feat(envscan): add flag --scan-process

Author: iseki0

cmd/murphy/internal/scan/cmd.go

@@ -46,6 +46,7 @@ var gradleProjectFilter gradle.ProjectFilter
 var branch string
 var mavenModuleName []string
 var binaryOnly bool
+var scanProcess bool
 
 func Cmd() *cobra.Command {
 	var c cobra.Command
@@ -113,6 +114,7 @@ func EnvCmd() *cobra.Command {
 	c.Flags().StringVar(&webhookAddr, "webhook-addr", "", "specify the webhook address")
 	c.Flags().Var(&webhookMode, "webhook-mode", "specify the webhook mode, currently supports: simple, full(default)")
 	c.Flags().StringVar(&extraData, "extra-data", "", "specify the extra data")
+	c.Flags().BoolVar(&scanProcess, "scan-process", false, "Enable scanning of process to detect SBOM. Disabled by default")
 	return &c
 }
 

cmd/murphy/internal/scan/scan.go

@@ -28,7 +28,7 @@ import (
 func envScanSbomOnly(ctx context.Context) (task *model.ScanTask, e error) {
 	task = &model.ScanTask{}
 	ctx = model.WithScanTask(ctx, task)
-	e = envinspection.InspectEnv(ctx)
+	e = envinspection.InspectEnv(ctx, scanProcess)
 	return
 }
 
@@ -78,7 +78,7 @@ func envScan(ctx context.Context) (task *model.ScanTask, e error) {
 		SubtaskName: createSubtask.ProjectName,
 	}
 	ctx = model.WithScanTask(ctx, task)
-	e = envinspection.InspectEnv(ctx)
+	e = envinspection.InspectEnv(ctx, scanProcess)
 	if e != nil {
 		cv.DisplayScanFailed(ctx, e)
 		return

envinspection/inspection.go

@@ -14,7 +14,7 @@ import (
 	"strings"
 )
 
-func InspectEnv(ctx context.Context) error {
+func InspectEnv(ctx context.Context, scanProcess bool) error {
 	task := model.UseScanTask(ctx)
 	if task == nil {
 		panic("task == nil")
@@ -38,8 +38,10 @@ func InspectEnv(ctx context.Context) error {
 	// 获取软件包列表
 	inspectInstalledSoftware(ctx, &module)
 
-	// 获取进程文件列表
-	inspectProcessFiles(ctx)
+	if scanProcess {
+		// 获取进程文件列表
+		inspectProcessFiles(ctx)
+	}
 
 	return nil
 }