This content is part of a third party extension that is not supported by the Cake project. For more information about this extension see Cake.Grype.

Summary

A vulnerability found in a package.

Assembly

Cake.Grype.dll

Namespace

Cake.Grype.Json

Base Types

Object

Derived Types

GrypeIgnoredMatch

graph BT Type-->Base0["Object"] Type["GrypeMatch"] class Type type-node Derived0["GrypeIgnoredMatch"]-->Type click Derived0 "/api/Cake.Grype.Json/GrypeIgnoredMatch"

Syntax

public class GrypeMatch

Remarks

The signal helpers (IsKnownExploited, MaxEpssScore, MaxCvssBaseScore, …) look at the Cake.Grype.Json.GrypeMatch.Vulnerability and all Cake.Grype.Json.GrypeMatch.RelatedVulnerabilities: distro advisories often carry no CVSS themselves, only the related NVD record does.

Constructors

Name	Summary
GrypeMatch()

Properties

Name	Value	Summary
IsKnownExploited	bool	Gets a value indicating whether any record lists the vulnerability as known exploited (CISA KEV).
MaxCvssBaseScore	Nullable<double>	Gets the highest CVSS base score of any record, or `null` if none has CVSS data. This is the maximum across all CVSS versions present: a record's `Cake.Grype.Json.GrypeVulnerabilityMetadata.Cvss` can mix v2 and v3.x entries (see `Cake.Grype.Json.GrypeCvss.Version`), and scores are not comparable across versions, so treat this as "the worst reported score", not a score on a single consistent scale.
MaxEpssPercentile	Nullable<double>	Gets the highest EPSS percentile (0–1) of any record, or `null` if none has EPSS data.
MaxEpssScore	Nullable<double>	Gets the highest EPSS probability (0–1) of any record, or `null` if none has EPSS data.
Risk	double	Gets Grype's combined risk score (0–100) from severity, EPSS and KEV; 0 when unassessed.
Severity	GrypeSeverity	Gets the severity Grype assigned to the match. `Unknown` means "not assessed yet".

Methods

Name	Value	Summary
get_Artifact()	GrypeArtifact
get_RelatedVulnerabilities()	IReadOnlyList<GrypeVulnerabilityMetadata>
get_Vulnerability()	GrypeVulnerability
set_Artifact()
set_RelatedVulnerabilities()
set_Vulnerability()

Extension Methods

Name	Value	Summary
Dump<GrypeMatch>()	string	Get a basic string representation of specified object. From LoggingExtensions Requires the Cake.Incubator addin
IsIn<GrypeMatch>(GrypeMatch[])	bool	Checks if the source is contained in a list From EnumerableExtensions Requires the Cake.Incubator addin
NotNull<GrypeMatch>(string)	void	From IssuesArgumentChecks Requires the Cake.Issues addin
NotNull<GrypeMatch>(string)	void	Throws an exception if the specified parameter's value is null. From Extensions Requires the Cake.Ftp addin
ThrowIfNull<GrypeMatch>(string, string)	T	Throws a `System.ArgumentNullException` with a specific message if the value is null, otherwise returns the value From AssertExtensions Requires the Cake.Incubator addin
ThrowIfNull<GrypeMatch>(string)	T	Throws a `System.ArgumentNullException` if the value is null, otherwise returns the value From AssertExtensions Requires the Cake.Incubator addin
ToDictionary()	IDictionary<string, object>	From ObjectHelpers Requires the Cake.DeployParams addin
ToStringWithNullMarkup()	string	From StringExtensions Requires the Cake.Issues addin