list

Documentation

Overview

Package list provides a public list of SCALIBR-internal detection plugins.

Index

• Variables
• func DetectorsFromNames(names []string) ([]detector.Detector, error)
• func FilterByCapabilities(dets []detector.Detector, capabs *plugin.Capabilities) []detector.Detector
• func FromCapabilities(capabs *plugin.Capabilities) []detector.Detector
• type InitFn
• type InitMap

Variables

var All = concat(
	CIS,
	Govulncheck,
	Weakcreds,
	Untested,
)

All detectors internal to SCALIBR.

var CIS = InitMap{etcpasswdpermissions.Name: {etcpasswdpermissions.New}}

CIS scanning related detectors.

var Default = InitMap{}

Default detectors that are recommended to be enabled.

var Govulncheck = InitMap{binary.Name: {binary.New}}

Govulncheck detectors.

var Untested = InitMap{

	cve202338408.Name: {cve202338408.New},

	cve202233891.Name: {cve202233891.New},

	cve202016846.Name: {cve202016846.New},

	cve20236019.Name: {cve20236019.New},

	cve202011978.Name: {cve202011978.New},

	cve20242912.Name: {cve20242912.New},
}

Untested CVE scanning related detectors - since they don't have proper testing they might not work as expected in the future. TODO(b/405223999): Add tests.

var Weakcreds = InitMap{
	codeserver.Name:  {codeserver.NewDefault},
	etcshadow.Name:   {etcshadow.New},
	filebrowser.Name: {filebrowser.New},
	winlocal.Name:    {winlocal.New},
}

Weakcreds detectors for weak credentials.

Functions

func DetectorsFromNames

func DetectorsFromNames(names []string) ([]detector.Detector, error)

DetectorsFromNames returns a deduplicated list of detectors from a list of names.

func FilterByCapabilities

func FilterByCapabilities(dets []detector.Detector, capabs *plugin.Capabilities) []detector.Detector

FilterByCapabilities returns all detectors from the given list that can run under the specified capabilities (OS, direct filesystem access, network access, etc.) of the scanning environment.

func FromCapabilities

func FromCapabilities(capabs *plugin.Capabilities) []detector.Detector

FromCapabilities returns all detectors that can run under the specified capabilities (OS, direct filesystem access, network access, etc.) of the scanning environment.

Types

type InitFn

type InitFn func() detector.Detector

InitFn is the detector initializer function.

type InitMap

type InitMap map[string][]InitFn

InitMap is a map of detector names to their initers.