mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-12 15:50:15 -08:00
d19c7d9f29
* feat(repo): support local repositories * fix tests * test: fix client/server tests * docs: update * test: add fs tests * test: do not update golden files if overridden * docs: remove a comment about fs deprecation
236 lines
10 KiB
Go
236 lines
10 KiB
Go
// Code generated by Wire. DO NOT EDIT.
|
|
|
|
//go:generate go run github.com/google/wire/cmd/wire
|
|
//go:build !wireinject
|
|
// +build !wireinject
|
|
|
|
package artifact
|
|
|
|
import (
|
|
"context"
|
|
"github.com/aquasecurity/trivy-db/pkg/db"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/applier"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/artifact"
|
|
image2 "github.com/aquasecurity/trivy/pkg/fanal/artifact/image"
|
|
local2 "github.com/aquasecurity/trivy/pkg/fanal/artifact/local"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/artifact/repo"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/artifact/sbom"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/artifact/vm"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/cache"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/image"
|
|
"github.com/aquasecurity/trivy/pkg/fanal/types"
|
|
"github.com/aquasecurity/trivy/pkg/rpc/client"
|
|
"github.com/aquasecurity/trivy/pkg/scanner"
|
|
"github.com/aquasecurity/trivy/pkg/scanner/langpkg"
|
|
"github.com/aquasecurity/trivy/pkg/scanner/local"
|
|
"github.com/aquasecurity/trivy/pkg/scanner/ospkg"
|
|
"github.com/aquasecurity/trivy/pkg/vulnerability"
|
|
)
|
|
|
|
// Injectors from inject.go:
|
|
|
|
// initializeDockerScanner is for container image scanning in standalone mode
|
|
// e.g. dockerd, container registry, podman, etc.
|
|
func initializeDockerScanner(ctx context.Context, imageName string, artifactCache cache.ArtifactCache, localArtifactCache cache.LocalArtifactCache, imageOpt types.ImageOptions, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
applierApplier := applier.NewApplier(localArtifactCache)
|
|
ospkgScanner := ospkg.NewScanner()
|
|
langpkgScanner := langpkg.NewScanner()
|
|
config := db.Config{}
|
|
client := vulnerability.NewClient(config)
|
|
localScanner := local.NewScanner(applierApplier, ospkgScanner, langpkgScanner, client)
|
|
typesImage, cleanup, err := image.NewContainerImage(ctx, imageName, imageOpt)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
artifactArtifact, err := image2.NewArtifact(typesImage, artifactCache, artifactOption)
|
|
if err != nil {
|
|
cleanup()
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(localScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
cleanup()
|
|
}, nil
|
|
}
|
|
|
|
// initializeArchiveScanner is for container image archive scanning in standalone mode
|
|
// e.g. docker save -o alpine.tar alpine:3.15
|
|
func initializeArchiveScanner(ctx context.Context, filePath string, artifactCache cache.ArtifactCache, localArtifactCache cache.LocalArtifactCache, artifactOption artifact.Option) (scanner.Scanner, error) {
|
|
applierApplier := applier.NewApplier(localArtifactCache)
|
|
ospkgScanner := ospkg.NewScanner()
|
|
langpkgScanner := langpkg.NewScanner()
|
|
config := db.Config{}
|
|
client := vulnerability.NewClient(config)
|
|
localScanner := local.NewScanner(applierApplier, ospkgScanner, langpkgScanner, client)
|
|
typesImage, err := image.NewArchiveImage(filePath)
|
|
if err != nil {
|
|
return scanner.Scanner{}, err
|
|
}
|
|
artifactArtifact, err := image2.NewArtifact(typesImage, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(localScanner, artifactArtifact)
|
|
return scannerScanner, nil
|
|
}
|
|
|
|
// initializeFilesystemScanner is for filesystem scanning in standalone mode
|
|
func initializeFilesystemScanner(ctx context.Context, path string, artifactCache cache.ArtifactCache, localArtifactCache cache.LocalArtifactCache, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
applierApplier := applier.NewApplier(localArtifactCache)
|
|
ospkgScanner := ospkg.NewScanner()
|
|
langpkgScanner := langpkg.NewScanner()
|
|
config := db.Config{}
|
|
client := vulnerability.NewClient(config)
|
|
localScanner := local.NewScanner(applierApplier, ospkgScanner, langpkgScanner, client)
|
|
artifactArtifact, err := local2.NewArtifact(path, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(localScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
}, nil
|
|
}
|
|
|
|
func initializeRepositoryScanner(ctx context.Context, url string, artifactCache cache.ArtifactCache, localArtifactCache cache.LocalArtifactCache, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
applierApplier := applier.NewApplier(localArtifactCache)
|
|
ospkgScanner := ospkg.NewScanner()
|
|
langpkgScanner := langpkg.NewScanner()
|
|
config := db.Config{}
|
|
client := vulnerability.NewClient(config)
|
|
localScanner := local.NewScanner(applierApplier, ospkgScanner, langpkgScanner, client)
|
|
artifactArtifact, cleanup, err := repo.NewArtifact(url, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(localScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
cleanup()
|
|
}, nil
|
|
}
|
|
|
|
func initializeSBOMScanner(ctx context.Context, filePath string, artifactCache cache.ArtifactCache, localArtifactCache cache.LocalArtifactCache, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
applierApplier := applier.NewApplier(localArtifactCache)
|
|
ospkgScanner := ospkg.NewScanner()
|
|
langpkgScanner := langpkg.NewScanner()
|
|
config := db.Config{}
|
|
client := vulnerability.NewClient(config)
|
|
localScanner := local.NewScanner(applierApplier, ospkgScanner, langpkgScanner, client)
|
|
artifactArtifact, err := sbom.NewArtifact(filePath, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(localScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
}, nil
|
|
}
|
|
|
|
func initializeVMScanner(ctx context.Context, filePath string, artifactCache cache.ArtifactCache, localArtifactCache cache.LocalArtifactCache, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
applierApplier := applier.NewApplier(localArtifactCache)
|
|
ospkgScanner := ospkg.NewScanner()
|
|
langpkgScanner := langpkg.NewScanner()
|
|
config := db.Config{}
|
|
client := vulnerability.NewClient(config)
|
|
localScanner := local.NewScanner(applierApplier, ospkgScanner, langpkgScanner, client)
|
|
artifactArtifact, err := vm.NewArtifact(filePath, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(localScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
}, nil
|
|
}
|
|
|
|
// initializeRemoteDockerScanner is for container image scanning in client/server mode
|
|
// e.g. dockerd, container registry, podman, etc.
|
|
func initializeRemoteDockerScanner(ctx context.Context, imageName string, artifactCache cache.ArtifactCache, remoteScanOptions client.ScannerOption, imageOpt types.ImageOptions, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
v := _wireValue
|
|
clientScanner := client.NewScanner(remoteScanOptions, v...)
|
|
typesImage, cleanup, err := image.NewContainerImage(ctx, imageName, imageOpt)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
artifactArtifact, err := image2.NewArtifact(typesImage, artifactCache, artifactOption)
|
|
if err != nil {
|
|
cleanup()
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(clientScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
cleanup()
|
|
}, nil
|
|
}
|
|
|
|
var (
|
|
_wireValue = []client.Option(nil)
|
|
)
|
|
|
|
// initializeRemoteArchiveScanner is for container image archive scanning in client/server mode
|
|
// e.g. docker save -o alpine.tar alpine:3.15
|
|
func initializeRemoteArchiveScanner(ctx context.Context, filePath string, artifactCache cache.ArtifactCache, remoteScanOptions client.ScannerOption, artifactOption artifact.Option) (scanner.Scanner, error) {
|
|
v := _wireValue
|
|
clientScanner := client.NewScanner(remoteScanOptions, v...)
|
|
typesImage, err := image.NewArchiveImage(filePath)
|
|
if err != nil {
|
|
return scanner.Scanner{}, err
|
|
}
|
|
artifactArtifact, err := image2.NewArtifact(typesImage, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(clientScanner, artifactArtifact)
|
|
return scannerScanner, nil
|
|
}
|
|
|
|
// initializeRemoteFilesystemScanner is for filesystem scanning in client/server mode
|
|
func initializeRemoteFilesystemScanner(ctx context.Context, path string, artifactCache cache.ArtifactCache, remoteScanOptions client.ScannerOption, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
v := _wireValue
|
|
clientScanner := client.NewScanner(remoteScanOptions, v...)
|
|
artifactArtifact, err := local2.NewArtifact(path, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(clientScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
}, nil
|
|
}
|
|
|
|
// initializeRemoteRepositoryScanner is for repository scanning in client/server mode
|
|
func initializeRemoteRepositoryScanner(ctx context.Context, url string, artifactCache cache.ArtifactCache, remoteScanOptions client.ScannerOption, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
v := _wireValue
|
|
clientScanner := client.NewScanner(remoteScanOptions, v...)
|
|
artifactArtifact, cleanup, err := repo.NewArtifact(url, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(clientScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
cleanup()
|
|
}, nil
|
|
}
|
|
|
|
// initializeRemoteSBOMScanner is for sbom scanning in client/server mode
|
|
func initializeRemoteSBOMScanner(ctx context.Context, path string, artifactCache cache.ArtifactCache, remoteScanOptions client.ScannerOption, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
v := _wireValue
|
|
clientScanner := client.NewScanner(remoteScanOptions, v...)
|
|
artifactArtifact, err := sbom.NewArtifact(path, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(clientScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
}, nil
|
|
}
|
|
|
|
// initializeRemoteVMScanner is for vm scanning in client/server mode
|
|
func initializeRemoteVMScanner(ctx context.Context, path string, artifactCache cache.ArtifactCache, remoteScanOptions client.ScannerOption, artifactOption artifact.Option) (scanner.Scanner, func(), error) {
|
|
v := _wireValue
|
|
clientScanner := client.NewScanner(remoteScanOptions, v...)
|
|
artifactArtifact, err := vm.NewArtifact(path, artifactCache, artifactOption)
|
|
if err != nil {
|
|
return scanner.Scanner{}, nil, err
|
|
}
|
|
scannerScanner := scanner.NewScanner(clientScanner, artifactArtifact)
|
|
return scannerScanner, func() {
|
|
}, nil
|
|
}
|