libmeep

type CertificateDigestConfig struct {
	URL              string
	Algorithm        string
	AcceptSelfSigned bool
}

type CertificatePin struct {
	Algorithm string
	DigestHex string
}

type DefaultJSManifestResolver struct {
	Runner JSCommandRunner
}

type DefaultPackageResolver struct {
	Runner PackageCommandRunner
}

type DefaultPythonManifestResolver struct {
	Runner PythonCommandRunner
}

type DiscoveredFile struct {
	Path      string
	RelPath   string
	SourceURL string
	Match     FileMatch
}

type FileKind string

type FileMatch struct {
	Kind            FileKind
	PackageManagers []PackageManager
}

type FileScanSummary struct {
	Path         string
	RelPath      string
	SourceURL    string
	PackageCount int
	ResultCount  int
}

type GoModParser struct{}

type GoSumParser struct{}

type HSTSStore struct {
	// contains filtered or unexported fields
}

type HTTPSecurityConfig struct {
	CertPin                   string
	AcceptSelfSigned          bool
	AllowSelfSignedWithoutPin bool
	EnableHSTS                bool
	HSTSPath                  string
	Timeout                   time.Duration
}

type IntelPluginConfig struct {
	ID           string
	Command      string
	Path         string
	ConfigSource string
	TempDir      string
	Args         []string
	Env          []string
	MaxSizeBytes int64
	TLS          PluginTLSConfig
	SHA256       string
	SHA512       string
	SigstoreData *PluginSigstoreData
	Validation   []PluginValidationMethod
	CosignPath   string
	Client       *http.Client
}

type JSCommandRunner interface {
	Run(context.Context, string, string, ...string) error
}

type JSManifestResolveRequest struct {
	Root        string
	File        DiscoveredFile
	ScanResults []ScanResult
	OnEvent     func(ManifestResolutionEvent) error
}

type JSManifestResolveResult struct {
	File     DiscoveredFile
	Cleanup  func() error
	Warnings []PackageWarning
}

type JSManifestResolver interface {
	ResolveJSManifest(context.Context, JSManifestResolveRequest) (JSManifestResolveResult, error)
}

type ManifestResolutionEvent struct {
	PackageManager PackageManager
	SourcePath     string
	SourceRelPath  string
	SourceURL      string
	Command        []string
	Status         string
	Message        string
}

type NPMParser struct{}

type NPMPluginScanConfig struct {
	Root           string
	PluginCommand  string
	PluginPath     string
	PluginTempDir  string
	PluginArgs     []string
	PluginEnv      []string
	OnPluginResult func(PluginResult) error
}

type NPMPluginScanResult struct {
	PURLs         []string
	ParseWarnings []PackageWarning
	PluginResults []PluginResult
	FileSummaries []FileScanSummary
	Packages      []PackageRecord
}

type OPAClient struct {
	// contains filtered or unexported fields
}

type OPAClientConfig struct {
	URL            string
	BaseURL        string
	Path           string
	Client         *http.Client
	OnPolicyModule func(OPAPolicyModule) error
}

type OPAPolicyModule struct {
	ID        string `json:"id"`
	SHA512Hex string `json:"sha512"`
}

type OPAStatusError struct {
	Operation  string
	URL        string
	Status     string
	StatusCode int
}

type OpenReceiver struct{}

type OutputConfig struct {
	BasePath       string
	Formats        []OutputFormat
	Result         NPMPluginScanResult
	PolicyDecision PolicyDecision
}

type OutputFile struct {
	Format OutputFormat
	Path   string
}

type OutputFormat string

type OutputWriteResult struct {
	Files  []OutputFile
	Timing time.Duration
}

type PNPMParser struct{}

type PackageCheckRequest struct {
	Manager            PackageManager
	Ecosystem          PackageEcosystem
	Name               string
	Version            string
	PURL               string
	IncludeTransitives bool
}

type PackageCheckSessionConfig struct {
	Resolution PackageResolution
	Plugins    []IntelPluginConfig

	OnPluginStart              func(IntelPluginConfig) error
	OnPluginAcquired           func(PluginAcquisitionEvent) error
	OnPluginAcquisitionFailure func(PluginAcquisitionFailureEvent) error
	OnPluginValidationCheck    func(IntelPluginConfig, PluginValidationCheck) error
	OnPluginValidationSuccess  func(IntelPluginConfig, PluginValidationCheck) error
	OnPluginValidationWarning  func(IntelPluginConfig, PluginValidationWarning) error
	OnPluginResult             func(string, PluginResult) error
	PolicyConfig               *PolicyRunConfig
}

type PackageCommandRunner interface {
	Run(context.Context, string, string, ...string) error
	RunOutput(context.Context, string, string, ...string) ([]byte, error)
}

type PackageEcosystem string

type PackageInstallPlan struct {
	Manager PackageManager
	Command []string
	Dir     string
}

type PackageManager string

type PackageOccurrence struct {
	PURL           string
	Name           string
	Version        string
	PackageManager PackageManager
	ParserID       string
	ProjectName    string
	ProjectVersion string
	SourcePath     string
	SourceRelPath  string
	SourceURL      string
}

type PackageRecord struct {
	PURL        string
	Name        string
	Version     string
	Occurrences []PackageOccurrence
}

type PackageResolution struct {
	RequestedPURL string
	PURLs         []string
	Warnings      []PackageWarning
	InstallPlan   *PackageInstallPlan
}

type PackageResolver interface {
	ResolvePackage(context.Context, PackageCheckRequest) (PackageResolution, error)
}

type PackageWarning struct {
	Code        string
	Path        string
	RelPath     string
	SourceURL   string
	PackageName string
	Message     string
}

type ParseFileResult struct {
	Packages []PackageOccurrence
	Warnings []PackageWarning
}

type ParseRequest struct {
	Root        string
	ScanResults []ScanResult
	File        DiscoveredFile
}

type Parser interface {
	ID() string
	Match(DiscoveredFile) bool
	Parse(context.Context, ParseRequest) (ParseFileResult, error)
}

type PipLockParser struct{}

type PipReportParser struct{}

type PluginAcquisitionEvent struct {
	PluginID     string
	SourcePath   string
	StagedPath   string
	ConfigSource string
}

type PluginAcquisitionFailureEvent struct {
	PluginID     string
	SourcePath   string
	ConfigSource string
	Security     bool
	Err          error
}

type PluginConfigDocument struct {
	Plugins []PluginDefinition   `json:"plugins"`
	Sources []PluginConfigSource `json:"-"`
}

type PluginConfigSource struct {
	Name string
	URL  string
}

type PluginDefinition struct {
	ID           string                   `json:"id"`
	Path         string                   `json:"path"`
	Args         []string                 `json:"args,omitempty"`
	Env          []string                 `json:"env,omitempty"`
	MaxSizeBytes int64                    `json:"max-size-bytes,omitempty"`
	TLS          PluginTLSConfig          `json:"tls,omitempty"`
	SHA256       string                   `json:"sha256,omitempty"`
	SHA512       string                   `json:"sha512,omitempty"`
	SigstoreData *PluginSigstoreData      `json:"sigstore-data,omitempty"`
	Validation   []PluginValidationMethod `json:"validation,omitempty"`
}

type PluginResult = intel.PluginResult

type PluginRunSummary struct {
	ID          string
	ResultCount int
}

type PluginSigstoreData struct {
	Bundle                      string `json:"bundle,omitempty"`
	Signature                   string `json:"signature,omitempty"`
	Certificate                 string `json:"certificate,omitempty"`
	CertificateIdentity         string `json:"certificate-identity,omitempty"`
	CertificateIdentityRegexp   string `json:"certificate-identity-regexp,omitempty"`
	CertificateOIDCIssuer       string `json:"certificate-oidc-issuer,omitempty"`
	CertificateOIDCIssuerRegexp string `json:"certificate-oidc-issuer-regexp,omitempty"`
	Key                         string `json:"key,omitempty"`
	RekorURL                    string `json:"rekor-url,omitempty"`
	Mandatory                   bool   `json:"mandatory,omitempty"`
}

type PluginTLSConfig struct {
	AcceptSelfSigned bool   `json:"accept-self-signed,omitempty"`
	CertPin          string `json:"cert-pin,omitempty"`
	EnableHSTS       bool   `json:"enable-hsts,omitempty"`
	HSTSPath         string `json:"hsts-path,omitempty"`
}

type PluginValidationCheck struct {
	Method string
}

type PluginValidationFailure struct {
	Method  string
	Message string
}

type PluginValidationMethod struct {
	Type      string `json:"type"`
	Algorithm string `json:"algorithm,omitempty"`
	Value     string `json:"value,omitempty"`
}

type PluginValidationOptions struct {
	CosignPath string
}

type PluginValidationResult struct {
	PluginID string
	Path     string
	Valid    bool
	Skipped  bool
	Checks   []PluginValidationCheck
	Warnings []PluginValidationWarning
	Failures []PluginValidationFailure
}

type PluginValidationWarning struct {
	Method  string
	Message string
}

type PoetryLockParser struct{}

type PolicyAction string

type PolicyAlert struct {
	Action           PolicyAction      `json:"action"`
	Reason           string            `json:"reason"`
	PluginID         string            `json:"plugin-id"`
	PluginConfigID   string            `json:"plugin-config-id,omitempty"`
	PURL             string            `json:"purl"`
	Status           string            `json:"status,omitempty"`
	Malicious        *bool             `json:"malicious,omitempty"`
	MaliciousPackage *bool             `json:"maliciousPackage,omitempty"`
	SuspiciousScore  *float64          `json:"suspiciousScore,omitempty"`
	ResultCount      []int             `json:"resultCount,omitempty"`
	Behaviors        []string          `json:"behaviors,omitempty"`
	VulnerabilityIDs []string          `json:"vulnerabilityIDs,omitempty"`
	IntelSpecific    map[string]any    `json:"intel-specific,omitempty"`
	SourceFiles      []string          `json:"sourceFiles,omitempty"`
	Result           PolicyInputResult `json:"result"`
	Document         map[string]any    `json:"-"`
}

type PolicyDecision struct {
	Block  bool          `json:"block"`
	Alerts []PolicyAlert `json:"alerts"`
}

type PolicyInput struct {
	Results []PolicyInputResult `json:"results"`
}

type PolicyInputResult struct {
	PluginID         string         `json:"plugin-id"`
	PluginConfigID   string         `json:"plugin-config-id,omitempty"`
	PURL             string         `json:"purl"`
	Status           string         `json:"status"`
	ResultCount      []int          `json:"resultCount,omitempty"`
	Malicious        *bool          `json:"malicious,omitempty"`
	MaliciousPackage *bool          `json:"maliciousPackage,omitempty"`
	SuspiciousScore  *float64       `json:"suspiciousScore,omitempty"`
	Behaviors        []string       `json:"behaviors,omitempty"`
	VulnerabilityIDs []string       `json:"vulnerabilityIDs,omitempty"`
	IntelSpecific    map[string]any `json:"intel-specific,omitempty"`
	SourceFiles      []string       `json:"sourceFiles,omitempty"`
	Document         map[string]any `json:"-"`
}

type PolicyRunConfig struct {
	URL            string
	ServerURL      string
	Path           string
	Policies       []string
	PolicyFiles    []string
	WebhookURL     string
	Client         *http.Client
	WebhookClient  *http.Client
	OnPolicyModule func(OPAPolicyModule) error
	OnPolicyAlert  func(PolicyAlert) error
}

type PolicyRunResult struct {
	Decision      PolicyDecision
	WebhookSent   int
	PolicyModules []OPAPolicyModule
	Timings       PolicyTimings
}

type PolicyTimings struct {
	Total           time.Duration
	Evaluation      time.Duration
	WebhookDelivery time.Duration
}

type PyprojectParser struct{}

type PythonCommandRunner interface {
	Run(context.Context, string, string, ...string) error
}

type PythonManifestResolveRequest struct {
	Root                      string
	File                      DiscoveredFile
	ScanResults               []ScanResult
	EnableUnsafePipResolution bool
	OnEvent                   func(ManifestResolutionEvent) error
}

type PythonManifestResolveResult struct {
	File     DiscoveredFile
	Cleanup  func() error
	Warnings []PackageWarning
}

type PythonManifestResolver interface {
	ResolvePythonManifest(context.Context, PythonManifestResolveRequest) (PythonManifestResolveResult, error)
}

type Receiver interface {
	Receive(context.Context, DiscoveredFile) ScanResult
}

type RemoteRepoConfig struct {
	Provider                    RemoteRepoProvider
	URL                         string
	Token                       string
	TempDir                     string
	APIBaseURL                  string
	HTMLBaseURL                 string
	Client                      *http.Client
	AdditionalRequirementsFiles []string
	MaxCandidates               int
	MaxFileBytes                int64
}

type RemoteRepoProvider string

type RequirementsParser struct{}

type ResultStore struct {
	// contains filtered or unexported fields
}

type SBOMFile struct {
	Format SBOMFormat
	Path   string
}

type SBOMFormat string

type SBOMParser struct{}

type SBOMScope string

type SBOMWriteConfig struct {
	BasePath string
	Formats  []SBOMFormat
	Scope    SBOMScope
	Result   ScanSessionResult
}

type SBOMWriteResult struct {
	Files []SBOMFile
}

type ScanConfig struct {
	Root                        string
	Receiver                    Receiver
	IncludeSBOMs                bool
	AdditionalRequirementsFiles []string
}

type ScanResult struct {
	File   DiscoveredFile
	Opened bool
	Err    error
}

type ScanSessionConfig struct {
	Root                            string
	RemoteRepo                      *RemoteRepoConfig
	ScanSBOMs                       bool
	DisablePythonManifestResolution bool
	EnableUnsafePipResolution       bool
	AdditionalRequirementsFiles     []string
	PythonManifestResolver          PythonManifestResolver
	JSManifestResolver              JSManifestResolver
	ScanResults                     []ScanResult
	Parsers                         []Parser
	Plugins                         []IntelPluginConfig
	OnScanResult                    func(ScanResult) error
	OnManifestResolution            func(ManifestResolutionEvent) error
	OnPackage                       func(PackageOccurrence) error
	OnPluginStart                   func(IntelPluginConfig) error
	OnPluginAcquired                func(PluginAcquisitionEvent) error
	OnPluginAcquisitionFailure      func(PluginAcquisitionFailureEvent) error
	OnPluginValidationCheck         func(IntelPluginConfig, PluginValidationCheck) error
	OnPluginValidationSuccess       func(IntelPluginConfig, PluginValidationCheck) error
	OnPluginValidationWarning       func(IntelPluginConfig, PluginValidationWarning) error
	OnPluginResult                  func(string, PluginResult) error
	PolicyConfig                    *PolicyRunConfig
}

type ScanSessionResult struct {
	ScanResults   []ScanResult
	Store         *ResultStore
	Timings       ScanTimings
	PURLs         []string
	PluginResults []PluginResult
	PluginRuns    []PluginRunSummary
	FileSummaries []FileScanSummary
	Warnings      []PackageWarning
	PolicyRun     PolicyRunResult
}

type ScanTimings struct {
	Total           time.Duration
	Discovery       time.Duration
	Parsing         time.Duration
	PluginExecution time.Duration
}

type StreamingPolicyProcessor struct {
	// contains filtered or unexported fields
}

type WebhookConfig struct {
	URL    string
	Client *http.Client
}

type WebhookConfigDocument struct {
	URL              string               `json:"url,omitempty"`
	CertPin          string               `json:"cert-pin,omitempty"`
	AcceptSelfSigned bool                 `json:"accept-self-signed,omitempty"`
	EnableHSTS       bool                 `json:"enable-hsts,omitempty"`
	HSTSPath         string               `json:"hsts-path,omitempty"`
	Sources          []PluginConfigSource `json:"-"`
}

type YarnParser struct{}