artifact/

Jun 7, 2023

Changes in this version

+ var ErrCyclonedxValidationFailed = errors.New("cyclonedx validation failed")

+ var ErrNotExist = errors.New("Artifact does not exist")

+ func ValidateCyclonedx(config CyclonedxConfig, scanReport CyclonedxSbomReport) error

type Bundle

+ CyclonedxSbom Artifact

+ func (b *Bundle) ValidateCyclonedx(config *CyclonedxConfig) error

+ func (b *Bundle) Write(w io.Writer, key string) (written int64, err error)

type Config

+ Cyclonedx *CyclonedxConfig

+ type CyclonedxConfig struct

+ AllowList []CyclonedxListItem

+ Critical int

+ DenyList []CyclonedxListItem

+ High int

+ Info int

+ Low int

+ Medium int

+ None int

+ Unknown int

+ type CyclonedxListItem struct

+ Id string

+ Reason string

+ type CyclonedxSbomReport cdx.BOM

+ func (r *CyclonedxSbomReport) ShimComponentsAsVulnerabilities() *CyclonedxSbomReport

+ func (r CyclonedxSbomReport) String() string

type GrypeConfig

+ AllowList []GrypeListItem

+ DenyList []GrypeListItem

+ type GrypeListItem struct

+ Id string

+ Reason string

type Type

+ const Cyclonedx

Jan 24, 2023

Changes in this version

+ var GitleaksValidationFailed = errors.New("gitleaks validation failed")

+ var GrypeValidationFailed = errors.New("grype validation failed")

+ var SemgrepFailedValidation = errors.New("semgrep failed validation")

+ func DecodeJSON(r io.Reader) T

+ func DecodeYAML(r io.Reader) T

+ func ValidateGitleaks(config GitleaksConfig, scanReport GitleaksScanReport) error

+ func ValidateGrype(config GrypeConfig, scanReport GrypeScanReport) error

+ func ValidateSemgrep(config SemgrepConfig, scanReport SemgrepScanReport) error

+ type Artifact struct

+ Content []byte

+ Digest []byte

+ Label string

+ func NewArtifact(label string, r io.Reader) (Artifact, error)

+ func (a Artifact) ContentBytes() []byte

+ func (a Artifact) DigestString() string

+ func (a Artifact) String() string

+ type Bundle struct

+ Generic map[string]Artifact

+ GitleaksScan Artifact

+ GrypeScan Artifact

+ PipelineID string

+ PipelineURL string

+ ProjectName string

+ SemgrepScan Artifact

+ func DecodeBundle(r io.Reader) Bundle

+ func NewBundle() *Bundle

+ func (b *Bundle) Add(artifacts ...Artifact) error

+ func (b *Bundle) String() string

+ func (b *Bundle) ValidateGitleaks(config *GitleaksConfig) error

+ func (b *Bundle) ValidateGrype(config *GrypeConfig) error

+ func (b *Bundle) ValidateSemgrep(config *SemgrepConfig) error

+ type BundleDecoder struct

+ func NewBundleDecoder(r io.Reader) *BundleDecoder

+ func (d BundleDecoder) Decode(bundle *Bundle) error

+ type Config struct

+ Gitleaks *GitleaksConfig

+ Grype *GrypeConfig

+ Semgrep *SemgrepConfig

+ func NewConfig() *Config

+ type Encoder struct

+ func NewBundleEncoder(w io.Writer) *Encoder

+ func (e Encoder) Encode(bundle *Bundle) error

+ type GitleaksConfig struct

+ SecretsAllowed bool

+ type GitleaksFinding report.Finding

+ type GitleaksScanReport []GitleaksFinding

+ func (r GitleaksScanReport) String() string

+ type GrypeConfig struct

+ Critical int

+ High int

+ Low int

+ Medium int

+ Negligible int

+ Unknown int

+ type GrypeScanReport models.Document

+ func (r GrypeScanReport) String() string

+ type KEVCatalog struct

+ CatalogVersion string

+ Count int

+ DateReleased time.Time

+ Title string

+ Vulnerabilities []KEVCatalogVulnerability

+ type KEVCatalogVulnerability struct

+ CveID string

+ DateAdded string

+ DueDate string

+ Notes string

+ Product string

+ RequiredAction string

+ ShortDescription string

+ VendorProject string

+ VulnerabilityName string

+ type SemgrepConfig struct

+ Error int

+ Info int

+ Warning int

+ type SemgrepScanReport semgrep.SemgrepOutputV1Jsonschema

+ func (r SemgrepScanReport) String() string

+ type Type string

+ const GatecheckBundle

+ const GatecheckConfig

+ const Gitleaks

+ const Grype

+ const Semgrep

+ const Unsupported

+ func Inspect(r io.Reader) (Type, error)

+ func InspectWithContext(ctx context.Context, r io.Reader) (Type, error)

+ func Read(r io.Reader) (Type, []byte, error)

+ func ReadWithContext(ctx context.Context, r io.Reader) (Type, []byte, error)

Oct 7, 2022

Changes in this version

+ type Asset struct

+ Content []byte

+ Digest []byte

+ Label string

+ func NewAsset(label string, r io.Reader) (*Asset, error)