Directories
¶
| Path | Synopsis |
|---|---|
|
Package advisory resolves vulnerability advisories for the commit0-analyzer scan target.
|
Package advisory resolves vulnerability advisories for the commit0-analyzer scan target. |
|
ghfetch
Package ghfetch fetches the unified diff and changed-file contents for a commit URL, producing the inputs that the symbol extractor consumes.
|
Package ghfetch fetches the unified diff and changed-file contents for a commit URL, producing the inputs that the symbol extractor consumes. |
|
parity
Package parity is the advisory-intelligence quality harness: it measures commit0-analyzer's advisory coverage against external scanners (osv-scanner, grype, trivy, govulncheck) on a fixed corpus of real repositories and records the false-positive / false-negative deltas with a reason for each.
|
Package parity is the advisory-intelligence quality harness: it measures commit0-analyzer's advisory coverage against external scanners (osv-scanner, grype, trivy, govulncheck) on a fixed corpus of real repositories and records the false-positive / false-negative deltas with a reason for each. |
|
symbolextract
Package symbolextract invokes a plugin's --extract-symbols subcommand to identify which exported symbols were touched by a security-fix patch.
|
Package symbolextract invokes a plugin's --extract-symbols subcommand to identify which exported symbols were touched by a security-fix patch. |
|
symbolindex
Package symbolindex provides a persistent cache of advisory → resolved symbol mappings so the symbol-fetch network roundtrip is paid once per advisory and subsequent scans are served from disk.
|
Package symbolindex provides a persistent cache of advisory → resolved symbol mappings so the symbol-fetch network roundtrip is paid once per advisory and subsequent scans are served from disk. |
|
Package cli implements the commit0-analyzer command-line interface.
|
Package cli implements the commit0-analyzer command-line interface. |
|
Package corpus provides the reachability corpus harness and precision/recall metrics for commit0-analyzer.
|
Package corpus provides the reachability corpus harness and precision/recall metrics for commit0-analyzer. |
|
Package host implements the commit0-analyzer plugin host.
|
Package host implements the commit0-analyzer plugin host. |
|
testplugin
command
Command testplugin is a fake commit0-analyzer plugin used exclusively by tests in internal/host.
|
Command testplugin is a fake commit0-analyzer plugin used exclusively by tests in internal/host. |
|
Package policy implements the policy-as-code gate for commit0-analyzer.
|
Package policy implements the policy-as-code gate for commit0-analyzer. |
|
Package render converts normalized findings into output formats.
|
Package render converts normalized findings into output formats. |
|
Package telemetry provides lightweight phase timing for the scan pipeline.
|
Package telemetry provides lightweight phase timing for the scan pipeline. |
|
Package vex builds and emits Vulnerability Exploitability eXchange (VEX) documents from commit0-analyzer's reachability findings.
|
Package vex builds and emits Vulnerability Exploitability eXchange (VEX) documents from commit0-analyzer's reachability findings. |
Click to show internal directories.
Click to hide internal directories.