alpine

type Details ¶

type Details struct {
	Name string `json:"name"`
	// Fixed package version string mapped to an array of CVE ids affecting the
	// package.
	Secfixes map[string][]string `json:"secfixes"`
}

Details define a package's name and relevant security fixes included in a given version.

type DistributionScanner ¶

type DistributionScanner struct{}

DistributionScanner attempts to discover if a layer displays characteristics of a alpine distribution

func (*DistributionScanner) Kind() string

func (*DistributionScanner) Name() string

func (s *DistributionScanner) Scan(ctx context.Context, l *claircore.Layer) ([]*claircore.Distribution, error)

func (*DistributionScanner) Version() string

type Factory ¶

type Factory struct {
	// contains filtered or unexported fields
}

Factory is an UpdaterSetFactory for ingesting an Alpine SecDB.

Factory expects to be able to discover a directory layout like the one at [https://secdb.alpinelinux.org/] at the configured URL. More explictly, it expects: - a "last-update" file with opaque contents that change when any constituent database changes - contiguously numbered directories with the name "v$maj.$min" starting with "maj" as "3" and "min" as at most "3" - JSON files inside those directories named "main.json" or "community.json"

The [Configure] method must be called before the [UpdaterSet] method.

func NewFactory(_ context.Context) (*Factory, error)

func (f *Factory) Configure(ctx context.Context, cf driver.ConfigUnmarshaler, c *http.Client) error

func (f *Factory) UpdaterSet(ctx context.Context) (driver.UpdaterSet, error)

type FactoryConfig ¶

type FactoryConfig struct {
	// URL indicates the base URL for the SecDB layout. It should have a trailing slash.
	URL string `json:"url" yaml:"url"`
}

FactoryConfig is the configuration accepted by the Factory.

By convention, this is keyed by the string "alpine".

type Matcher ¶

type Matcher struct{}

Matcher implements driver.Matcher for Alpine containers.

func (*Matcher) Filter(record *claircore.IndexRecord) bool

func (*Matcher) Name() string

func (*Matcher) Query() []driver.MatchConstraint

func (*Matcher) Vulnerable(ctx context.Context, record *claircore.IndexRecord, vuln *claircore.Vulnerability) (bool, error)

type Package ¶

type Package struct {
	Pkg Details `json:"pkg"`
}

Package wraps the Details.

type Scanner ¶

type Scanner struct{}

Scanner scans for packages in an apk database.

The zero value is ready to use.

func (*Scanner) Kind() string

func (*Scanner) Name() string

func (*Scanner) Scan(ctx context.Context, layer *claircore.Layer) ([]*claircore.Package, error)

func (*Scanner) Version() string

type SecurityDB ¶

type SecurityDB struct {
	Distroversion string    `json:"distroversion"`
	Reponame      string    `json:"reponame"`
	Urlprefix     string    `json:"urlprefix"`
	Apkurl        string    `json:"apkurl"`
	Packages      []Package `json:"packages"`
}

SecurityDB is the security database structure.

type UpdaterConfig ¶

type UpdaterConfig struct {
	// URL overrides any discovered URL for the JSON file.
	URL string `json:"url" yaml:"url"`
}

UpdaterConfig is the configuration accepted by Alpine updaters.

By convention, this should be in a map called "alpine-${REPO}-${RELEASE}-updater". For example, "alpine-main-v3.12-updater".

If a SecDB JSON file is not found at the proper place by Factory.UpdaterSet, this configuration will not be consulted.