Documentation
¶
Index ¶
- Constants
- func MappingPOAM2Inspector() map[poam.POAMField]string
- func ReadFileListFindingsOutput(filename string) (inspector2.ListFindingsOutput, error)
- func ResourceTableColumns() ([]string, map[int]string)
- func TableColumnsImageVulnerabilities() ([]string, map[int]string)
- func TableColumnsImageVulnerabilityPackages() []string
- type Finding
- func (f Finding) CVEID() *string
- func (f Finding) FilePaths() []string
- func (f Finding) FilePathsInclPOMProperties() bool
- func (f Finding) FindingOrVendorSeverity(canonical bool) string
- func (f Finding) FindingSeverity(canonical bool) string
- func (f Finding) ImageHashes() []string
- func (f Finding) ImageRepoNameVulnIDs(sep string) []string
- func (f Finding) ImageRepositoryNames() []string
- func (f Finding) ImageTags() []string
- func (f Finding) MustVulnerabilityField(field, def string, opts *govex.ValueOptions) string
- func (f Finding) POAMItemClosed() bool
- func (f Finding) POAMItemOpen() bool
- func (f Finding) POAMItemUpgradeRemedationInfo(opts *govex.ValueOptions) poam.POAMItemUpgradeRemedationInfo
- func (f Finding) POAMItemValue(field poam.POAMField, opts *govex.ValueOptions, ...) (string, error)
- func (f Finding) POAMItemValues(fields []poam.POAMField, opts *govex.ValueOptions, ...) ([]string, error)
- func (f Finding) PackageSlices(fields []string, opts *govex.ValueOptions) ([][]string, error)
- func (f Finding) VendorCreatedAt() *time.Time
- func (f Finding) VendorCreatedAtAgeMonths() *float32
- func (f Finding) VendorSeverity(canonical bool) string
- func (f Finding) VulnerabilityField(field string, opts *govex.ValueOptions) (string, error)
- func (f Finding) VulnerabilityFields(fields []string, opts *govex.ValueOptions) ([]string, error)
- func (f Finding) VulnerabilityID() string
- func (f Finding) VulnerablePackages() Packages
- func (f Finding) VulnerablePackagesIDs() []string
- func (f Finding) VulnerablePackagesX() []Package
- type FindingMerger
- type Findings
- func (fs Findings) FilterImageHashes(hashesIncl []string) Findings
- func (fs Findings) FilterImageTags(tagsIncl []string) Findings
- func (fs Findings) FilterPOMPropertiesExcl() Findings
- func (fs Findings) FindingOneRawMatch(s string) *Finding
- func (fs Findings) HistogramSets() *histogram.HistogramSets
- func (fs Findings) ImageHashes() []string
- func (fs Findings) ImageRepoNameVulnIDs(sep string) []string
- func (fs Findings) ImageRepoNameVulnIDsMapSeverity() map[string][]string
- func (fs Findings) ImageRepositoryNames() []string
- func (fs Findings) ImageSet(hashesIncl []string) (*ImageSet, error)
- func (fs Findings) ImageSetRepoNameByTagsOrLatest(imageTagOverrides []string) (*ImageSet, error)
- func (fs Findings) ImageVulnerabilitesReporter() ImageVulnerabilitesReporter
- func (fs Findings) MergeByImageRepoNameAndVulnID() (Findings, error)
- func (fs Findings) MergeFilteredByImageRepoNameAndVulnID() (*types.Finding, error)
- func (fs Findings) POAMItems() []poam.POAMItem
- func (fs Findings) POAMTable(opts *govex.ValueOptions, ...) (*table.Table, error)
- func (fs Findings) ResourceSet(inclResourceTypes []types.ResourceType) (*ResourceSet, error)
- func (fs Findings) Stats() FindingsStats
- func (fs Findings) TableImageVulnerabilities(cols []string, fmtMap map[int]string, opts *ReportOptions) (*table.Table, error)
- func (fs Findings) TableImagenameSeverityYear(opts *ReportOptions) (*table.Table, error)
- func (fs Findings) TablePackages(cols []string, opts *govex.ValueOptions) (*table.Table, error)
- func (fs Findings) TablePivotImagenameSeverityCounts(opts *ReportOptions) (*table.Table, error)
- func (fs Findings) VulnerabilityIDs() []string
- type FindingsStats
- func (stats FindingsStats) FindingVulnerablePackageCounts() map[string]int
- func (stats FindingsStats) ImagenameVulnidCounts() map[string]int
- func (stats FindingsStats) ImagenameVulnidRevCounts() map[string]int
- func (stats FindingsStats) VendorCreatedAtMonthly() map[string]int
- func (stats FindingsStats) VendorCreatedAtYearly() map[string]int
- func (stats FindingsStats) VendorSeverities(canonicalSev bool) map[string]int
- type ImageSet
- func (set *ImageSet) Add(imgs ...types.AwsEcrContainerImageDetails) error
- func (set *ImageSet) FilterHashes(hashesIncl []string) (*ImageSet, error)
- func (set *ImageSet) ImageByHash(imgHash string) *types.AwsEcrContainerImageDetails
- func (set *ImageSet) ImageByLatest() *types.AwsEcrContainerImageDetails
- func (set *ImageSet) ImageHashes() []string
- func (set *ImageSet) ImageSetsByRepoName() (*ImageSets, error)
- func (set *ImageSet) ImageTags() ([]string, map[string]int)
- func (set *ImageSet) ImagesByTag(imageTags []string) []types.AwsEcrContainerImageDetails
- func (set *ImageSet) ImagesByTagsOrLatest(imageTagOverrides []string) []types.AwsEcrContainerImageDetails
- func (set *ImageSet) RepositoryNames() ([]string, map[string]int)
- func (set *ImageSet) Table() (*table.Table, error)
- func (set *ImageSet) WriteFileJSON(filename, prefix, indent string, perm os.FileMode) error
- func (set *ImageSet) WriteFileXLSX(filename string) error
- type ImageSets
- func (sets *ImageSets) AddImagesByRepositoryName(imgs ...types.AwsEcrContainerImageDetails) error
- func (sets *ImageSets) FilterLatestByRepositoryName(imageTagOverrides []string) (*ImageSets, error)
- func (sets *ImageSets) ImageSetByRepositoryNameTagsOrLatest(repoTagOverrides []string) (*ImageSet, error)
- type ImageVulnerabilitesReporter
- type Package
- func (p Package) FilepathAtVersion() string
- func (p Package) FilepathAtVersionFixed() string
- func (p Package) FilepathString() string
- func (p Package) NameAndFilepathAtVersion() string
- func (p Package) NameAndFilepathAtVersionFixed() string
- func (p Package) NameAtVersion() string
- func (p Package) NameAtVersionAtFilepath() string
- func (p Package) NameAtVersionFixed() string
- func (p Package) NameString() string
- func (p Package) POAMItem() poam.POAMItemUpgradeRemedationPackage
- func (p Package) PackageType() string
- func (p Package) VersionFixedString() string
- func (p Package) VersionString() string
- type Packages
- func (ps Packages) Filepaths() []string
- func (ps Packages) FilepathsAtVersion() string
- func (ps Packages) FilepathsAtVersionFixed() string
- func (ps Packages) FilepathsContainsPOMProperties() int
- func (ps Packages) NameAtVersionAtFilepaths() []string
- func (ps Packages) NamesAndFilepathsAtVersion() string
- func (ps Packages) NamesAndFilepathsAtVersionFixed() string
- func (ps Packages) PackagesManagers() []string
- func (ps Packages) PackagesTypes() string
- type ReportOptions
- type Resource
- type ResourceSet
- func (rs *ResourceSet) Add(r Resource) error
- func (rs *ResourceSet) FilterImageHash(hashesIncl []string) *ResourceSet
- func (rs *ResourceSet) FilterImageTags(tagsAny []string) *ResourceSet
- func (rs *ResourceSet) FilterResourceTypes(inclResourceTypes []types.ResourceType) (*ResourceSet, error)
- func (rs *ResourceSet) ImageRepositoryNames() []string
- func (rs *ResourceSet) ImageSet(hashesIncl []string) (*ImageSet, error)
- func (rs *ResourceSet) ImageTags() []string
- func (rs *ResourceSet) Table(cols []string, fmtMap map[int]string) (*table.Table, error)
- type Resources
- type Vulnerability
Constants ¶
const ( ResourceTypeAwsEc2Instance = types.ResourceTypeAwsEc2Instance ResourceTypeAwsEcrContainerImage = types.ResourceTypeAwsEcrContainerImage ResourceTypeAwsEcrRepository = types.ResourceTypeAwsEcrRepository ResourceTypeAwsLambdaFunction = types.ResourceTypeAwsLambdaFunction )
const ( FindingDescription = "find_desc" FindingSeverity = "find_severity" FindingTitle = "find_title" ImageHash = "image_hash" ImageRepositoryName = "image_repo_name" ImageNameVulnerabilityID = "image_name_vuln_id" ImageTags = "image_tags" VulnerabilityCreated = "vuln_created" VulnerabilityCreatedYear = "vuln_created_year" VulnerabilityCreatedAgeMonthsInt = "vuln_created_age_months_int" VulnerabilitySLADueDate = "vuln_sla_due_date" VulnerabilityID = "vuln_id" VulnerabilitySeverity = "vuln_severity" VulnerabilitySourceURL = "vuln_url" VulnerabilityReferenceURLs = "vuln_ref_urls" PackageInfoFilepath = "pkg_filepath" PackageInfoName = "pkg_name" PackageInfoVersion = "pkg_version" PackageInfoVersionFixed = "pkg_version_fixed" PackagesFilepathsAtVersion = "pkgs_filepaths_version" PackagesFilepathsAtVersionFixed = "pkgs_filepaths_version_fixed" PackagesFilepathsPOMProperites = "pkgs_filepaths_pom_properties" PackagesManagers = "pkgs_mgrs" PackagesNamesAtVersion = "pkgs_names_version" PackagesNamesAtVersionsFixed = "pkgs_names_version_fixed" PackagesNamesAndFilepathsAtVersion = "pkgs_names_filepaths_version" PackagesNamesAndFilepathsAtVersionFixed = "pkgs_names_filepaths_version_fixed" PackagesTypes = "pkgs_types" )
Variables ¶
This section is empty.
Functions ¶
func MappingPOAM2Inspector ¶ added in v0.8.0
func ReadFileListFindingsOutput ¶
func ReadFileListFindingsOutput(filename string) (inspector2.ListFindingsOutput, error)
func ResourceTableColumns ¶ added in v0.8.0
func TableColumnsImageVulnerabilities ¶
TableColumnsImageVulnerabilities returns rows where each row is an image+vulnerability.
func TableColumnsImageVulnerabilityPackages ¶
func TableColumnsImageVulnerabilityPackages() []string
TableColumnsImageVulnerabilityPackages returns rows where each row is an image+vulnerability+package.
Types ¶
type Finding ¶
func (Finding) FilePathsInclPOMProperties ¶
func (Finding) FindingOrVendorSeverity ¶ added in v0.7.2
func (Finding) FindingSeverity ¶
func (Finding) ImageHashes ¶
func (Finding) ImageRepoNameVulnIDs ¶
ImageRepoNameVulnID is used as a unique key across images.
func (Finding) ImageRepositoryNames ¶
func (Finding) MustVulnerabilityField ¶
func (f Finding) MustVulnerabilityField(field, def string, opts *govex.ValueOptions) string
func (Finding) POAMItemClosed ¶ added in v0.8.0
func (Finding) POAMItemOpen ¶ added in v0.8.0
func (Finding) POAMItemUpgradeRemedationInfo ¶ added in v0.8.0
func (f Finding) POAMItemUpgradeRemedationInfo(opts *govex.ValueOptions) poam.POAMItemUpgradeRemedationInfo
func (Finding) POAMItemValue ¶ added in v0.8.0
func (Finding) POAMItemValues ¶ added in v0.8.0
func (Finding) PackageSlices ¶
PackageSlices returns one slice per vulnerable package.
func (Finding) VendorCreatedAt ¶
func (Finding) VendorCreatedAtAgeMonths ¶
func (Finding) VendorSeverity ¶
func (Finding) VulnerabilityField ¶
func (Finding) VulnerabilityFields ¶
VulnerabilitySlices returns one slice per vulnerable package.
func (Finding) VulnerabilityID ¶
func (Finding) VulnerablePackages ¶
func (Finding) VulnerablePackagesIDs ¶ added in v0.8.0
func (Finding) VulnerablePackagesX ¶ added in v0.8.0
type FindingMerger ¶ added in v0.8.0
func NewFindingMerger ¶ added in v0.8.0
func NewFindingMerger() FindingMerger
func (*FindingMerger) Merge ¶ added in v0.8.0
func (set *FindingMerger) Merge() (Findings, error)
type Findings ¶
func (Findings) FilterImageHashes ¶
func (Findings) FilterImageTags ¶ added in v0.8.1
func (Findings) FilterPOMPropertiesExcl ¶
func (Findings) FindingOneRawMatch ¶
func (Findings) HistogramSets ¶
func (fs Findings) HistogramSets() *histogram.HistogramSets
HistogramSets returns histogram sets using the fields
func (Findings) ImageHashes ¶ added in v0.8.0
ImageHashes returns a list of unique repo names
func (Findings) ImageRepoNameVulnIDs ¶
ImageRepoNameVulnID is used as a unique key across images.
func (Findings) ImageRepoNameVulnIDsMapSeverity ¶ added in v0.8.0
ImageRepoNameVulnID is used as a unique key across images.
func (Findings) ImageRepositoryNames ¶
ImageRepositoryNames returns a list of unique repo names
func (Findings) ImageSetRepoNameByTagsOrLatest ¶ added in v0.8.0
func (Findings) ImageVulnerabilitesReporter ¶ added in v0.8.0
func (fs Findings) ImageVulnerabilitesReporter() ImageVulnerabilitesReporter
func (Findings) MergeByImageRepoNameAndVulnID ¶ added in v0.8.0
MergeByImageRepoNameAndVulnID merges select fields including images and packages.
func (Findings) MergeFilteredByImageRepoNameAndVulnID ¶ added in v0.8.0
MergeFilteredByImageRepoNameAndVulnID merges select fields including images and packages. Image repo name and vulnid must be the same.
func (Findings) ResourceSet ¶ added in v0.8.0
func (fs Findings) ResourceSet(inclResourceTypes []types.ResourceType) (*ResourceSet, error)
func (Findings) Stats ¶
func (fs Findings) Stats() FindingsStats
func (Findings) TableImageVulnerabilities ¶
func (Findings) TableImagenameSeverityYear ¶
func (fs Findings) TableImagenameSeverityYear(opts *ReportOptions) (*table.Table, error)
func (Findings) TablePackages ¶
Table is used as a unique key across images.
func (Findings) TablePivotImagenameSeverityCounts ¶
func (fs Findings) TablePivotImagenameSeverityCounts(opts *ReportOptions) (*table.Table, error)
func (Findings) VulnerabilityIDs ¶ added in v0.8.0
type FindingsStats ¶
type FindingsStats struct {
Findings Findings
}
func (FindingsStats) FindingVulnerablePackageCounts ¶
func (stats FindingsStats) FindingVulnerablePackageCounts() map[string]int
func (FindingsStats) ImagenameVulnidCounts ¶
func (stats FindingsStats) ImagenameVulnidCounts() map[string]int
ImageRepoNameVulnID is used as a unique key across images.
func (FindingsStats) ImagenameVulnidRevCounts ¶
func (stats FindingsStats) ImagenameVulnidRevCounts() map[string]int
func (FindingsStats) VendorCreatedAtMonthly ¶
func (stats FindingsStats) VendorCreatedAtMonthly() map[string]int
func (FindingsStats) VendorCreatedAtYearly ¶
func (stats FindingsStats) VendorCreatedAtYearly() map[string]int
func (FindingsStats) VendorSeverities ¶
func (stats FindingsStats) VendorSeverities(canonicalSev bool) map[string]int
type ImageSet ¶ added in v0.8.0
type ImageSet struct {
Data map[string]types.AwsEcrContainerImageDetails `json:"data"`
}
func NewImageSet ¶ added in v0.8.0
func NewImageSet() *ImageSet
func (*ImageSet) Add ¶ added in v0.8.0
func (set *ImageSet) Add(imgs ...types.AwsEcrContainerImageDetails) error
func (*ImageSet) FilterHashes ¶ added in v0.8.0
func (*ImageSet) ImageByHash ¶ added in v0.8.0
func (set *ImageSet) ImageByHash(imgHash string) *types.AwsEcrContainerImageDetails
func (*ImageSet) ImageByLatest ¶ added in v0.8.0
func (set *ImageSet) ImageByLatest() *types.AwsEcrContainerImageDetails
func (*ImageSet) ImageHashes ¶ added in v0.8.0
func (*ImageSet) ImageSetsByRepoName ¶ added in v0.8.0
func (*ImageSet) ImagesByTag ¶ added in v0.8.0
func (set *ImageSet) ImagesByTag(imageTags []string) []types.AwsEcrContainerImageDetails
func (*ImageSet) ImagesByTagsOrLatest ¶ added in v0.8.0
func (set *ImageSet) ImagesByTagsOrLatest(imageTagOverrides []string) []types.AwsEcrContainerImageDetails
func (*ImageSet) RepositoryNames ¶ added in v0.8.0
func (*ImageSet) WriteFileJSON ¶ added in v0.8.0
func (*ImageSet) WriteFileXLSX ¶ added in v0.8.0
type ImageSets ¶ added in v0.8.0
func NewImageSets ¶ added in v0.8.0
func NewImageSets() *ImageSets
func (*ImageSets) AddImagesByRepositoryName ¶ added in v0.8.0
func (sets *ImageSets) AddImagesByRepositoryName(imgs ...types.AwsEcrContainerImageDetails) error
func (*ImageSets) FilterLatestByRepositoryName ¶ added in v0.8.0
type ImageVulnerabilitesReporter ¶ added in v0.8.0
type ImageVulnerabilitesReporter struct {
Findings *Findings
}
func (ImageVulnerabilitesReporter) POAMWriteFile ¶ added in v0.8.0
func (vex ImageVulnerabilitesReporter) POAMWriteFile(filename string, opts *ReportOptions) error
func (ImageVulnerabilitesReporter) TableSet ¶ added in v0.8.0
func (vex ImageVulnerabilitesReporter) TableSet(opts *ReportOptions) (*table.TableSet, error)
func (ImageVulnerabilitesReporter) WriteFileXLSX ¶ added in v0.8.0
func (vex ImageVulnerabilitesReporter) WriteFileXLSX(filename string, opts *ReportOptions) error
type Package ¶
type Package types.VulnerablePackage
func (Package) FilepathAtVersion ¶
func (Package) FilepathAtVersionFixed ¶
func (Package) FilepathString ¶
func (Package) NameAndFilepathAtVersion ¶
func (Package) NameAndFilepathAtVersionFixed ¶
func (Package) NameAtVersion ¶
func (Package) NameAtVersionAtFilepath ¶ added in v0.8.0
NameAtVersionAtFilepath can be treated as a package id.
func (Package) NameAtVersionFixed ¶
func (Package) NameString ¶
func (Package) POAMItem ¶ added in v0.8.0
func (p Package) POAMItem() poam.POAMItemUpgradeRemedationPackage
func (Package) PackageType ¶ added in v0.8.2
func (Package) VersionFixedString ¶
func (Package) VersionString ¶
type Packages ¶
type Packages []types.VulnerablePackage
func (Packages) FilepathsAtVersion ¶
func (Packages) FilepathsAtVersionFixed ¶
func (Packages) FilepathsContainsPOMProperties ¶ added in v0.8.0
func (Packages) NameAtVersionAtFilepaths ¶ added in v0.8.0
func (Packages) NamesAndFilepathsAtVersion ¶
func (Packages) NamesAndFilepathsAtVersionFixed ¶
func (Packages) PackagesManagers ¶ added in v0.8.2
func (Packages) PackagesTypes ¶ added in v0.8.2
type ReportOptions ¶ added in v0.7.2
type ReportOptions struct { ColumnInsertOptions []table.ColumnInsertOpts VulnerabilityValueOptions *govex.ValueOptions }
type Resource ¶
func (Resource) HasTagsAny ¶ added in v0.8.0
func (Resource) ImageRepositoryName ¶
func (Resource) ImageTagFirst ¶
type ResourceSet ¶ added in v0.8.0
func NewResourceSet ¶ added in v0.8.0
func NewResourceSet() *ResourceSet
func (*ResourceSet) Add ¶ added in v0.8.0
func (rs *ResourceSet) Add(r Resource) error
func (*ResourceSet) FilterImageHash ¶ added in v0.8.0
func (rs *ResourceSet) FilterImageHash(hashesIncl []string) *ResourceSet
func (*ResourceSet) FilterImageTags ¶ added in v0.8.0
func (rs *ResourceSet) FilterImageTags(tagsAny []string) *ResourceSet
func (*ResourceSet) FilterResourceTypes ¶ added in v0.8.0
func (rs *ResourceSet) FilterResourceTypes(inclResourceTypes []types.ResourceType) (*ResourceSet, error)
func (*ResourceSet) ImageRepositoryNames ¶ added in v0.8.0
func (rs *ResourceSet) ImageRepositoryNames() []string
func (*ResourceSet) ImageSet ¶ added in v0.8.0
func (rs *ResourceSet) ImageSet(hashesIncl []string) (*ImageSet, error)
func (*ResourceSet) ImageTags ¶ added in v0.8.0
func (rs *ResourceSet) ImageTags() []string
type Resources ¶ added in v0.8.0
func (Resources) ImageHashes ¶ added in v0.8.0
type Vulnerability ¶
type Vulnerability types.PackageVulnerabilityDetails
Source Files
¶
- constants.go
- finding.go
- finding_fields.go
- finding_fields_poam.go
- finding_merger.go
- findings.go
- findings_filter.go
- findings_output.go
- findings_poam.go
- findings_stats.go
- findings_table.go
- findings_table_set.go
- image_set.go
- image_sets.go
- package.go
- packages.go
- report_options.go
- resource.go
- resource_set.go
- resources.go
- vulnerability.go