/
githubmirror
/
trivy
Обзор
Документация
Войти
/
githubmirror
/
trivy
Код
Задачи
Вики
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
pkg/dependency/parser/java/pom/var.go
61 строка
2 KB
Nikita Pivkin
chore: bump golangci-lint to v2.10.0 (#10223)
26 фев 2026, 09:01
Не верифицирован
26 фев 2026, 09:01
a4f7937
Код
Авторство
О чём код?
package pom import ( "fmt" "os" "regexp" "slices" "strings" "github.com/aquasecurity/trivy/pkg/log" ) var varRegexp = regexp.MustCompile(`\${(\S+?)}`) func isProperty(s string) bool { if s != "" && strings.HasPrefix(s, "${") && strings.HasSuffix(s, "}") { return true } return false } func evaluateVariable(s string, props map[string]string, seenProps []string) string { if props == nil { props = make(map[string]string) } for _, m := range varRegexp.FindAllStringSubmatch(s, -1) { var newValue string // env.X: https://maven.apache.org/pom.html#Properties // e.g. env.PATH if after, ok := strings.CutPrefix(m[1], "env."); ok { newValue = os.Getenv(after) } else { // <properties> might include another property. // e.g. <animal.sniffer.skip>${skipTests}</animal.sniffer.skip> ss, ok := props[m[1]] if ok { // search for looped properties if slices.Contains(seenProps, ss) { printLoopedPropertiesStack(m[0], seenProps) return "" } seenProps = append(seenProps, ss) // save evaluated props to check if we get this prop again newValue = evaluateVariable(ss, props, seenProps) seenProps = []string{} // clear props if we returned from recursive. Required for correct work with 2 same props like ${foo}-${foo} } } s = strings.ReplaceAll(s, m[0], newValue) } return strings.TrimSpace(s) } func printLoopedPropertiesStack(env string, usedProps []string) { var sb strings.Builder for _, prop := range usedProps { fmt.Fprintf(&sb, "%s -> ", prop) } log.Warn("Lopped properties were detected", log.String("prop", sb.String()+env)) }