/
githubmirror
/
trivy
Обзор
Документация
Войти
/
githubmirror
/
trivy
Код
Задачи
Вики
Пакеты
0
Релизы
0
Аналитика
Безопасность
main
pkg/detector/library/detect.go
50 строк
1 KB
Teppei Fukuda
fix(vuln): skip empty versions (#6542)
24 апр 2024, 09:03
Не верифицирован
24 апр 2024, 09:03
164b025
Код
Авторство
О чём код?
package library import ( "context" "golang.org/x/xerrors" ftypes "github.com/aquasecurity/trivy/pkg/fanal/types" "github.com/aquasecurity/trivy/pkg/log" "github.com/aquasecurity/trivy/pkg/types" ) // Detect scans language-specific packages and returns vulnerabilities. func Detect(ctx context.Context, libType ftypes.LangType, pkgs []ftypes.Package) ([]types.DetectedVulnerability, error) { driver, ok := NewDriver(libType) if !ok { return nil, nil } vulns, err := detect(ctx, driver, pkgs) if err != nil { return nil, xerrors.Errorf("failed to scan %s vulnerabilities: %w", driver.Type(), err) } return vulns, nil } func detect(ctx context.Context, driver Driver, pkgs []ftypes.Package) ([]types.DetectedVulnerability, error) { var vulnerabilities []types.DetectedVulnerability for _, pkg := range pkgs { if pkg.Version == "" { log.DebugContext(ctx, "Skipping vulnerability scan as no version is detected for the package", log.String("name", pkg.Name)) continue } vulns, err := driver.DetectVulnerabilities(pkg.ID, pkg.Name, pkg.Version) if err != nil { return nil, xerrors.Errorf("failed to detect %s vulnerabilities: %w", driver.Type(), err) } for i := range vulns { vulns[i].Layer = pkg.Layer vulns[i].PkgPath = pkg.FilePath vulns[i].PkgIdentifier = pkg.Identifier } vulnerabilities = append(vulnerabilities, vulns...) } return vulnerabilities, nil }