Module edu.hm.hafner.analysis.model

Package edu.hm.hafner.analysis.parser

Class TrivyParser

java.lang.Object

edu.hm.hafner.analysis.IssueParser

edu.hm.hafner.analysis.parser.JsonIssueParser

edu.hm.hafner.analysis.parser.TrivyParser

All Implemented Interfaces:

Serializable

public class TrivyParser
extends JsonIssueParser

Parser for reports of aquasec trivy container vulnerability scanner.

Usage: trivy image -f json -o results.json golang:1.12-alpine

Author:

Thomas Fürer - tfuerer.javanet@gmail.com

See Also:

• Serialized Form

Field Summary

Fields inherited from class edu.hm.hafner.analysis.IssueParser

ADDITIONAL_PROPERTIES, CATEGORY, COLUMN_END, COLUMN_START, DESCRIPTION, FILE_NAME, FINGERPRINT, ID, LINE_END, LINE_RANGE_END, LINE_RANGE_START, LINE_RANGES, LINE_START, MESSAGE, MODULE_NAME, ORIGIN, PACKAGE_NAME, SEVERITY, TYPE

Constructor Summary

Constructors

Constructor	Description
TrivyParser()

Method Summary

Modifier and Type	Method	Description
protected void	parseJsonArray(Report report, org.json.JSONArray jsonReport, IssueBuilder issueBuilder)	Used with older schema before trivy 0.20.0.
protected void	parseJsonObject(Report report, org.json.JSONObject jsonReport, IssueBuilder issueBuilder)	Used with schema version 2 starting with trivy 0.20.0.

Methods inherited from class edu.hm.hafner.analysis.parser.JsonIssueParser

accepts, parse

Methods inherited from class edu.hm.hafner.analysis.IssueParser

equalsIgnoreCase, isXmlFile, parseFile

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TrivyParser

public TrivyParser()

Method Details

parseJsonObject

protected void parseJsonObject(Report report,
 org.json.JSONObject jsonReport,
 IssueBuilder issueBuilder)

Used with schema version 2 starting with trivy 0.20.0.

Overrides:

parseJsonObject in class JsonIssueParser

Parameters:

report - the report to fill

jsonReport - the input JSON report given as JSON object

issueBuilder - build to be used to create issues

parseJsonArray

protected void parseJsonArray(Report report,
 org.json.JSONArray jsonReport,
 IssueBuilder issueBuilder)

Used with older schema before trivy 0.20.0.

Overrides:

parseJsonArray in class JsonIssueParser

Parameters:

report - the report to fill

jsonReport - the input JSON report given as JSON array

issueBuilder - build to be used to create issues