1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 11:55:40 +01:00

Add some code documentation

This commit is contained in:
Fadi Abbud 2022-03-04 16:04:21 +01:00
parent b852ae4ec1
commit aa60e8f245
3 changed files with 33 additions and 0 deletions

View file

@ -98,6 +98,8 @@ func writeReport(report *Report, opts *options) error {
return writer(report, w) return writer(report, w)
} }
// buildReporters initializes each report by assigning a number and description to it.
// It returns an array of the reporter interface type.
func buildReporters() []reporter { func buildReporters() []reporter {
return []reporter{ return []reporter{
&tlsReporter{baseReporter{num: 3, description: "TLS"}}, &tlsReporter{baseReporter{num: 3, description: "TLS"}},

View file

@ -58,6 +58,9 @@ type processor struct {
expr *util.PathEval expr *util.PathEval
} }
// reporter is implemented by any value that has a report method.
// The implementation of the report controls how to test
// the respective requirement and generate the report.
type reporter interface { type reporter interface {
report(*processor, *Domain) report(*processor, *Domain)
} }
@ -102,6 +105,8 @@ func (wt whereType) String() string {
} }
} }
// newProcessor returns a processor structure after assigning the given options to the opts attribute
// and initializing the "alreadyChecked" and "expr" fields.
func newProcessor(opts *options) *processor { func newProcessor(opts *options) *processor {
return &processor{ return &processor{
opts: opts, opts: opts,
@ -110,6 +115,7 @@ func newProcessor(opts *options) *processor {
} }
} }
// clean clears the fields values of the given processor.
func (p *processor) clean() { func (p *processor) clean() {
p.redirects = nil p.redirects = nil
p.noneTLS = nil p.noneTLS = nil
@ -130,6 +136,9 @@ func (p *processor) clean() {
p.badChanges = nil p.badChanges = nil
} }
// run calls checkDomain function for each domain in the given "domains" parameter.
// Then it calls the report method on each report from the given "reporters" paramerter for each domain.
// It return a poiter to the report and nil, otherwise an error.
func (p *processor) run(reporters []reporter, domains []string) (*Report, error) { func (p *processor) run(reporters []reporter, domains []string) (*Report, error) {
var report Report var report Report
@ -786,6 +795,10 @@ func extractProviderURL(r io.Reader) (string, error) {
return "", nil return "", nil
} }
// checkProviderMetadata checks the provider-metatdata if exists, decodes,
// and validates against the JSON schema. According to the result the respective
// error messages are passed to the badProviderMetadatas method in case of errors.
// It returns nil if all checks are passed.
func (p *processor) checkProviderMetadata(domain string) error { func (p *processor) checkProviderMetadata(domain string) error {
use(&p.badProviderMetadatas) use(&p.badProviderMetadatas)
@ -829,6 +842,11 @@ func (p *processor) checkProviderMetadata(domain string) error {
return nil return nil
} }
// checkSecurity checks the security.txt file by making HTTP request to fetch it.
// It checks the existence of the CSAF field in the file content and tries to fetch
// the value of this field. As a result of these a respective error messages are
// passed to the badSecurity method in case of errors.
// It returns nil if all checks are passed.
func (p *processor) checkSecurity(domain string) error { func (p *processor) checkSecurity(domain string) error {
client := p.httpClient() client := p.httpClient()
@ -907,6 +925,10 @@ func (p *processor) checkSecurity(domain string) error {
return nil return nil
} }
// checkPGPKeys checks if the OpenPGP keys are available and valid, fetchs
// the the remotely keys and compares the fingerprints.
// As a result of these a respective error messages are passed to badPGP method
// in case of errors. It returns nil if all checks are passed.
func (p *processor) checkPGPKeys(domain string) error { func (p *processor) checkPGPKeys(domain string) error {
use(&p.badPGPs) use(&p.badPGPs)

View file

@ -42,6 +42,9 @@ func (bc *baseReporter) requirement(domain *Domain) *Requirement {
return req return req
} }
// report tests if the URLs are HTTPS and set the "message" field value
// of the "Requirement" struct as a result of that.
// A list of non HTTPS URLs is included in the value of the "message" field.
func (r *tlsReporter) report(p *processor, domain *Domain) { func (r *tlsReporter) report(p *processor, domain *Domain) {
req := r.requirement(domain) req := r.requirement(domain)
if p.noneTLS == nil { if p.noneTLS == nil {
@ -64,6 +67,8 @@ func (r *tlsReporter) report(p *processor, domain *Domain) {
req.message(urls...) req.message(urls...)
} }
// report tests if redirects are used and set the "message" field value
// of the "Requirement" struct as a result of that.
func (r *redirectsReporter) report(p *processor, domain *Domain) { func (r *redirectsReporter) report(p *processor, domain *Domain) {
req := r.requirement(domain) req := r.requirement(domain)
if len(p.redirects) == 0 { if len(p.redirects) == 0 {
@ -84,6 +89,8 @@ func (r *redirectsReporter) report(p *processor, domain *Domain) {
req.Messages = keys req.Messages = keys
} }
// report tests if an provider-metatdata.json are available and set the
// "message" field value of the "Requirement" struct as a result of that.
func (r *providerMetadataReport) report(p *processor, domain *Domain) { func (r *providerMetadataReport) report(p *processor, domain *Domain) {
req := r.requirement(domain) req := r.requirement(domain)
if !used(p.badProviderMetadatas) { if !used(p.badProviderMetadatas) {
@ -97,6 +104,8 @@ func (r *providerMetadataReport) report(p *processor, domain *Domain) {
req.Messages = p.badProviderMetadatas req.Messages = p.badProviderMetadatas
} }
// report tests the "security.txt" file and set the "message" field value
// of the "Requirement" struct as a result of that.
func (r *securityReporter) report(p *processor, domain *Domain) { func (r *securityReporter) report(p *processor, domain *Domain) {
req := r.requirement(domain) req := r.requirement(domain)
if !used(p.badSecurities) { if !used(p.badSecurities) {