Method Sca

opensca/sca/php/sca.go:25–74

(ctx context.Context, parent *model.File, files []*model.File, call model.ResCallback)

}

func (sca Sca) Sca(ctx context.Context, parent *model.File, files []*model.File, call model.ResCallback) {

	jsonMap := map[string]*ComposerJson{}
	lockMap := map[string]*ComposerLock{}

	path2dir := func(relpath string) string { return path.Dir(strings.ReplaceAll(relpath, `\`, `/`)) }

	for _, f := range files {
		if filter.PhpComposer(f.Relpath()) {
			f.OpenReader(func(reader io.Reader) {
				var js ComposerJson
				json.NewDecoder(reader).Decode(&js)
				js.File = f
				jsonMap[path2dir(f.Relpath())] = &js
			})
		} else if filter.PhpComposerLock(f.Relpath()) {
			f.OpenReader(func(reader io.Reader) {
				var lock ComposerLock
				json.NewDecoder(reader).Decode(&lock)
				lockMap[path2dir(f.Relpath())] = &lock
			})
		}
	}

loop:
	for dir, json := range jsonMap {

		// 通过lock文件补全
		if lock, ok := lockMap[dir]; ok {
			call(json.File, ParseComposerJsonWithLock(json, lock))
			continue
		}

		// vendor中的composer.json没有对应lock则不做处理
		for dir := range strings.SplitSeq(dir, "/") {
			if strings.EqualFold(dir, "vendor") {
				continue loop
			}
		}

		select {
		case <-ctx.Done():
			return
		default:
		}

		// 从数据源下载
		call(json.File, ParseComposerJsonWithOrigin(json))
	}
}

var defaultComposerRepo = []common.RepoConfig{
	{Url: "http://repo.packagist.org/p2"},