mirror of
https://github.com/anchore/syft.git
synced 2026-10-30 14:02:26 +01:00
Signed-off-by: Keith Zantow <kzantow@gmail.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
186 lines
4.5 KiB
Go
186 lines
4.5 KiB
Go
package eventloop
|
|
|
|
import (
|
|
"github.com/anchore/syft/cmd/syft/cli/options"
|
|
"github.com/anchore/syft/internal/file"
|
|
"github.com/anchore/syft/syft"
|
|
"github.com/anchore/syft/syft/artifact"
|
|
"github.com/anchore/syft/syft/file/cataloger/filecontent"
|
|
"github.com/anchore/syft/syft/file/cataloger/filedigest"
|
|
"github.com/anchore/syft/syft/file/cataloger/filemetadata"
|
|
"github.com/anchore/syft/syft/file/cataloger/secrets"
|
|
"github.com/anchore/syft/syft/sbom"
|
|
"github.com/anchore/syft/syft/source"
|
|
)
|
|
|
|
type Task func(*sbom.Artifacts, source.Source) ([]artifact.Relationship, error)
|
|
|
|
func Tasks(opts *options.Catalog) ([]Task, error) {
|
|
var tasks []Task
|
|
|
|
generators := []func(opts *options.Catalog) (Task, error){
|
|
generateCatalogPackagesTask,
|
|
generateCatalogFileMetadataTask,
|
|
generateCatalogFileDigestsTask,
|
|
generateCatalogSecretsTask,
|
|
generateCatalogContentsTask,
|
|
}
|
|
|
|
for _, generator := range generators {
|
|
task, err := generator(opts)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if task != nil {
|
|
tasks = append(tasks, task)
|
|
}
|
|
}
|
|
|
|
return tasks, nil
|
|
}
|
|
|
|
func generateCatalogPackagesTask(opts *options.Catalog) (Task, error) {
|
|
if !opts.Package.Cataloger.Enabled {
|
|
return nil, nil
|
|
}
|
|
|
|
task := func(results *sbom.Artifacts, src source.Source) ([]artifact.Relationship, error) {
|
|
packageCatalog, relationships, theDistro, err := syft.CatalogPackages(src, opts.ToCatalogerConfig())
|
|
|
|
results.Packages = packageCatalog
|
|
results.LinuxDistribution = theDistro
|
|
|
|
return relationships, err
|
|
}
|
|
|
|
return task, nil
|
|
}
|
|
|
|
func generateCatalogFileMetadataTask(opts *options.Catalog) (Task, error) {
|
|
if !opts.FileMetadata.Cataloger.Enabled {
|
|
return nil, nil
|
|
}
|
|
|
|
metadataCataloger := filemetadata.NewCataloger()
|
|
|
|
task := func(results *sbom.Artifacts, src source.Source) ([]artifact.Relationship, error) {
|
|
resolver, err := src.FileResolver(opts.FileMetadata.Cataloger.GetScope())
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
result, err := metadataCataloger.Catalog(resolver)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
results.FileMetadata = result
|
|
return nil, nil
|
|
}
|
|
|
|
return task, nil
|
|
}
|
|
|
|
func generateCatalogFileDigestsTask(opts *options.Catalog) (Task, error) {
|
|
if !opts.FileMetadata.Cataloger.Enabled {
|
|
return nil, nil
|
|
}
|
|
|
|
hashes, err := file.Hashers(opts.FileMetadata.Digests...)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
digestsCataloger := filedigest.NewCataloger(hashes)
|
|
|
|
task := func(results *sbom.Artifacts, src source.Source) ([]artifact.Relationship, error) {
|
|
resolver, err := src.FileResolver(opts.FileMetadata.Cataloger.GetScope())
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
result, err := digestsCataloger.Catalog(resolver)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
results.FileDigests = result
|
|
return nil, nil
|
|
}
|
|
|
|
return task, nil
|
|
}
|
|
|
|
func generateCatalogSecretsTask(opts *options.Catalog) (Task, error) {
|
|
if !opts.Secrets.Cataloger.Enabled {
|
|
return nil, nil
|
|
}
|
|
|
|
patterns, err := secrets.GenerateSearchPatterns(secrets.DefaultSecretsPatterns, opts.Secrets.AdditionalPatterns, opts.Secrets.ExcludePatternNames)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
secretsCataloger, err := secrets.NewCataloger(patterns, opts.Secrets.RevealValues, opts.Secrets.SkipFilesAboveSize) //nolint:staticcheck
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
task := func(results *sbom.Artifacts, src source.Source) ([]artifact.Relationship, error) {
|
|
resolver, err := src.FileResolver(opts.Secrets.Cataloger.GetScope())
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
result, err := secretsCataloger.Catalog(resolver)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
results.Secrets = result
|
|
return nil, nil
|
|
}
|
|
|
|
return task, nil
|
|
}
|
|
|
|
func generateCatalogContentsTask(opts *options.Catalog) (Task, error) {
|
|
if !opts.FileContents.Cataloger.Enabled {
|
|
return nil, nil
|
|
}
|
|
|
|
contentsCataloger, err := filecontent.NewCataloger(opts.FileContents.Globs, opts.FileContents.SkipFilesAboveSize) //nolint:staticcheck
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
task := func(results *sbom.Artifacts, src source.Source) ([]artifact.Relationship, error) {
|
|
resolver, err := src.FileResolver(opts.FileContents.Cataloger.GetScope())
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
result, err := contentsCataloger.Catalog(resolver)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
results.FileContents = result
|
|
return nil, nil
|
|
}
|
|
|
|
return task, nil
|
|
}
|
|
|
|
func RunTask(t Task, a *sbom.Artifacts, src source.Source, c chan<- artifact.Relationship) error {
|
|
defer close(c)
|
|
|
|
relationships, err := t(a, src)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
for _, relationship := range relationships {
|
|
c <- relationship
|
|
}
|
|
|
|
return nil
|
|
}
|