sdk

package module

Go to main page

Versions in this module

v0

v0.10.0

Sep 12, 2026

Changes in this version

+ func BuildPackageURLFor(ecosystem Ecosystem, manager PackageManager, namespace, name, version string) string

v0.9.7

Sep 6, 2026

Changes in this version

type Ecosystem

+ func EcosystemForPURLType(purlType string) Ecosystem

+ type RootAttribution int

+ const AttributedElsewhere

+ const AttributedToRootOnly

+ const AttributedToSite

+ func (a RootAttribution) String() string

+ type RootAttributor struct

+ func NewRootAttributor(roots []string, graph *Graph) RootAttributor

+ func (a RootAttributor) Attribute(node *DependencyNode, root string) RootAttribution

v0.9.6

Sep 6, 2026

Changes in this version

+ func FilterDetectionResultByScopeWithReport(result DetectionResult, scope Scope) (DetectionResult, ScopeFilterReport, error)

+ func FilterGraphByScopeWithReport(src *Graph, scope Scope) (*Graph, ScopeFilterReport, error)

+ func ScopeSetMatches(scopes []Scope, want Scope) bool

type DependencyNode

+ func (n *DependencyNode) MatchesScopeFilter(want Scope) bool

+ type ScopeFilterReport struct

+ Unasserted []string

v0.9.5

Sep 6, 2026

Changes in this version

+ func CycloneDXScopeForExport(scopes []Scope, sourceScope string) string

+ func NormalizeSourceScope(value string) string

type DependencyNode

+ SourceScope string

type DocumentAssertions

+ Checksum *Digest

+ Sources []DocumentSource

+ Version int

+ func (d *DocumentAssertions) UnmarshalJSON(data []byte) error

+ func (d DocumentAssertions) MarshalJSON() ([]byte, error)

+ type DocumentSource struct

+ Checksum *Digest

+ Identity string

+ Version int

+ func (s *DocumentSource) UnmarshalJSON(data []byte) error

+ func (s DocumentSource) Clone() DocumentSource

+ func (s DocumentSource) MarshalJSON() ([]byte, error)

+ func (s DocumentSource) Normalized() (DocumentSource, bool)

+ type ScopeSetDecoding struct

+ Scopes []Scope

+ Unknown []string

+ func DecodeScopeSetLenient(value string) (ScopeSetDecoding, error)

v0.9.4

Sep 6, 2026

v0.9.3

Sep 5, 2026

v0.9.2

Sep 5, 2026

Changes in this version

+ func NodePURL(node GraphNode) string

v0.9.1

Sep 5, 2026

v0.9.0

Sep 4, 2026

Changes in this version

+ const GenericFallbackTypeQualifier

+ func IsNilNode(node GraphNode) bool

+ func IsProjectOwned(node GraphNode) bool

+ func NodeDisplayName(node GraphNode) string

+ func NodeVersion(node GraphNode) string

type Coordinates

+ func NodeCoordinates(node GraphNode) (Coordinates, bool)

+ func (i Coordinates) GenericPURL() string

type DependencyNode

+ func AsDependencyNode(node GraphNode) (*DependencyNode, bool)

+ func DependencyNodesOf(list []GraphNode) []*DependencyNode

+ func NewDependencyNodeFrom(proto DependencyNode) (*DependencyNode, error)

type ModuleNode

+ func AsModuleNode(node GraphNode) (*ModuleNode, bool)

type NodeWarningCode

+ const NodeWarningGenericIdentity

v0.8.0

Sep 1, 2026

Changes in this version

type PackageLicense

+ Source string

v0.7.0

Aug 31, 2026

Changes in this version

+ const CycloneDXScopeProperty

+ const ReservedMetadataPrefix

+ func CopyEdgesInto(dst, src *Graph, rename func(string) string) error

+ func CycloneDXScope(scopes []Scope) string

+ func EncodeScopeSet(scopes []Scope) string

+ func IsReservedMetadataKey(key string) bool

+ func MergeFillGap[T comparable](current, next T, publishable func(T) bool) T

+ func MergeStrongest[T comparable](current, next T, rank func(T) int) T

+ func MergeUnion[T any](current, next []T, key func(T) string, publishable func(T) (T, bool)) []T

+ func NormalizeDescription(value string) string

+ func NormalizeHomepage(value string) string

+ func NormalizeURL(raw string, form URLForm) (string, bool)

+ func ReservedMetadataKeys(metadata map[string]any) []string

+ type Contact struct

+ Kind ContactKind

+ Name string

+ URL string

+ func ParseSPDXContact(value string) (Contact, bool)

+ func (c *Contact) Clone() *Contact

+ func (c *Contact) UnmarshalJSON(data []byte) error

+ func (c Contact) Empty() bool

+ func (c Contact) MarshalJSON() ([]byte, error)

+ func (c Contact) Normalized() (Contact, bool)

+ func (c Contact) SPDXString() string

+ type ContactKind string

+ const ContactKindNoAssertion

+ const ContactKindOrganization

+ const ContactKindPerson

+ const ContactKindUnknown

+ func ParseContactKind(value string) (ContactKind, error)

type DependencyEdge

+ Kind EdgeKind

type DependencyNode

+ Description string

+ ExternalReferences []ExternalReference

+ Homepage string

+ Licenses []PackageLicense

+ Originator *Contact

+ Supplier *Contact

+ func (n *DependencyNode) AttributedScopes() []Scope

+ func (n *DependencyNode) LocationScopes() []Scope

+ func (n *DependencyNode) SyncScopesFromLocations()

type Digest

+ func (d *Digest) UnmarshalJSON(data []byte) error

+ func (d Digest) MarshalJSON() ([]byte, error)

+ func (d Digest) Normalized() (Digest, bool)

+ func (d Digest) Validate() error

type DigestAlgorithm

+ const DigestAlgorithmADLER32

+ const DigestAlgorithmBLAKE2b256

+ const DigestAlgorithmBLAKE2b384

+ const DigestAlgorithmBLAKE2b512

+ const DigestAlgorithmBLAKE3

+ const DigestAlgorithmMD2

+ const DigestAlgorithmMD4

+ const DigestAlgorithmMD5

+ const DigestAlgorithmMD6

+ const DigestAlgorithmSHA224

+ const DigestAlgorithmSHA3256

+ const DigestAlgorithmSHA3384

+ const DigestAlgorithmSHA3512

+ const DigestAlgorithmSHA384

+ const DigestAlgorithmSHA512

+ const DigestAlgorithmStreebog256

+ const DigestAlgorithmStreebog512

+ func DigestAlgorithms() []DigestAlgorithm

+ func ParseDigestAlgorithm(value string) (DigestAlgorithm, error)

+ func (a DigestAlgorithm) CycloneDXName() string

+ func (a DigestAlgorithm) SPDXName() string

+ func (a DigestAlgorithm) String() string

+ func (a DigestAlgorithm) Valid() bool

type DigestSubject

+ func ParseDigestSubject(value string) (DigestSubject, error)

+ func (s DigestSubject) String() string

+ func (s DigestSubject) Valid() bool

+ type DocumentAssertions struct

+ Comment string

+ Created string

+ Creators []Contact

+ DataLicense string

+ Identity string

+ Name string

+ Tools []DocumentTool

+ func MergeDocumentAssertions(dst, src DocumentAssertions) DocumentAssertions

+ func (d DocumentAssertions) Clone() DocumentAssertions

+ func (d DocumentAssertions) IsEmpty() bool

+ func (d DocumentAssertions) Normalized() (DocumentAssertions, bool)

+ type DocumentTool struct

+ Name string

+ Vendor string

+ Version string

+ func (t DocumentTool) Normalized() (DocumentTool, bool)

+ type EdgeKind string

+ const EdgeKindDependsOn

+ const EdgeKindDescribes

+ const EdgeKindUnknown

+ func DeriveEdgeKind(from, to GraphNode) EdgeKind

+ func MergeEdgeKind(current, next EdgeKind) EdgeKind

+ func ParseEdgeKind(value string) (EdgeKind, error)

+ func (k EdgeKind) SPDXName() string

+ func (k EdgeKind) String() string

+ type ExternalReference struct

+ Category ExternalReferenceCategory

+ Comment string

+ Hashes []Digest

+ Locator string

+ Type string

+ func MergeExternalReferences(existing, additions []ExternalReference) []ExternalReference

+ func (r *ExternalReference) UnmarshalJSON(data []byte) error

+ func (r ExternalReference) LocatorKind() LocatorKind

+ func (r ExternalReference) MarshalJSON() ([]byte, error)

+ func (r ExternalReference) Normalized() (ExternalReference, bool)

+ type ExternalReferenceCategory string

+ const ExternalReferenceCategoryOther

+ const ExternalReferenceCategoryPackageManager

+ const ExternalReferenceCategoryPersistentID

+ const ExternalReferenceCategorySecurity

+ const ExternalReferenceCategoryUnknown

+ func ParseExternalReferenceCategory(value string) (ExternalReferenceCategory, error)

+ func (c ExternalReferenceCategory) SPDXName() string

+ func (c ExternalReferenceCategory) String() string

type Graph

+ func (g *Graph) AddTypedEdge(fromID, toID string, kind EdgeKind) error

+ func (g *Graph) EdgeKindOf(fromID, toID string) EdgeKind

+ func (g *Graph) WalkTypedEdges(fn func(from, to GraphNode, kind EdgeKind) bool)

type GraphEntry

+ Document *DocumentAssertions

type LicenseType

+ const LicenseTypeConcluded

+ func ParseLicenseType(value string) (LicenseType, error)

+ type LocatorKind string

+ const LocatorKindCPE22

+ const LocatorKindCPE23

+ const LocatorKindIRI

+ const LocatorKindIdentifier

+ const LocatorKindPURL

+ const LocatorKindURL

+ func LocatorKindFor(category ExternalReferenceCategory, referenceType string) LocatorKind

type Package

+ Description string

+ ExternalReferences []ExternalReference

+ Homepage string

+ Originator *Contact

+ Supplier *Contact

+ func (p *Package) NormalizeAssertions()

+ func (p *Package) UnmarshalJSON(data []byte) error

+ func (p Package) MarshalJSON() ([]byte, error)

type PackageLicense

+ ExtractedText string

+ Name string

+ func MergeLicenses(existing, additions []PackageLicense) []PackageLicense

+ func (l *PackageLicense) UnmarshalJSON(data []byte) error

+ func (l PackageLicense) MarshalJSON() ([]byte, error)

+ func (l PackageLicense) Normalized() (PackageLicense, bool)

type PackageLocation

+ ModuleRoot string

+ Relationship DependencyRelationship

+ Scopes []Scope

+ type PackageNodeIndex map[string][]*DependencyNode

+ func IndexNodesByPackage(g *Graph) PackageNodeIndex

+ func (i PackageNodeIndex) Nodes(packageRef string) []*DependencyNode

+ func (i PackageNodeIndex) Usages(packageRef string, evidence []ReachabilityEvidence, filter UsageFilter) []Usage

type Reachability

+ Evidence []ReachabilityEvidence

+ func DeriveReachability(evidence []ReachabilityEvidence) Reachability

+ type ReachabilityEvidence struct

+ AnalyzedAt string

+ Analyzer string

+ CallPaths []CallPath

+ Confidence ReachabilityConfidence

+ DependencyRefs []string

+ DynamicImportsDetected bool

+ Hops *int

+ ModuleRoot string

+ Reason string

+ Status ReachabilityStatus

+ Symbols []AffectedSymbol

+ Tier ReachabilityTier

+ func (e ReachabilityEvidence) Clone() ReachabilityEvidence

type Scope

+ func DecodeScopeSet(value string) ([]Scope, error)

+ func ScopesFromCycloneDX(value string) []Scope

+ func ScopesFromCycloneDXComponent(scope, carrier string) []Scope

+ type URLForm int

+ const URLFormArtifact

+ const URLFormReference

+ const URLFormRepository

+ type Usage struct

+ Evidence *ReachabilityEvidence

+ Location PackageLocation

+ ModuleRoot string

+ func SelectUsages(node *DependencyNode, evidence []ReachabilityEvidence, filter UsageFilter) []Usage

+ type UsageFilter struct

+ Reachable bool

+ Relationship DependencyRelationship

+ Scope Scope

v0.6.0

Aug 30, 2026

Changes in this version

+ func CanonicalRepoPath(value string) (string, error)

+ func NormalizeCoordinates(pkg *Coordinates) []string

+ type DependencyNode struct

+ CPEs []string

+ Copyright string

+ Digests []Digest

+ FoundBy string

+ Locations []PackageLocation

+ Matched bool

+ Metadata map[string]any

+ Origins []DependencyOrigin

+ PackageRef string

+ Relationship DependencyRelationship

+ ResolvedURL string

+ Scopes []Scope

+ Source DependencySource

+ func NewDependencyNode(coords Coordinates) (*DependencyNode, error)

+ func NewDependencyNodeFromPURL(rawPURL string) (*DependencyNode, error)

+ func (d *DependencyNode) RegistryMatchEligible() bool

+ func (n *DependencyNode) AddScope(scope Scope)

+ func (n *DependencyNode) Clone() *DependencyNode

+ func (n *DependencyNode) CloneNode() GraphNode

+ func (n *DependencyNode) DisplayName() string

+ func (n *DependencyNode) HasScope(scope Scope) bool

+ func (n *DependencyNode) Kind() NodeKind

+ func (n *DependencyNode) MarshalJSON() ([]byte, error)

+ func (n *DependencyNode) NodeID() string

+ func (n *DependencyNode) NodeLocations() []PackageLocation

+ func (n *DependencyNode) NodeWarnings() []NodeWarning

+ func (n *DependencyNode) PURL() purlkit.PURL

+ func (n *DependencyNode) PrimaryScope() Scope

+ func (n *DependencyNode) QualifiedName() string

+ func (n *DependencyNode) UnmarshalJSON(data []byte) error

type DependencyOrigin

+ func MergeOrigins(existing, additions []DependencyOrigin) []DependencyOrigin

type Graph

+ func (g *Graph) DependencyNode(id string) (*DependencyNode, bool)

+ func (g *Graph) DependencyNodes() []*DependencyNode

+ func (g *Graph) InsertNode(node GraphNode) (GraphNode, error)

+ func (g *Graph) ManifestNodes() []*ManifestNode

+ func (g *Graph) ModuleNodes() []*ModuleNode

+ func (g *Graph) WalkDependencyNodes(fn func(*DependencyNode) bool)

+ type GraphNode interface

+ CloneNode func() GraphNode

+ Kind func() NodeKind

+ NodeID func() string

+ NodeLocations func() []PackageLocation

+ NodeWarnings func() []NodeWarning

+ type ManifestNode struct

+ FileKind ManifestKind

+ Metadata map[string]any

+ Path string

+ func NewManifestNode(manifestPath string, kind ManifestKind) (*ManifestNode, error)

+ func (n *ManifestNode) Clone() *ManifestNode

+ func (n *ManifestNode) CloneNode() GraphNode

+ func (n *ManifestNode) Kind() NodeKind

+ func (n *ManifestNode) NodeID() string

+ func (n *ManifestNode) NodeLocations() []PackageLocation

+ func (n *ManifestNode) NodeWarnings() []NodeWarning

+ type ModuleNode struct

+ DeclaringManifestPath string

+ Locations []PackageLocation

+ Metadata map[string]any

+ func NewModuleNode(declaringManifestPath string, coords Coordinates) (*ModuleNode, error)

+ func (n *ModuleNode) Clone() *ModuleNode

+ func (n *ModuleNode) CloneNode() GraphNode

+ func (n *ModuleNode) Kind() NodeKind

+ func (n *ModuleNode) NodeID() string

+ func (n *ModuleNode) NodeLocations() []PackageLocation

+ func (n *ModuleNode) NodeWarnings() []NodeWarning

+ func (n *ModuleNode) PURL() string

+ type NodeKind string

+ const NodeKindDependency

+ const NodeKindManifest

+ const NodeKindModule

+ func ParseNodeKind(value string) (NodeKind, error)

+ type NodeWarning struct

+ Code NodeWarningCode

+ Message string

+ type NodeWarningCode string

+ const NodeWarningDroppedEvidenceQualifier

+ const NodeWarningMissingVersion

type Package

+ DetectedOrigins []DependencyOrigin

+ func PackageFromDependencyNode(dep *DependencyNode) *Package

v0.5.1

Aug 28, 2026

v0.5.0

Aug 28, 2026

v0.4.2

Aug 21, 2026

Changes in this version

+ type DependencyOrigin struct

+ ArtifactURL string

+ Repository string

+ Revision string

+ func (o *DependencyOrigin) Clone() *DependencyOrigin

+ func (o *DependencyOrigin) Empty() bool

+ func (o *DependencyOrigin) Normalized() *DependencyOrigin

+ func (o *DependencyOrigin) UnmarshalJSON(data []byte) error

+ func (o DependencyOrigin) MarshalJSON() ([]byte, error)

v0.4.1

Aug 20, 2026

v0.4.0

Aug 19, 2026

Changes in this version

+ func NormalizeOriginURL(raw string, repository bool) (string, bool)

type Dependency

+ Origin *PackageOrigin

type Digest

+ Subject DigestSubject

+ type DigestSubject string

+ const DigestSubjectArtifact

+ const DigestSubjectMetadata

+ const DigestSubjectSourceTree

type Package

+ Attestations []PackageAttestation

+ Origin *PackageOrigin

+ type PackageAttestation struct

+ Digest *Digest

+ Issuer string

+ PredicateType string

+ Source string

+ URL string

+ Verified bool

+ func (a PackageAttestation) Clone() PackageAttestation

+ type PackageOrigin struct

+ ArtifactURL string

+ Disputed bool

+ Repository string

+ Revision string

+ func ArtifactOrigin(rawURL string) *PackageOrigin

+ func ReconcileOrigin(existing, incoming *PackageOrigin) *PackageOrigin

+ func RepositoryOrigin(rawURL, revision string) *PackageOrigin

+ func (o *PackageOrigin) Clone() *PackageOrigin

+ func (o *PackageOrigin) Empty() bool

+ func (o *PackageOrigin) Normalized() *PackageOrigin

+ func (o *PackageOrigin) UnmarshalJSON(data []byte) error

+ func (o PackageOrigin) MarshalJSON() ([]byte, error)

v0.3.0

Aug 12, 2026

Changes in this version

type DetectorModule

+ TargetKinds []ExecutionTargetKind

v0.2.0

Aug 11, 2026

Changes in this version

+ const EnvVerbosity

+ func ServeModule(m Module)

+ func ValidateModule(m Module) error

+ type AnalyzerModule struct

+ Descriptor AnalyzerDescriptor

+ New func(context.Context, HostContext) (Analyzer, error)

+ type AuditorModule struct

+ Descriptor AuditorDescriptor

+ New func(context.Context, HostContext) (Auditor, error)

+ type DetectorModule struct

+ Descriptor DetectorDescriptor

+ New func(context.Context, HostContext) (Detector, error)

+ Support []PackageManagerSupport

+ type ExecutionMode string

+ const ExecutionEmbedded

+ const ExecutionManaged

+ type HostContext interface

+ DecodeConfig func(v any) error

+ HTTPClient func() *HTTPClientProvider

+ Logger func() *zap.Logger

+ Runtime func() RuntimeInfo

+ type MatcherModule struct

+ Descriptor MatcherDescriptor

+ New func(context.Context, HostContext) (Matcher, error)

+ type Module struct

+ Analyzer *AnalyzerModule

+ Auditor *AuditorModule

+ Detector *DetectorModule

+ Kind PluginKind

+ Matcher *MatcherModule

+ type RuntimeInfo struct

+ CoreVersion string

+ Execution ExecutionMode

v0.1.0

Aug 10, 2026

Changes in this version

+ const CapabilityPackageUpdates

+ const EnvHTTPCACertFile

+ const EnvHTTPNoProxy

+ const EnvHTTPProxy

+ const EnvHTTPProxyHost

+ const EnvHTTPProxyPassword

+ const EnvHTTPProxyPort

+ const EnvHTTPProxyType

+ const EnvHTTPProxyUsername

+ const EnvPluginConfigFile

+ const EnvPluginID

+ const ExploitabilityValueExploitable

+ const InstalledPluginsSchemaVersion

+ const MetadataKeyDetectionLicenses

+ const MetadataKeyNPM

+ const PackageManifestSchemaVersion

+ const PluginAPIVersion

+ const ReachabilityValueReachable

+ const RuntimeDescriptorSnapshotSchemaVersion

+ const RuntimeHashiCorpGRPC

+ const SourceChangeValue

+ var ErrCycleDetected = errors.New("dependency creates a cycle")

+ var ErrEmptyNodeID = errors.New("dependency node id is empty")

+ var ErrNilNode = errors.New("dependency node is nil")

+ var ErrNodeAlreadyExist = errors.New("dependency node already exists")

+ var ErrNodeNotFound = errors.New("dependency node not found")

+ var ErrSelfDependency = errors.New("self dependency is not allowed")

+ func BuildPackageURL(purlType, namespace, name, version string) string

+ func CanonicalPackageURLFromDependency(dep *Dependency) string

+ func CanonicalPackageURLFromParts(existingPURL string, ecosystem Ecosystem, packageManager PackageManager, ...) string

+ func CanonicalizePackageURL(value string) string

+ func ClientPluginMap() map[string]hplugin.Plugin

+ func ConfigSchemaFor(prototype any) (json.RawMessage, error)

+ func DecodePluginConfigFromEnv(target any) error

+ func FindingPolicyStatusRank(status FindingPolicyStatus) (int, bool)

+ func HandshakeConfig() hplugin.HandshakeConfig

+ func MergeGraph(dst, src *Graph) error

+ func MustConfigSchemaFor(prototype any) json.RawMessage

+ func NewHTTPClient(config HTTPClientConfig) (*http.Client, error)

+ func NodeIsDiffable(node *Dependency) bool

+ func NodeIsEnrichable(node *Dependency) bool

+ func NormalizeDependencyIdentity(pkg *Dependency)

+ func PackageURLBase(value string) string

+ func PackageURLTypeForValues(values ...any) string

+ func ParsePackageURL(value string) *packageurl.PackageURL

+ func RawPluginConfigFromEnv() ([]byte, error)

+ func ServeAnalyzer(analyzer ServedAnalyzer)

+ func ServeAuditor(auditor ServedAuditor)

+ func ServeDetector(detector ServedDetector)

+ func ServeMatcher(matcher ServedMatcher)

+ func SetDetectionLicenses(dep *Dependency, licenses []PackageLicense)

+ func SeverityMeets(candidate SeverityLevel, threshold string) bool

+ func SeverityRank(severity SeverityLevel) int

+ func SortDependencyDetailTransitions(transitions []DependencyDetailTransition)

+ func ValidateAnalyzerDescriptor(descriptor *AnalyzerDescriptor) error

+ func ValidateAuditorDescriptor(descriptor *AuditorDescriptor) error

+ func ValidateDetectorDescriptor(descriptor *DetectorDescriptor) error

+ func ValidateMatcherDescriptor(descriptor *MatcherDescriptor) error

+ type Affected struct

+ DatabaseSpecific map[string]any

+ EcosystemSpecific map[string]any

+ Ranges []VersionRange

+ Versions []string

+ type AffectedSymbol struct

+ Definition *SourcePosition

+ Kind SymbolKind

+ Module string

+ Package string

+ Symbol string

+ func (s AffectedSymbol) Clone() AffectedSymbol

+ type AnalyzeRequest struct

+ AcceptPackageUpdates bool

+ AnalyzerFilter AnalyzerFilter

+ Ecosystem Ecosystem

+ ExecutionTarget ExecutionTarget

+ Graph *Graph

+ Language Language

+ PackageManager PackageManager

+ ProjectPath string

+ Query PackageQuery

+ Registry *PackageRegistry

+ Stderr io.Writer

+ SubprojectInfo Subproject

+ Target *Dependency

+ type AnalyzeResponse = AnalyzeResult

+ type AnalyzeResult struct

+ AnalyzerRuns []string

+ AnalyzerStats map[string]ReachabilityStats

+ PackageUpdates []*Package

+ Registry *PackageRegistry

+ type Analyzer interface

+ Analyze func(context.Context, AnalyzeRequest) (AnalyzeResult, error)

+ Applicable func(context.Context, AnalyzeRequest) (bool, error)

+ Descriptor func() AnalyzerDescriptor

+ Ready func(context.Context, AnalyzeRequest) error

+ type AnalyzerDescriptor struct

+ Aliases []string

+ Capabilities []string

+ ConfigSchema json.RawMessage

+ DisplayName string

+ Name string

+ SupportedEcosystems []Ecosystem

+ SupportedLanguages []Language

+ SupportedManagers []PackageManager

+ SupportedTiers []ReachabilityTier

+ Tags []string

+ func (d AnalyzerDescriptor) Label() string

+ type AnalyzerFilter struct

+ Exclude []string

+ Include []string

+ func (f AnalyzerFilter) Excludes(name string) bool

+ func (f AnalyzerFilter) Includes(name string) bool

+ type ApplicableResponse struct

+ Applicable bool

+ type AuditRequest struct

+ AuditorFilter AuditorFilter

+ BaselineGraph *Graph

+ DependencyDetailChanges []DependencyDetailTransition

+ Ecosystem Ecosystem

+ ExecutionTarget ExecutionTarget

+ Graph *Graph

+ PackageManager PackageManager

+ ProjectPath string

+ Query PackageQuery

+ Registry *PackageRegistry

+ Stderr io.Writer

+ SubprojectInfo Subproject

+ Target *Dependency

+ type AuditResponse = AuditResult

+ type AuditResult struct

+ AuditorFindings map[string]int

+ AuditorRuns []string

+ Findings []Finding

+ RiskScores []RiskScore

+ type Auditor interface

+ Applicable func(context.Context, AuditRequest) (bool, error)

+ Audit func(context.Context, AuditRequest) (AuditResult, error)

+ Descriptor func() AuditorDescriptor

+ Ready func(context.Context, AuditRequest) error

+ type AuditorDescriptor struct

+ Aliases []string

+ ConfigSchema json.RawMessage

+ DisplayName string

+ Name string

+ SupportedEcosystems []Ecosystem

+ SupportedManagers []PackageManager

+ Tags []string

+ func (d AuditorDescriptor) Label() string

+ type AuditorFilter struct

+ Exclude []string

+ Include []string

+ func (f AuditorFilter) Excludes(name string) bool

+ func (f AuditorFilter) Includes(name string) bool

+ type BaseAnalyzer struct

+ func (BaseAnalyzer) Applicable(context.Context, AnalyzeRequest) (bool, error)

+ func (BaseAnalyzer) Ready(context.Context, AnalyzeRequest) error

+ type BaseAuditor struct

+ func (BaseAuditor) Applicable(context.Context, AuditRequest) (bool, error)

+ func (BaseAuditor) Ready(context.Context, AuditRequest) error

+ type BaseDetector struct

+ func (BaseDetector) Applicable(context.Context, DetectionRequest) (bool, error)

+ func (BaseDetector) Ready(context.Context, DetectionRequest) error

+ type BaseMatcher struct

+ func (BaseMatcher) Applicable(context.Context, MatchRequest) (bool, error)

+ func (BaseMatcher) Ready(context.Context, MatchRequest) error

+ type CVSSScore struct

+ Score float64

+ Source string

+ Vector string

+ Version SeverityType

+ type CWE struct

+ CVE string

+ ID string

+ Source string

+ Type string

+ type CallFrame struct

+ Function string

+ Package string

+ Position SourcePosition

+ Receiver string

+ type CallPath struct

+ Frames []CallFrame

+ Sink AffectedSymbol

+ func (p CallPath) Clone() CallPath

+ type Client interface

+ Analyze func(context.Context, *AnalyzeRequest) (*AnalyzeResponse, error)

+ AnalyzerApplicable func(context.Context, *AnalyzeRequest) (*ApplicableResponse, error)

+ AnalyzerDescriptor func(context.Context) (*AnalyzerDescriptor, error)

+ AnalyzerReady func(context.Context, *AnalyzeRequest) (*ReadyResponse, error)

+ Audit func(context.Context, *AuditRequest) (*AuditResponse, error)

+ AuditorApplicable func(context.Context, *AuditRequest) (*ApplicableResponse, error)

+ AuditorDescriptor func(context.Context) (*AuditorDescriptor, error)

+ AuditorReady func(context.Context, *AuditRequest) (*ReadyResponse, error)

+ Detect func(context.Context, *DetectRequest) (*DetectResponse, error)

+ DetectorApplicable func(context.Context, *DetectRequest) (*ApplicableResponse, error)

+ DetectorDescriptor func(context.Context) (*DetectorDescriptor, error)

+ DetectorInstall func(context.Context, *DetectRequest) (*InstallResponse, error)

+ DetectorPackageManagerSupport func(context.Context) ([]PackageManagerSupport, error)

+ DetectorReady func(context.Context, *DetectRequest) (*ReadyResponse, error)

+ DetectorRemediationHints func(context.Context, *RemediationHintRequest) (*RemediationHintResponse, error)

+ Match func(context.Context, *MatchRequest) (*MatchResponse, error)

+ MatcherApplicable func(context.Context, *MatchRequest) (*ApplicableResponse, error)

+ MatcherDescriptor func(context.Context) (*MatcherDescriptor, error)

+ MatcherReady func(context.Context, *MatchRequest) (*ReadyResponse, error)

+ type ComponentDescriptor struct

+ Aliases []string

+ DisplayName string

+ Name string

+ SupportedEcosystems []Ecosystem

+ SupportedManagers []PackageManager

+ Tags []string

+ func (d ComponentDescriptor) Label() string

+ type ConsolidatedGraph struct

+ ExecutionTarget ExecutionTarget

+ Graphs *GraphContainer

+ Manifests []ConsolidatedManifest

+ Subprojects []ConsolidatedSubproject

+ type ConsolidatedManifest struct

+ DetectorName string

+ Entry GraphEntry

+ Origin DetectorOrigin

+ RootManifestID string

+ Subproject Subproject

+ Technique DetectorTechnique

+ type ConsolidatedSubproject struct

+ DetectorName string

+ RootManifestIDs []string

+ Subproject Subproject

+ type Coordinates struct

+ Ecosystem Ecosystem

+ FirstParty bool

+ Language Language

+ Name string

+ Org string

+ PURL string

+ PackageManager PackageManager

+ Type PackageType

+ Version string

+ func (i Coordinates) CanonicalPURL() string

+ func (i Coordinates) DisplayName() string

+ func (i Coordinates) EcosystemName() string

+ func (i Coordinates) IdentityKey() string

+ func (i Coordinates) QualifiedName() string

+ func (i Coordinates) StableID() string

+ type Dependency struct

+ CPEs []string

+ Copyright string

+ Digests []Digest

+ FoundBy string

+ ID string

+ Locations []PackageLocation

+ Matched bool

+ Metadata map[string]any

+ PackageRef string

+ Relationship DependencyRelationship

+ ResolvedURL string

+ Scopes []Scope

+ Source DependencySource

+ func NewDependency(dep Dependency) *Dependency

+ func NewDependencyRef(name, version string) *Dependency

+ func NewDependencyRefWithID(id, name, version string) *Dependency

+ func NewDependencyWithID(id string, dep Dependency) *Dependency

+ func (d *Dependency) AddScope(scope Scope)

+ func (d *Dependency) Clone() *Dependency

+ func (d *Dependency) DisplayName() string

+ func (d *Dependency) HasScope(scope Scope) bool

+ func (d *Dependency) IdentityKey() string

+ func (d *Dependency) PrimaryScope() Scope

+ func (d *Dependency) QualifiedName() string

+ func (d *Dependency) RegistryMatchEligible() bool

+ func (d *Dependency) StableID() string

+ func (d *Dependency) WithoutID() Dependency

+ type DependencyDetailField string

+ const DependencyDetailRegistryEligibility

+ const DependencyDetailRelationship

+ const DependencyDetailSource

+ type DependencyDetailReviewReason string

+ const DependencyDetailReviewSourceGit

+ const DependencyDetailReviewSourceURL

+ type DependencyDetailTransition struct

+ After *Dependency

+ AfterRegistryEligible bool

+ AfterRelationship DependencyRelationship

+ Before *Dependency

+ BeforeRegistryEligible bool

+ BeforeRelationship DependencyRelationship

+ ChangedFields []DependencyDetailField

+ func CloneDependencyDetailTransitions(transitions []DependencyDetailTransition) []DependencyDetailTransition

+ func CompareDependencyDetails(baseGraph, headGraph *Graph, before, after *Dependency) (DependencyDetailTransition, bool)

+ func (t DependencyDetailTransition) NeedsReview() bool

+ func (t DependencyDetailTransition) ReviewReasons() []DependencyDetailReviewReason

+ type DependencyEdge struct

+ FromID string

+ ToID string

+ type DependencyQuery struct

+ ID string

+ Name string

+ type DependencyRelationship string

+ const DependencyRelationshipDirect

+ const DependencyRelationshipTransitive

+ const DependencyRelationshipUnknown

+ func MergeDependencyRelationship(current, next DependencyRelationship) DependencyRelationship

+ func ParseDependencyRelationship(value string) DependencyRelationship

+ func RelationshipForPath(path []*Dependency) DependencyRelationship

+ type DependencySource string

+ const DependencySourceFile

+ const DependencySourceGit

+ const DependencySourceProject

+ const DependencySourceRegistry

+ const DependencySourceURL

+ const DependencySourceWorkspace

+ type DetectRequest = DetectionRequest

+ type DetectResponse = DetectionResult

+ type DetectionRequest struct

+ AllowStdErrLogging bool

+ CoreVersion string

+ DetectorFilter DetectorFilter

+ Ecosystem Ecosystem

+ EnrichmentEnabled bool

+ ExecutionTarget ExecutionTarget

+ InstallArgs []string

+ InstallFirst bool

+ Logger *zap.Logger

+ PackageManager PackageManager

+ ProjectPath string

+ Query DependencyQuery

+ ScopeFilter Scope

+ Stderr io.Writer

+ Subproject Subproject

+ Verbose bool

+ func (r DetectionRequest) DetectorLogger(fallback *zap.Logger) *zap.Logger

+ type DetectionResult struct

+ DetectorName string

+ FallbackFrom string

+ FallbackReason string

+ Graphs *GraphContainer

+ Origin DetectorOrigin

+ RootExecutionTarget ExecutionTarget

+ SubprojectInfo Subproject

+ Technique DetectorTechnique

+ Warnings []DetectorWarning

+ func FilterDetectionResultByScope(result DetectionResult, scope Scope) (DetectionResult, error)

+ func (r DetectionResult) ConsolidatedGraph() (*Graph, error)

+ type Detector interface

+ Applicable func(context.Context, DetectionRequest) (bool, error)

+ Descriptor func() DetectorDescriptor

+ PackageManagerSupport func() []PackageManagerSupport

+ Ready func(context.Context, DetectionRequest) error

+ ResolveGraph func(context.Context, DetectionRequest) (DetectionResult, error)

+ type DetectorDescriptor struct

+ Aliases []string

+ ConfigSchema json.RawMessage

+ DisplayName string

+ FallbackDetectors []string

+ IgnoredDirectories []string

+ IgnoredDirectoryMarkers []string

+ Name string

+ PackageManagerSupport []PackageManagerSupport

+ RemediationCapabilities []RemediationCapability

+ SupportedEcosystems []Ecosystem

+ SupportedManagers []PackageManager

+ SupportsInstallFirst bool

+ Tags []string

+ Technique DetectorTechnique

+ func (d DetectorDescriptor) Clone() DetectorDescriptor

+ func (d DetectorDescriptor) Label() string

+ type DetectorFilter struct

+ Exclude []string

+ Include []string

+ func (f DetectorFilter) Excludes(name string) bool

+ func (f DetectorFilter) Includes(name string) bool

+ type DetectorInstaller interface

+ Install func(context.Context, *DetectRequest) (*InstallResponse, error)

+ type DetectorOrigin string

+ const BundledOrigin

+ const CoreOrigin

+ const ExternalOrigin

+ type DetectorRemediationProvider interface

+ RemediationHints func(context.Context, RemediationHintRequest) (RemediationHintResponse, error)

+ type DetectorTechnique string

+ const BinaryTechnique

+ const BuildToolTechnique

+ const ContainerTechnique

+ const LockfileTechnique

+ const ManifestTechnique

+ const MultipleTechnique

+ const SBOMTechnique

+ type DetectorWarning struct

+ Code DetectorWarningCode

+ Manifest string

+ Message string

+ Source string

+ Subproject string

+ Type DetectorWarningType

+ func (w DetectorWarning) DegradesCoverage() bool

+ type DetectorWarningCode string

+ const DetectorWarningCodeEnginesConstraint

+ const DetectorWarningCodeInstallGate

+ const DetectorWarningCodeLockfileFormat

+ const DetectorWarningCodeLockfileUnsupported

+ type DetectorWarningType string

+ const DetectorWarningFallback

+ const DetectorWarningPackageManager

+ const DetectorWarningResolutionFailure

+ func (t DetectorWarningType) DegradesCoverage() bool

+ type Diff struct

+ Added []*Dependency

+ Removed []*Dependency

+ Transitions []DependencyDetailTransition

+ Updated []VersionChange

+ func Compare(base, head *Graph) Diff

+ type Digest struct

+ Algorithm DigestAlgorithm

+ Value string

+ type DigestAlgorithm string

+ const DigestAlgorithmSHA1

+ const DigestAlgorithmSHA256

+ type EPSSScore struct

+ CVE string

+ Date string

+ EPSS float64

+ Percentile float64

+ type Ecosystem string

+ const EcosystemALPM

+ const EcosystemAPK

+ const EcosystemCPP

+ const EcosystemConda

+ const EcosystemDPKG

+ const EcosystemDart

+ const EcosystemDotNet

+ const EcosystemElixir

+ const EcosystemErlang

+ const EcosystemGitHub

+ const EcosystemGo

+ const EcosystemHaskell

+ const EcosystemHomebrew

+ const EcosystemLua

+ const EcosystemMaven

+ const EcosystemNPM

+ const EcosystemNix

+ const EcosystemOCaml

+ const EcosystemOther

+ const EcosystemPHP

+ const EcosystemPortage

+ const EcosystemProlog

+ const EcosystemPython

+ const EcosystemR

+ const EcosystemRPM

+ const EcosystemRuby

+ const EcosystemRust

+ const EcosystemSBOM

+ const EcosystemScala

+ const EcosystemSnap

+ const EcosystemSwift

+ const EcosystemTerraform

+ const EcosystemUnknown

+ const EcosystemWordPress

+ func ParseEcosystem(value string) (Ecosystem, error)

+ func (e Ecosystem) String() string

+ type EcosystemFilter struct

+ Exclude []Ecosystem

+ Include []Ecosystem

+ func (f EcosystemFilter) Excludes(name Ecosystem) bool

+ func (f EcosystemFilter) Includes(name Ecosystem) bool

+ type ExecutionTarget struct

+ Kind ExecutionTargetKind

+ Location string

+ Ref string

+ RepositoryURL string

+ type ExecutionTargetKind string

+ const ExecutionTargetContainerImage

+ const ExecutionTargetFilesystem

+ const ExecutionTargetGitRepository

+ const ExecutionTargetWorkingDirectory

+ type FailOnConstraint struct

+ Kind FailOnKind

+ Value string

+ func ParseFailOn(raw string) (FailOnConstraint, error)

+ func ParseFailOnList(raws []string) ([]FailOnConstraint, error)

+ func (c FailOnConstraint) String() string

+ type FailOnKind string

+ const ExploitabilityConstraint

+ const ReachabilityConstraint

+ const SeverityConstraint

+ const SourceChangeConstraint

+ type FallbackDetector interface

+ FallbackDetector func() Detector

+ type Finding struct

+ Auditor string

+ DependencyRefs []string

+ ID string

+ Kind FindingKind

+ PackageRef string

+ PolicyStatus FindingPolicyStatus

+ Reasons []string

+ RuleID string

+ Severity SeverityLevel

+ Source string

+ Title string

+ VEXJustification string

+ VexStatus VEXStatus

+ VulnerabilityID string

+ func (f *Finding) UnmarshalJSON(data []byte) error

+ func (f Finding) Clone() Finding

+ type FindingKind string

+ const FindingKindLicense

+ const FindingKindPackage

+ const FindingKindVulnerability

+ type FindingPolicyDecision struct

+ Reason string

+ Source string

+ Status FindingPolicyStatus

+ type FindingPolicyResolver interface

+ ResolveFindingPolicy func(context.Context, Finding, *PackageRegistry) (FindingPolicyDecision, bool)

+ type FindingPolicyStatus string

+ const FindingPolicyStatusFail

+ const FindingPolicyStatusSuppressed

+ const FindingPolicyStatusWarn

+ type FixAvailable struct

+ Date string

+ Kind FixAvailableKind

+ Version string

+ type FixAvailableKind string

+ const FixAvailableFirstObserved

+ type FixState string

+ const FixStateFixed

+ const FixStateNotFixed

+ const FixStateUnknown

+ const FixStateWontFix

+ type Graph struct

+ func ConsolidateGraphContainerEntry(container *GraphContainer) (*Graph, error)

+ func FilterGraphByScope(src *Graph, scope Scope) (*Graph, error)

+ func New() *Graph

+ func NewWithCapacity(nodeCount int) *Graph

+ func (g *Graph) AddEdge(fromID, toID string) error

+ func (g *Graph) AddNode(node *Dependency) error

+ func (g *Graph) CollectPathsTo(targetID string) ([]Path, error)

+ func (g *Graph) Dependents(id string) ([]*Dependency, error)

+ func (g *Graph) DirectDependencies(id string) ([]*Dependency, error)

+ func (g *Graph) Leaves() []*Dependency

+ func (g *Graph) MarshalJSON() ([]byte, error)

+ func (g *Graph) Node(id string) (*Dependency, bool)

+ func (g *Graph) Nodes() []*Dependency

+ func (g *Graph) PrettyString() string

+ func (g *Graph) PrettyTree() string

+ func (g *Graph) RemoveEdge(fromID, toID string) bool

+ func (g *Graph) RemoveNode(id string) bool

+ func (g *Graph) Roots() []*Dependency

+ func (g *Graph) Size() int

+ func (g *Graph) TopologicalSort() ([]*Dependency, error)

+ func (g *Graph) UnmarshalJSON(data []byte) error

+ func (g *Graph) WalkEdges(fn func(from, to *Dependency) bool)

+ func (g *Graph) WalkNodes(fn func(*Dependency) bool)

+ type GraphContainer struct

+ Entries []GraphEntry

+ func SingleGraphContainer(g *Graph, manifest ManifestMetadata) *GraphContainer

+ func (c *GraphContainer) ConsolidatedGraph() (*Graph, error)

+ func (c *GraphContainer) Len() int

+ type GraphEntry struct

+ Graph *Graph

+ Manifest ManifestMetadata

+ Packages []*Package

+ type HTTPClientConfig struct

+ CACertFile string

+ NoProxy string

+ ProxyHost string

+ ProxyPassword string

+ ProxyPort int

+ ProxyType string

+ ProxyURL string

+ ProxyUsername string

+ Timeout time.Duration

+ func HTTPClientConfigFromEnv() HTTPClientConfig

+ func (config HTTPClientConfig) EffectiveProxyURL() (string, error)

+ type HTTPClientProvider struct

+ func NewHTTPClientProvider(config HTTPClientConfig) (*HTTPClientProvider, error)

+ func NewHTTPClientProviderFromEnv() (*HTTPClientProvider, error)

+ func (p *HTTPClientProvider) Client(timeout time.Duration) *http.Client

+ func (p *HTTPClientProvider) CloseIdleConnections()

+ type InstallFirstDetector interface

+ Install func(context.Context, DetectionRequest) error

+ type InstallResponse struct

+ Performed bool

+ type KnownExploited struct

+ CVE string

+ CWEs []string

+ DateAdded string

+ DueDate string

+ KnownRansomwareCampaignUse string

+ Notes string

+ Product string

+ RequiredAction string

+ URLs []string

+ VendorProject string

+ type Language string

+ const LanguageC

+ const LanguageCPP

+ const LanguageCSharp

+ const LanguageDart

+ const LanguageElixir

+ const LanguageErlang

+ const LanguageFSharp

+ const LanguageGo

+ const LanguageGroovy

+ const LanguageHaskell

+ const LanguageJava

+ const LanguageJavaScript

+ const LanguageKotlin

+ const LanguageLua

+ const LanguageOCaml

+ const LanguageObjC

+ const LanguagePHP

+ const LanguagePython

+ const LanguageR

+ const LanguageRuby

+ const LanguageRust

+ const LanguageScala

+ const LanguageSwift

+ const LanguageTypeScript

+ const LanguageUnknown

+ const LanguageVB

+ func LanguageFromPackage(p Package) Language

+ func ParseLanguage(value string) Language

+ type LicenseType string

+ const LicenseTypeDeclared

+ type ManifestKind string

+ const ManifestKindBomlySPDX

+ const ManifestKindBunLock

+ const ManifestKindGitHubActions

+ const ManifestKindGitHubActionsAction

+ const ManifestKindGitHubActionsWorkflow

+ const ManifestKindGitHubSPDX

+ const ManifestKindGoMod

+ const ManifestKindGoModule

+ const ManifestKindNPMLockfile

+ const ManifestKindPackageJSON

+ const ManifestKindPackageLockJSON

+ const ManifestKindPomXML

+ const ManifestKindRequirementsTXT

+ const ManifestKindSBOM

+ const ManifestKindSPDX

+ type ManifestMetadata struct

+ Kind ManifestKind

+ Path string

+ Resolution *ResolutionMetadata

+ type MatchRequest struct

+ AcceptPackageUpdates bool

+ Ecosystem Ecosystem

+ ExecutionTarget ExecutionTarget

+ Graph *Graph

+ MatcherFilter MatcherFilter

+ PackageManager PackageManager

+ ProjectPath string

+ Query PackageQuery

+ Registry *PackageRegistry

+ Stderr io.Writer

+ SubprojectInfo Subproject

+ Target *Dependency

+ type MatchResponse = MatchResult

+ type MatchResult struct

+ MatcherStats MatcherStats

+ PackageUpdates []*Package

+ Registry *PackageRegistry

+ type Matcher interface

+ Applicable func(context.Context, MatchRequest) (bool, error)

+ Descriptor func() MatcherDescriptor

+ Match func(context.Context, MatchRequest) (MatchResult, error)

+ Ready func(context.Context, MatchRequest) error

+ type MatcherDescriptor struct

+ Aliases []string

+ Capabilities []string

+ ConfigSchema json.RawMessage

+ DisplayName string

+ Name string

+ SupportedEcosystems []Ecosystem

+ SupportedManagers []PackageManager

+ Tags []string

+ func (d MatcherDescriptor) Label() string

+ type MatcherFilter struct

+ Exclude []string

+ Include []string

+ func (f MatcherFilter) Excludes(name string) bool

+ func (f MatcherFilter) Includes(name string) bool

+ type MatcherStats struct

+ DisplayName string

+ Licenses int

+ MatchedPackages int

+ Name string

+ UnmatchedPackages int

+ Vulnerabilities int

+ type NPMPackageMetadata struct

+ Bundled bool

+ Engines map[string]string

+ Extraneous bool

+ HasInstallScript bool

+ OptionalPeerDependencies []string

+ PeerDependencies map[string]string

+ type Package struct

+ CPEs []string

+ Copyright string

+ Digests []Digest

+ EOL *PackageEOL

+ ID string

+ Licenses []PackageLicense

+ Matched bool

+ Metadata map[string]any

+ Remediation *PackageRemediation

+ ResolvedURL string

+ Scorecard *PackageScorecard

+ Vulnerabilities []Vulnerability

+ func PackageFromDependency(dep *Dependency) *Package

+ func (p *Package) Clone() *Package

+ func (p *Package) DisplayName() string

+ func (p *Package) IdentityKey() string

+ func (p *Package) LicenseValues() []string

+ func (p *Package) MergeFrom(src *Package)

+ func (p *Package) QualifiedName() string

+ type PackageEOL struct

+ Cycle string

+ EOL bool

+ EOLDate string

+ LatestVersion string

+ ReleaseDate string

+ Source string

+ Supported bool

+ func (e *PackageEOL) Clone() *PackageEOL

+ type PackageLicense struct

+ SPDXExpression string

+ Type LicenseType

+ Value string

+ func DetectionLicenses(dep *Dependency) []PackageLicense

+ type PackageLocation struct

+ AccessPath string

+ Position *SourcePosition

+ RealPath string

+ type PackageManager string

+ const PackageManagerALPM

+ const PackageManagerAPK

+ const PackageManagerBun

+ const PackageManagerBundler

+ const PackageManagerCabal

+ const PackageManagerCargo

+ const PackageManagerCocoaPods

+ const PackageManagerComposer

+ const PackageManagerConan

+ const PackageManagerConda

+ const PackageManagerDPKG

+ const PackageManagerGemspec

+ const PackageManagerGitHubActions

+ const PackageManagerGoMod

+ const PackageManagerGradle

+ const PackageManagerHomebrew

+ const PackageManagerLuaRocks

+ const PackageManagerMaven

+ const PackageManagerMix

+ const PackageManagerMultiple

+ const PackageManagerNPM

+ const PackageManagerNix

+ const PackageManagerNuGet

+ const PackageManagerOTP

+ const PackageManagerOpam

+ const PackageManagerOther

+ const PackageManagerPDM

+ const PackageManagerPNPM

+ const PackageManagerPear

+ const PackageManagerPip

+ const PackageManagerPipenv

+ const PackageManagerPoetry

+ const PackageManagerPortage

+ const PackageManagerPub

+ const PackageManagerRPM

+ const PackageManagerRPackage

+ const PackageManagerRebar

+ const PackageManagerSBOM

+ const PackageManagerSBT

+ const PackageManagerSWIPLPack

+ const PackageManagerSetupPy

+ const PackageManagerSnap

+ const PackageManagerStack

+ const PackageManagerSwiftPM

+ const PackageManagerTerraform

+ const PackageManagerUV

+ const PackageManagerUnknown

+ const PackageManagerWordPress

+ const PackageManagerYarn

+ func AllPackageManagers() []PackageManager

+ func ParsePackageManager(value string) (PackageManager, error)

+ func (p *PackageManager) UnmarshalJSON(data []byte) error

+ func (p PackageManager) Ecosystem() Ecosystem

+ func (p PackageManager) Languages() []Language

+ func (p PackageManager) MarshalJSON() ([]byte, error)

+ func (p PackageManager) Name() string

+ func (p PackageManager) String() string

+ type PackageManagerSupport struct

+ EvidencePatterns []string

+ MultiModule bool

+ PackageManager PackageManager

+ func Support(manager PackageManager, evidencePatterns ...string) PackageManagerSupport

+ func (s PackageManagerSupport) WithMultiModule() PackageManagerSupport

+ type PackageManagerSupporter interface

+ PackageManagerSupport func() []PackageManagerSupport

+ type PackageQuery struct

+ ID string

+ Name string

+ type PackageRegistry struct

+ func ApplyPackageUpdates(registry *PackageRegistry, updates []*Package) *PackageRegistry

+ func NewPackageRegistry() *PackageRegistry

+ func (r *PackageRegistry) Add(pkg *Package) *Package

+ func (r *PackageRegistry) All() []*Package

+ func (r *PackageRegistry) Ensure(purl string) *Package

+ func (r *PackageRegistry) Get(purl string) (*Package, bool)

+ func (r *PackageRegistry) Len() int

+ func (r *PackageRegistry) MarshalJSON() ([]byte, error)

+ func (r *PackageRegistry) Merge(other *PackageRegistry)

+ func (r *PackageRegistry) UnmarshalJSON(data []byte) error

+ type PackageRemediation struct

+ RecommendedVersion string

+ Status PackageRemediationStatus

+ Suggestions []PackageRemediationSuggestion

+ func (r *PackageRemediation) Clone() *PackageRemediation

+ type PackageRemediationStatus string

+ const PackageRemediationComplete

+ const PackageRemediationPartial

+ const PackageRemediationUnavailable

+ const PackageRemediationUnknown

+ type PackageRemediationSuggestion struct

+ Action RemediationAction

+ AffectedDependencyRefs []string

+ ManifestPath string

+ OverrideAdvice string

+ SuggestedActionDependencyRef string

+ type PackageScorecard struct

+ AggregateScore float64

+ Checks []PackageScorecardCheck

+ CommitSHA string

+ Repository string

+ RunDate time.Time

+ ScorecardVersion string

+ Source string

+ func (s *PackageScorecard) Clone() *PackageScorecard

+ type PackageScorecardCheck struct

+ Documentation string

+ Name string

+ Reason string

+ Score int

+ type PackageType string

+ const PackageTypeAction

+ const PackageTypeApplication

+ const PackageTypeFile

+ const PackageTypeManifest

+ const PackageTypePackage

+ const PackageTypeProject

+ const PackageTypeTransitive

+ const PackageTypeUnknown

+ const PackageTypeWorkflow

+ func ParsePackageType(value string) PackageType

+ func (t PackageType) String() string

+ type Path struct

+ CycleTo string

+ Cyclic bool

+ Nodes []*Dependency

+ type PluginKind string

+ const PluginKindAnalyzer

+ const PluginKindAuditor

+ const PluginKindDetector

+ const PluginKindMatcher

+ type PluginTargetType string

+ type RangeEvent struct

+ Fixed string

+ Introduced string

+ LastAffected string

+ Limit string

+ type Reachability struct

+ AnalyzedAt string

+ Analyzer string

+ CallPaths []CallPath

+ Confidence ReachabilityConfidence

+ DynamicImportsDetected bool

+ Hops *int

+ Reason string

+ Status ReachabilityStatus

+ Symbols []AffectedSymbol

+ Tier ReachabilityTier

+ func (r *Reachability) Clone() *Reachability

+ type ReachabilityConfidence string

+ const ConfidenceHigh

+ const ConfidenceLow

+ const ConfidenceMedium

+ const ConfidenceUnknown

+ func DeriveConfidence(hops *int, dynamicImports bool) ReachabilityConfidence

+ type ReachabilityStats struct

+ NotApplicable int

+ Reachable int

+ Unknown int

+ Unreachable int

+ type ReachabilityStatus string

+ const ReachabilityReachable

+ const ReachabilityUnknown

+ const ReachabilityUnreachable

+ type ReachabilityTier string

+ const TierNone

+ const TierPackage

+ const TierSymbol

+ type ReadyResponse struct

+ Ready bool

+ Reason string

+ type Reference struct

+ Type ReferenceType

+ URL string

+ type ReferenceType string

+ const ReferenceTypeAdvisory

+ const ReferenceTypeDataSource

+ type RemediationAction string

+ const RemediationActionDirectBump

+ const RemediationActionLockfileRefresh

+ const RemediationActionManualReview

+ const RemediationActionNoFixUpstream

+ const RemediationActionTransitiveOverride

+ type RemediationCapability struct

+ Actions []RemediationAction

+ SupportedManagers []PackageManager

+ type RemediationHint struct

+ DependencyRef string

+ ManifestPath string

+ Strategies []RemediationStrategyHint

+ type RemediationHintRequest struct

+ Detection DetectionResult

+ ProjectPath string

+ Registry *PackageRegistry

+ type RemediationHintResponse struct

+ Diagnostics []string

+ Hints []RemediationHint

+ type RemediationStrategyHint struct

+ Action RemediationAction

+ Advice string

+ type ResolutionFallback struct

+ From string

+ Reason string

+ type ResolutionMetadata struct

+ Fallback *ResolutionFallback

+ InstallCommand []string

+ InstallExecuted bool

+ InstallWorkingDir string

+ Method ResolutionMethod

+ type ResolutionMethod string

+ const ResolutionMethodIsolatedInstall

+ const ResolutionMethodLockfile

+ const ResolutionMethodManifestOnly

+ const ResolutionMethodProjectEnvironment

+ type RiskBand string

+ const RiskBandCritical

+ const RiskBandHigh

+ const RiskBandLow

+ const RiskBandMedium

+ const RiskBandUnknown

+ type RiskScore struct

+ Band RiskBand

+ PackageRef string

+ Score int

+ Signals map[string]any

+ type Scope string

+ const ScopeDevelopment

+ const ScopeRuntime

+ const ScopeUnknown

+ func MergeScope(current, next Scope) Scope

+ func ParseScope(value string) (Scope, error)

+ func ScopesOf(scopes ...Scope) []Scope

+ type ServedAnalyzer interface

+ Analyze func(context.Context, *AnalyzeRequest) (*AnalyzeResponse, error)

+ Applicable func(context.Context, *AnalyzeRequest) (*ApplicableResponse, error)

+ Descriptor func(context.Context) (*AnalyzerDescriptor, error)

+ Ready func(context.Context, *AnalyzeRequest) (*ReadyResponse, error)

+ type ServedAuditor interface

+ Applicable func(context.Context, *AuditRequest) (*ApplicableResponse, error)

+ Audit func(context.Context, *AuditRequest) (*AuditResponse, error)

+ Descriptor func(context.Context) (*AuditorDescriptor, error)

+ Ready func(context.Context, *AuditRequest) (*ReadyResponse, error)

+ type ServedDetector interface

+ Applicable func(context.Context, *DetectRequest) (*ApplicableResponse, error)

+ Descriptor func(context.Context) (*DetectorDescriptor, error)

+ Detect func(context.Context, *DetectRequest) (*DetectResponse, error)

+ PackageManagerSupport func(context.Context) ([]PackageManagerSupport, error)

+ Ready func(context.Context, *DetectRequest) (*ReadyResponse, error)

+ type ServedDetectorRemediationProvider interface

+ RemediationHints func(context.Context, *RemediationHintRequest) (*RemediationHintResponse, error)

+ type ServedMatcher interface

+ Applicable func(context.Context, *MatchRequest) (*ApplicableResponse, error)

+ Descriptor func(context.Context) (*MatcherDescriptor, error)

+ Match func(context.Context, *MatchRequest) (*MatchResponse, error)

+ Ready func(context.Context, *MatchRequest) (*ReadyResponse, error)

+ type Severity struct

+ Score string

+ Type SeverityType

+ type SeverityLevel string

+ const SeverityAny

+ const SeverityCritical

+ const SeverityError

+ const SeverityHigh

+ const SeverityLow

+ const SeverityMedium

+ const SeverityNA

+ const SeverityNote

+ const SeverityUnknown

+ const SeverityWarning

+ func ParseSeverityLevel(value string) SeverityLevel

+ type SeverityType string

+ const SeverityTypeCVSSV2

+ const SeverityTypeCVSSV3

+ const SeverityTypeCVSSV31

+ const SeverityTypeCVSSV4

+ type SourcePosition struct

+ Column int

+ EndLine int

+ File string

+ Line int

+ func (p SourcePosition) IsZero() bool

+ type Subproject struct

+ DetectedPackageManagers []PackageManager

+ Ecosystem Ecosystem

+ ExecutionTarget ExecutionTarget

+ PlannedDetectors []string

+ PrimaryDetector string

+ RelativePath string

+ func (s Subproject) PrimaryPackageManager() PackageManager

+ type SymbolKind string

+ const SymbolKindFunction

+ const SymbolKindMethod

+ type VEXStatus string

+ const VEXStatusAffected

+ const VEXStatusFixed

+ const VEXStatusNotAffected

+ const VEXStatusUnderInvestigation

+ type VersionChange struct

+ After *Dependency

+ Before *Dependency

+ type VersionRange struct

+ Events []RangeEvent

+ Repo string

+ Type VersionRangeType

+ type VersionRangeType string

+ const VersionRangeTypeEcosystem

+ const VersionRangeTypeGit

+ const VersionRangeTypeSemver

+ type Vulnerability struct

+ Affected []Affected

+ AffectedSymbols []AffectedSymbol

+ AffectedVersionRange string

+ Aliases []string

+ CPEs []string

+ CVSS []CVSSScore

+ CWEs []CWE

+ DataSource string

+ DatabaseSpecific map[string]any

+ Details string

+ EPSS []EPSSScore

+ FixAvailable []FixAvailable

+ FixState FixState

+ FixedIn string

+ FixedVersions []string

+ ID string

+ KEVExploited bool

+ KnownExploited []KnownExploited

+ Modified string

+ Namespace string

+ ParsedSeverity SeverityLevel

+ Published string

+ Reachability *Reachability

+ Reasons []string

+ References []Reference

+ Related []string

+ RiskScore float64

+ Severity []Severity

+ SeveritySource string

+ Source string

+ Summary string

+ Title string

+ Withdrawn string

+ func (v Vulnerability) Clone() Vulnerability

+ func (v Vulnerability) IsExploitable() bool

+ func (v Vulnerability) MatchesConstraints(constraints []FailOnConstraint) bool

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL