Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

sast

package

Go to main page

Versions in this module

v1

v1.37.4

Apr 17, 2026

v1.37.3

Apr 16, 2026

v1.37.2

Apr 16, 2026

Changes in this version

type Finding

+ EndLine int

type SARIFRegion

+ EndLine int

v1.37.1

Apr 15, 2026

v1.37.0

Apr 15, 2026

v1.36.0

Apr 15, 2026

v1.35.1

Apr 15, 2026

Changes in this version

+ const DefaultRegistry

+ var DefaultRulesFS embed.FS

+ var SeverityLabel = map[string]string

+ var SeverityToLevel = map[string]string

+ func CacheDir(ref RuleRef) (string, error)

+ func FetchRuleRepo(registry string, ref RuleRef, w io.Writer) (string, error)

+ func Fingerprint(ruleID, artifactURI string, startLine int) string

+ func LoadAllModules(defaultFS embed.FS, disableDefault bool, ruleRefs []RuleRef, registry string, ...) (map[string]string, error)

+ func LoadFileContents(input *ScanInput, maxSize int64)

+ func PrintPrettySummary(report *SASTReport, resultsOnly bool)

+ func ResolveURL(registry string, ref RuleRef) string

+ func ResolvedFingerprints(oldLog *SARIFLog, newFindings []Finding) []string

+ func WriteSARIF(log *SARIFLog, path string) error

+ type Engine struct

+ func NewEngine(modules map[string]string, scanRoot string) *Engine

+ func (e *Engine) Evaluate(opts EvalOptions) (*SASTReport, error)

+ func (e *Engine) ListRules() ([]RuleMetadata, error)

+ type EvalOptions struct

+ Excludes []string

+ MaxDepth int

+ type Finding struct

+ ArtifactURI string

+ Fingerprint string

+ Level string

+ Message string

+ Metadata *RuleMetadata

+ RuleID string

+ Severity string

+ Snippet string

+ StartLine int

+ type RuleMetadata struct

+ ATTACKTech []string

+ CAPEC []string

+ CVSSv4 string

+ CWE []int

+ CWSS string

+ Description string

+ HelpURI string

+ ID string

+ Kind string

+ Languages []string

+ Level string

+ Name string

+ Severity string

+ Tags []string

+ func (m *RuleMetadata) EffectiveLevel() string

+ type RuleRef struct

+ Org string

+ Repo string

+ func ParseRuleRef(arg string) (RuleRef, error)

+ type SARIFArtifact struct

+ Location *SARIFArtifactLocation

+ type SARIFArtifactLocation struct

+ URI string

+ type SARIFLocation struct

+ PhysicalLocation *SARIFPhysicalLocation

+ type SARIFLog struct

+ Runs []SARIFRun

+ Schema string

+ Version string

+ func BuildSARIF(findings []Finding, rules []RuleMetadata, toolVersion string) *SARIFLog

+ func LoadExistingSARIF(path string) (*SARIFLog, error)

+ type SARIFMessage struct

+ Text string

+ type SARIFPhysicalLocation struct

+ ArtifactLocation *SARIFArtifactLocation

+ Region *SARIFRegion

+ type SARIFPropertyBag map[string]any

+ type SARIFRegion struct

+ Snippet *SARIFSnippet

+ StartLine int

+ type SARIFReportingDescriptor struct

+ HelpURI string

+ ID string

+ Name string

+ Properties SARIFPropertyBag

+ ShortDescription *SARIFMessage

+ type SARIFResult struct

+ Fingerprints map[string]string

+ Kind string

+ Level string

+ Locations []SARIFLocation

+ Message SARIFMessage

+ Properties SARIFPropertyBag

+ RuleID string

+ type SARIFRun struct

+ Artifacts []SARIFArtifact

+ Results []SARIFResult

+ Tool SARIFTool

+ type SARIFSnippet struct

+ Text string

+ type SARIFTool struct

+ Driver SARIFToolDriver

+ type SARIFToolDriver struct

+ InformationURI string

+ Name string

+ Rules []SARIFReportingDescriptor

+ Version string

+ type SASTReport struct

+ Findings []Finding

+ Rules []RuleMetadata

+ RulesLoaded int

+ type ScanInput struct

+ DirsByLanguage map[string][]string

+ FileContents map[string]string

+ FileSet map[string]bool

+ ScanRoot string

+ func BuildScanInput(rootPath string, maxDepth int, excludes []string) (*ScanInput, error)

Other modules containing this package

github.com/vulnetix/cli/v3