safedep/vet
1
0
Fork 0
mirror of https://github.com/safedep/vet.git synced 2025-12-11 09:25:44 -06:00
Code Issues Packages Projects Releases 68 Wiki Activity

chore: Add guard rails against nil pkg in event for JSON report generator

Browse Source
This commit is contained in:
abhisek 2023-12-29 15:26:48 +05:30
parent 273d999561
commit d63e9277c7
No known key found for this signature in database
GPG Key ID: CB92A4990C02A88F
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/analyzer/analyzer.go
View File

@ -10,8 +10,10 @@ type AnalyzerEventType string
const ( const (
ET_FilterExpressionMatched = AnalyzerEventType("ev_pkg_filter_match") ET_FilterExpressionMatched = AnalyzerEventType("ev_pkg_filter_match")
ET_LockfilePoisoningSignal = AnalyzerEventType("ev_lockfile_poisoning")
ET_AnalyzerFailOnError = AnalyzerEventType("ev_fail_on_error") ET_AnalyzerFailOnError = AnalyzerEventType("ev_fail_on_error")
// Following event types must set the Threat field
ET_LockfilePoisoningSignal = AnalyzerEventType("ev_lockfile_poisoning")
) )
type AnalyzerEvent struct { type AnalyzerEvent struct {

8
pkg/reporter/json_report.go
View File

@ -79,6 +79,14 @@ func (r *jsonReportGenerator) handleThreatEvent(event *analyzer.AnalyzerEvent) {
return return
} }
if event.Threat.SubjectType == jsonreportspec.ReportThreat_Manifest && event.Manifest == nil {
return
}
if event.Threat.SubjectType == jsonreportspec.ReportThreat_Package && event.Package == nil {
return
}
switch event.Threat.SubjectType { switch event.Threat.SubjectType {
case jsonreportspec.ReportThreat_Manifest: case jsonreportspec.ReportThreat_Manifest:
manifest := r.findPackageManifestReport(event.Manifest) manifest := r.findPackageManifestReport(event.Manifest)