Enum Justification

pub enum Justification {
    ComponentNotPresent,
    VulnerableCodeNotPresent,
    VulnerableCodeNotInExecutePath,
    VulnerableCodeCannotBeControlledByAdversary,
    InlineMitigationsAlreadyExist,
}

Justification describes why a given component is not affected by a vulnerability.

Variants

ComponentNotPresent

ComponentNotPresent means the vulnerable component is not included in the artifact.

ComponentNotPresent is a strong justification that the artifact is not affected.

VulnerableCodeNotPresent

VulnerableCodeNotPresent means the vulnerable component is included in artifact, but the vulnerable code is not present. Typically, this case occurs when source code is configured or built in a way that excluded the vulnerable code.

VulnerableCodeNotPresent is a strong justification that the artifact is not affected.

VulnerableCodeNotInExecutePath

VulnerableCodeNotInExecutePath means the vulnerable code (likely in [subcomponent_id]) can not be executed as it is used by [product_id]. Typically, this case occurs when [product_id] includes the vulnerable [subcomponent_id] and the vulnerable code but does not call or use the vulnerable code.

VulnerableCodeCannotBeControlledByAdversary

VulnerableCodeCannotBeControlledByAdversary means the vulnerable code cannot be controlled by an attacker to exploit the vulnerability.

This justification could be difficult to prove conclusively.

InlineMitigationsAlreadyExist

InlineMitigationsAlreadyExist means [product_id] includes built-in protections or features that prevent exploitation of the vulnerability. These built-in protections cannot be subverted by the attacker and cannot be configured or disabled by the user. These mitigations completely prevent exploitation based on known attack vectors.

This justification could be difficult to prove conclusively. History is littered with examples of mitigation bypasses, typically involving minor modifications of existing exploit code.

Trait Implementations

impl Clone for Justification

fn clone(&self) -> Justification

Returns a duplicate of the value.

const fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Justification

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Justification

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Justification

fn eq(&self, other: &Justification) -> bool

Tests for self and other values to be equal, and is used by ==.

const fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Justification

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for Justification

impl StructuralPartialEq for Justification