String() string + type EcosystemFilter struct + Exclude []Ecosystem + Include []Ecosystem + func (f EcosystemFilter) Excludes(name Ecosystem) bool + func (f EcosystemFilter) Includes(name Ecosystem) bool + type ExecutionTarget struct + Kind ExecutionTargetKind + Location string + Ref string + RepositoryURL string + type ExecutionTargetKind string + const ExecutionTargetContainerImage + const ExecutionTargetFilesystem + const ExecutionTargetGitRepository + const ExecutionTargetWorkingDirectory + type FailOnConstraint struct + Kind FailOnKind + Value string + func ParseFailOn(raw string) (FailOnConstraint, error) + func ParseFailOnList(raws []string) ([]FailOnConstraint, error) + func (c FailOnConstraint) String() string + type FailOnKind string + const ExploitabilityConstraint + const ReachabilityConstraint + const SeverityConstraint + const SourceChangeConstraint + type FallbackDetector interface + FallbackDetector func() Detector + type Finding struct + Auditor string + DependencyRefs []string + ID string + Kind FindingKind + PackageRef string + PolicyStatus FindingPolicyStatus + Reasons []string + RuleID string + Severity SeverityLevel + Source string + Title string + VEXJustification string + VexStatus VEXStatus + VulnerabilityID string + func (f *Finding) UnmarshalJSON(data []byte) error + func (f Finding) Clone() Finding + type FindingKind string + const FindingKindLicense + const FindingKindPackage + const FindingKindVulnerability + type FindingPolicyDecision struct + Reason string + Source string + Status FindingPolicyStatus + type FindingPolicyResolver interface + ResolveFindingPolicy func(context.Context, Finding, *PackageRegistry) (FindingPolicyDecision, bool) + type FindingPolicyStatus string + const FindingPolicyStatusFail + const FindingPolicyStatusSuppressed + const FindingPolicyStatusWarn + type FixAvailable struct + Date string + Kind FixAvailableKind + Version string + type FixAvailableKind string + const FixAvailableFirstObserved + type FixState string + const FixStateFixed + const FixStateNotFixed + const FixStateUnknown + const FixStateWontFix + type Graph struct + func ConsolidateGraphContainerEntry(container *GraphContainer) (*Graph, error) + func FilterGraphByScope(src *Graph, scope Scope) (*Graph, error) + func New() *Graph + func NewWithCapacity(nodeCount int) *Graph + func (g *Graph) AddEdge(fromID, toID string) error + func (g *Graph) AddNode(node *Dependency) error + func (g *Graph) CollectPathsTo(targetID string) ([]Path, error) + func (g *Graph) Dependents(id string) ([]*Dependency, error) + func (g *Graph) DirectDependencies(id string) ([]*Dependency, error) + func (g *Graph) Leaves() []*Dependency + func (g *Graph) MarshalJSON() ([]byte, error) + func (g *Graph) Node(id string) (*Dependency, bool) + func (g *Graph) Nodes() []*Dependency + func (g *Graph) PrettyString() string + func (g *Graph) PrettyTree() string + func (g *Graph) RemoveEdge(fromID, toID string) bool + func (g *Graph) RemoveNode(id string) bool + func (g *Graph) Roots() []*Dependency + func (g *Graph) Size() int + func (g *Graph) TopologicalSort() ([]*Dependency, error) + func (g *Graph) UnmarshalJSON(data []byte) error + func (g *Graph) WalkEdges(fn func(from, to *Dependency) bool) + func (g *Graph) WalkNodes(fn func(*Dependency) bool) + type GraphContainer struct + Entries []GraphEntry + func SingleGraphContainer(g *Graph, manifest ManifestMetadata) *GraphContainer + func (c *GraphContainer) ConsolidatedGraph() (*Graph, error) + func (c *GraphContainer) Len() int + type GraphEntry struct + Graph *Graph + Manifest ManifestMetadata + Packages []*Package + type HTTPClientConfig struct + CACertFile string + NoProxy string + ProxyHost string + ProxyPassword string + ProxyPort int + ProxyType string + ProxyURL string + ProxyUsername string + Timeout time.Duration + func HTTPClientConfigFromEnv() HTTPClientConfig + func (config HTTPClientConfig) EffectiveProxyURL() (string, error) + type HTTPClientProvider struct + func NewHTTPClientProvider(config HTTPClientConfig) (*HTTPClientProvider, error) + func NewHTTPClientProviderFromEnv() (*HTTPClientProvider, error) + func (p *HTTPClientProvider) Client(timeout time.Duration) *http.Client + func (p *HTTPClientProvider) CloseIdleConnections() + type InstallFirstDetector interface + Install func(context.Context, DetectionRequest) error + type InstallResponse struct + Performed bool + type KnownExploited struct + CVE string + CWEs []string + DateAdded string + DueDate string + KnownRansomwareCampaignUse string + Notes string + Product string + RequiredAction string + URLs []string + VendorProject string + type Language string + const LanguageC + const LanguageCPP + const LanguageCSharp + const LanguageDart + const LanguageElixir + const LanguageErlang + const LanguageFSharp + const LanguageGo + const LanguageGroovy + const LanguageHaskell + const LanguageJava + const LanguageJavaScript + const LanguageKotlin + const LanguageLua + const LanguageOCaml + const LanguageObjC + const LanguagePHP + const LanguagePython + const LanguageR + const LanguageRuby + const LanguageRust + const LanguageScala + const LanguageSwift + const LanguageTypeScript + const LanguageUnknown + const LanguageVB + func LanguageFromPackage(p Package) Language + func ParseLanguage(value string) Language + type LicenseType string + const LicenseTypeDeclared + type ManifestKind string + const ManifestKindBomlySPDX + const ManifestKindBunLock + const ManifestKindGitHubActions + const ManifestKindGitHubActionsAction + const ManifestKindGitHubActionsWorkflow + const ManifestKindGitHubSPDX + const ManifestKindGoMod + const ManifestKindGoModule + const ManifestKindNPMLockfile + const ManifestKindPackageJSON + const ManifestKindPackageLockJSON + const ManifestKindPomXML + const ManifestKindRequirementsTXT + const ManifestKindSBOM + const ManifestKindSPDX + type ManifestMetadata struct + Kind ManifestKind + Path string + Resolution *ResolutionMetadata + type MatchRequest struct + AcceptPackageUpdates bool + Ecosystem Ecosystem + ExecutionTarget ExecutionTarget + Graph *Graph + MatcherFilter MatcherFilter + PackageManager PackageManager + ProjectPath string + Query PackageQuery + Registry *PackageRegistry + Stderr io.Writer + SubprojectInfo Subproject + Target *Dependency + type MatchResponse = MatchResult + type MatchResult struct + MatcherStats MatcherStats + PackageUpdates []*Package + Registry *PackageRegistry + type Matcher interface + Applicable func(context.Context, MatchRequest) (bool, error) + Descriptor func() MatcherDescriptor + Match func(context.Context, MatchRequest) (MatchResult, error) + Ready func(context.Context, MatchRequest) error + type MatcherDescriptor struct + Aliases []string + Capabilities []string + ConfigSchema json.RawMessage + DisplayName string + Name string + SupportedEcosystems []Ecosystem + SupportedManagers []PackageManager + Tags []string + func (d MatcherDescriptor) Label() string + type MatcherFilter struct + Exclude []string + Include []string + func (f MatcherFilter) Excludes(name string) bool + func (f MatcherFilter) Includes(name string) bool + type MatcherStats struct + DisplayName string + Licenses int + MatchedPackages int + Name string + UnmatchedPackages int + Vulnerabilities int + type NPMPackageMetadata struct + Bundled bool + Engines map[string]string + Extraneous bool + HasInstallScript bool + OptionalPeerDependencies []string + PeerDependencies map[string]string + type Package struct + CPEs []string + Copyright string + Digests []Digest + EOL *PackageEOL + ID string + Licenses []PackageLicense + Matched bool + Metadata map[string]any + Remediation *PackageRemediation + ResolvedURL string + Scorecard *PackageScorecard + Vulnerabilities []Vulnerability + func PackageFromDependency(dep *Dependency) *Package + func (p *Package) Clone() *Package + func (p *Package) DisplayName() string + func (p *Package) IdentityKey() string + func (p *Package) LicenseValues() []string + func (p *Package) MergeFrom(src *Package) + func (p *Package) QualifiedName() string + type PackageEOL struct + Cycle string + EOL bool + EOLDate string + LatestVersion string + ReleaseDate string + Source string + Supported bool + func (e *PackageEOL) Clone() *PackageEOL + type PackageLicense struct + SPDXExpression string + Type LicenseType + Value string + func DetectionLicenses(dep *Dependency) []PackageLicense + type PackageLocation struct + AccessPath string + Position *SourcePosition + RealPath string + type PackageManager string + const PackageManagerALPM + const PackageManagerAPK + const PackageManagerBun + const PackageManagerBundler + const PackageManagerCabal + const PackageManagerCargo + const PackageManagerCocoaPods + const PackageManagerComposer + const PackageManagerConan + const PackageManagerConda + const PackageManagerDPKG + const PackageManagerGemspec + const PackageManagerGitHubActions + const PackageManagerGoMod + const PackageManagerGradle + const PackageManagerHomebrew + const PackageManagerLuaRocks + const PackageManagerMaven + const PackageManagerMix + const PackageManagerMultiple + const PackageManagerNPM + const PackageManagerNix + const PackageManagerNuGet + const PackageManagerOTP + const PackageManagerOpam + const PackageManagerOther + const PackageManagerPDM + const PackageManagerPNPM + const PackageManagerPear + const PackageManagerPip + const PackageManagerPipenv + const PackageManagerPoetry + const PackageManagerPortage + const PackageManagerPub + const PackageManagerRPM + const PackageManagerRPackage + const PackageManagerRebar + const PackageManagerSBOM + const PackageManagerSBT + const PackageManagerSWIPLPack + const PackageManagerSetupPy + const PackageManagerSnap + const PackageManagerStack + const PackageManagerSwiftPM + const PackageManagerTerraform + const PackageManagerUV + const PackageManagerUnknown + const PackageManagerWordPress + const PackageManagerYarn + func AllPackageManagers() []PackageManager + func ParsePackageManager(value string) (PackageManager, error) + func (p *PackageManager) UnmarshalJSON(data []byte) error + func (p PackageManager) Ecosystem() Ecosystem + func (p PackageManager) Languages() []Language + func (p PackageManager) MarshalJSON() ([]byte, error) + func (p PackageManager) Name() string + func (p PackageManager) String() string + type PackageManagerSupport struct + EvidencePatterns []string + MultiModule bool + PackageManager PackageManager + func Support(manager PackageManager, evidencePatterns ...string) PackageManagerSupport + func (s PackageManagerSupport) WithMultiModule() PackageManagerSupport + type PackageManagerSupporter interface + PackageManagerSupport func() []PackageManagerSupport + type PackageQuery struct + ID string + Name string + type PackageRegistry struct + func ApplyPackageUpdates(registry *PackageRegistry, updates []*Package) *PackageRegistry + func NewPackageRegistry() *PackageRegistry + func (r *PackageRegistry) Add(pkg *Package) *Package + func (r *PackageRegistry) All() []*Package + func (r *PackageRegistry) Ensure(purl string) *Package + func (r *PackageRegistry) Get(purl string) (*Package, bool) + func (r *PackageRegistry) Len() int + func (r *PackageRegistry) MarshalJSON() ([]byte, error) + func (r *PackageRegistry) Merge(other *PackageRegistry) + func (r *PackageRegistry) UnmarshalJSON(data []byte) error + type PackageRemediation struct + RecommendedVersion string + Status PackageRemediationStatus + Suggestions []PackageRemediationSuggestion + func (r *PackageRemediation) Clone() *PackageRemediation + type PackageRemediationStatus string + const PackageRemediationComplete + const PackageRemediationPartial + const PackageRemediationUnavailable + const PackageRemediationUnknown + type PackageRemediationSuggestion struct + Action RemediationAction + AffectedDependencyRefs []string + ManifestPath string + OverrideAdvice string + SuggestedActionDependencyRef string + type PackageScorecard struct + AggregateScore float64 + Checks []PackageScorecardCheck + CommitSHA string + Repository string + RunDate time.Time + ScorecardVersion string + Source string + func (s *PackageScorecard) Clone() *PackageScorecard + type PackageScorecardCheck struct + Documentation string + Name string + Reason string + Score int + type PackageType string + const PackageTypeAction + const PackageTypeApplication + const PackageTypeFile + const PackageTypeManifest + const PackageTypePackage + const PackageTypeProject + const PackageTypeTransitive + const PackageTypeUnknown + const PackageTypeWorkflow + func ParsePackageType(value string) PackageType + func (t PackageType) String() string + type Path struct + CycleTo string + Cyclic bool + Nodes []*Dependency + type PluginKind string + const PluginKindAnalyzer + const PluginKindAuditor + const PluginKindDetector + const PluginKindMatcher + type PluginTargetType string + type RangeEvent struct + Fixed string + Introduced string + LastAffected string + Limit string + type Reachability struct + AnalyzedAt string + Analyzer string + CallPaths []CallPath + Confidence ReachabilityConfidence + DynamicImportsDetected bool + Hops *int + Reason string + Status ReachabilityStatus + Symbols []AffectedSymbol + Tier ReachabilityTier + func (r *Reachability) Clone() *Reachability + type ReachabilityConfidence string + const ConfidenceHigh + const ConfidenceLow + const ConfidenceMedium + const ConfidenceUnknown + func DeriveConfidence(hops *int, dynamicImports bool) ReachabilityConfidence + type ReachabilityStats struct + NotApplicable int + Reachable int + Unknown int + Unreachable int + type ReachabilityStatus string + const ReachabilityReachable + const ReachabilityUnknown + const ReachabilityUnreachable + type ReachabilityTier string + const TierNone + const TierPackage + const TierSymbol + type ReadyResponse struct + Ready bool + Reason string + type Reference struct + Type ReferenceType + URL string + type ReferenceType string + const ReferenceTypeAdvisory + const ReferenceTypeDataSource + type RemediationAction string + const RemediationActionDirectBump + const RemediationActionLockfileRefresh + const RemediationActionManualReview + const RemediationActionNoFixUpstream + const RemediationActionTransitiveOverride + type RemediationCapability struct + Actions []RemediationAction + SupportedManagers []PackageManager + type RemediationHint struct + DependencyRef string + ManifestPath string + Strategies []RemediationStrategyHint + type RemediationHintRequest struct + Detection DetectionResult + ProjectPath string + Registry *PackageRegistry + type RemediationHintResponse struct + Diagnostics []string + Hints []RemediationHint + type RemediationStrategyHint struct + Action RemediationAction + Advice string + type ResolutionFallback struct + From string + Reason string + type ResolutionMetadata struct + Fallback *ResolutionFallback + InstallCommand []string + InstallExecuted bool + InstallWorkingDir string + Method ResolutionMethod + type ResolutionMethod string + const ResolutionMethodIsolatedInstall + const ResolutionMethodLockfile + const ResolutionMethodManifestOnly + const ResolutionMethodProjectEnvironment + type RiskBand string + const RiskBandCritical + const RiskBandHigh + const RiskBandLow + const RiskBandMedium + const RiskBandUnknown + type RiskScore struct + Band RiskBand + PackageRef string + Score int + Signals map[string]any + type Scope string + const ScopeDevelopment + const ScopeRuntime + const ScopeUnknown + func MergeScope(current, next Scope) Scope + func ParseScope(value string) (Scope, error) + func ScopesOf(scopes ...Scope) []Scope + type ServedAnalyzer interface + Analyze func(context.Context, *AnalyzeRequest) (*AnalyzeResponse, error) + Applicable func(context.Context, *AnalyzeRequest) (*ApplicableResponse, error) + Descriptor func(context.Context) (*AnalyzerDescriptor, error) + Ready func(context.Context, *AnalyzeRequest) (*ReadyResponse, error) + type ServedAuditor interface + Applicable func(context.Context, *AuditRequest) (*ApplicableResponse, error) + Audit func(context.Context, *AuditRequest) (*AuditResponse, error) + Descriptor func(context.Context) (*AuditorDescriptor, error) + Ready func(context.Context, *AuditRequest) (*ReadyResponse, error) + type ServedDetector interface + Applicable func(context.Context, *DetectRequest) (*ApplicableResponse, error) + Descriptor func(context.Context) (*DetectorDescriptor, error) + Detect func(context.Context, *DetectRequest) (*DetectResponse, error) + PackageManagerSupport func(context.Context) ([]PackageManagerSupport, error) + Ready func(context.Context, *DetectRequest) (*ReadyResponse, error) + type ServedDetectorRemediationProvider interface + RemediationHints func(context.Context, *RemediationHintRequest) (*RemediationHintResponse, error) + type ServedMatcher interface + Applicable func(context.Context, *MatchRequest) (*ApplicableResponse, error) + Descriptor func(context.Context) (*MatcherDescriptor, error) + Match func(context.Context, *MatchRequest) (*MatchResponse, error) + Ready func(context.Context, *MatchRequest) (*ReadyResponse, error) + type Severity struct + Score string + Type SeverityType + type SeverityLevel string + const SeverityAny + const SeverityCritical + const SeverityError + const SeverityHigh + const SeverityLow + const SeverityMedium + const SeverityNA + const SeverityNote + const SeverityUnknown + const SeverityWarning + func ParseSeverityLevel(value string) SeverityLevel + type SeverityType string + const SeverityTypeCVSSV2 + const SeverityTypeCVSSV3 + const SeverityTypeCVSSV31 + const SeverityTypeCVSSV4 + type SourcePosition struct + Column int + EndLine int + File string + Line int + func (p SourcePosition) IsZero() bool + type Subproject struct + DetectedPackageManagers []PackageManager + Ecosystem Ecosystem + ExecutionTarget ExecutionTarget + PlannedDetectors []string + PrimaryDetector string + RelativePath string + func (s Subproject) PrimaryPackageManager() PackageManager + type SymbolKind string + const SymbolKindFunction + const SymbolKindMethod + type VEXStatus string + const VEXStatusAffected + const VEXStatusFixed + const VEXStatusNotAffected + const VEXStatusUnderInvestigation + type VersionChange struct + After *Dependency + Before *Dependency + type VersionRange struct + Events []RangeEvent + Repo string + Type VersionRangeType + type VersionRangeType string + const VersionRangeTypeEcosystem + const VersionRangeTypeGit + const VersionRangeTypeSemver + type Vulnerability struct + Affected []Affected + AffectedSymbols []AffectedSymbol + AffectedVersionRange string + Aliases []string + CPEs []string + CVSS []CVSSScore + CWEs []CWE + DataSource string + DatabaseSpecific map[string]any + Details string + EPSS []EPSSScore + FixAvailable []FixAvailable + FixState FixState + FixedIn string + FixedVersions []string + ID string + KEVExploited bool + KnownExploited []KnownExploited + Modified string + Namespace string + ParsedSeverity SeverityLevel + Published string + Reachability *Reachability + Reasons []string + References []Reference + Related []string + RiskScore float64 + Severity []Severity + SeveritySource string + Source string + Summary string + Title string + Withdrawn string + func (v Vulnerability) Clone() Vulnerability + func (v Vulnerability) IsExploitable() bool + func (v Vulnerability) MatchesConstraints(constraints []FailOnConstraint) bool
Go to main page