C/C++
C/C++ package analysis and vulnerability scanning capabilities
Package analysis
| Cataloger + Evidence | Package URL Type | License | Dependencies | Package Manager Claims | ||||
|---|---|---|---|---|---|---|---|---|
| Depth | Edges | Kinds | Files | Digests | Integrity Hash | |||
conan-cataloger conan.lock | pkg:conan | Transitive | Runtime, Build | |||||
conan-cataloger conanfile.txt | pkg:conan | Direct | Runtime | |||||
conan-info-cataloger conaninfo.txt | pkg:conan | Direct | Flat | Runtime | ||||
vcpkg-manifest-cataloger vcpkg.json | pkg:vcpkg | Transitive | Complete | Runtime | ||||
We support package detection for v1 and v2 formatted conan.lock files.
Vulnerability scanning
| Data Source | Disclosures | Fixes | Track by Source Package | ||
|---|---|---|---|---|---|
| Affected | Date | Versions | Date | ||
| National Vulnerability Database (NVD) | |||||
Grype Configuration
| Configuration Key | Description |
|---|---|
match.stock.using-cpes | Use CPE package identifiers to find vulnerabilities |