pkg/fanal/analyzer/language/python/uv/uv.go - main - githubmirror/trivy

pkg/fanal/analyzer/language/python/uv/uv.go

78 строк2 KB

DmitriyLewen

fix: use context for analyzers (#9538)

14 окт 2025, 08:13

14 окт 2025, 08:13b885d3a

package uv

import (
	"context"
	"io"
	"io/fs"
	"os"
	"path/filepath"

	"golang.org/x/xerrors"

	uvparser "github.com/aquasecurity/trivy/pkg/dependency/parser/python/uv"
	"github.com/aquasecurity/trivy/pkg/fanal/analyzer"
	"github.com/aquasecurity/trivy/pkg/fanal/analyzer/language"
	"github.com/aquasecurity/trivy/pkg/fanal/types"
	"github.com/aquasecurity/trivy/pkg/log"
	"github.com/aquasecurity/trivy/pkg/utils/fsutils"
)

func init() {
	analyzer.RegisterPostAnalyzer(analyzer.TypeUv, NewUvAnalyzer)
}

const version = 1

type uvAnalyzer struct {
	logger     *log.Logger
	lockParser language.Parser
}

func NewUvAnalyzer(_ analyzer.AnalyzerOptions) (analyzer.PostAnalyzer, error) {
	return &uvAnalyzer{
		logger:     log.WithPrefix("uv"),
		lockParser: uvparser.NewParser(),
	}, nil
}

func (a *uvAnalyzer) PostAnalyze(ctx context.Context, input analyzer.PostAnalysisInput) (*analyzer.AnalysisResult, error) {
	var apps []types.Application
	required := func(_ string, _ fs.DirEntry) bool {
		// Parse all required files: `uv.lock` (from a.Required func) + input.FilePatterns.Match()
		return true
	}

	err := fsutils.WalkDir(input.FS, ".", required, func(path string, _ fs.DirEntry, r io.Reader) error {
		// Parse uv.lock
		app, err := language.Parse(ctx, types.Uv, path, r, a.lockParser)
		if err != nil {
			a.logger.Warn("Failed to parse uv lockfile", log.Err(err))
			return nil
		} else if app == nil {
			return nil
		}

		apps = append(apps, *app)

		return nil
	})
	if err != nil {
		return nil, xerrors.Errorf("walk error: %w", err)
	}

	return &analyzer.AnalysisResult{
		Applications: apps,
	}, nil
}

func (a *uvAnalyzer) Required(filePath string, _ os.FileInfo) bool {
	return filepath.Base(filePath) == types.UvLock
}

func (a *uvAnalyzer) Type() analyzer.Type {
	return analyzer.TypeUv
}

func (a *uvAnalyzer) Version() int {
	return version
}