matchers: include Javascript (Npm) matching

Signed-off-by: Alfredo Deza <adeza@anchore.com>

vulnscan/match/matcher_type.go

@@ -7,6 +7,7 @@ const (
 	RpmDBMatcher
 	JavaMatcher
 	PythonMatcher
+	JavascriptMatcher
 )
 
 var matcherTypeStr = []string{
@@ -16,6 +17,7 @@ var matcherTypeStr = []string{
 	"rpmdb-matcher",
 	"java-matcher",
 	"python-matcher",
+	"javascript-matcher",
 }
 
 var AllMatcherTypes = []MatcherType{
@@ -24,6 +26,7 @@ var AllMatcherTypes = []MatcherType{
 	RpmDBMatcher,
 	JavaMatcher,
 	PythonMatcher,
+	JavascriptMatcher,
 }
 
 type MatcherType int

vulnscan/matcher/controller.go

@@ -8,6 +8,7 @@ import (
 	"github.com/anchore/vulnscan/vulnscan/matcher/bundler"
 	"github.com/anchore/vulnscan/vulnscan/matcher/dpkg"
 	"github.com/anchore/vulnscan/vulnscan/matcher/java"
+	"github.com/anchore/vulnscan/vulnscan/matcher/javascript"
 	"github.com/anchore/vulnscan/vulnscan/matcher/python"
 	"github.com/anchore/vulnscan/vulnscan/matcher/rpmdb"
 	"github.com/anchore/vulnscan/vulnscan/result"
@@ -33,6 +34,7 @@ func newController() controller {
 	ctrlr.add(&python.Matcher{})
 	ctrlr.add(&rpmdb.Matcher{})
 	ctrlr.add(&java.Matcher{})
+	ctrlr.add(&javascript.Matcher{})
 	return ctrlr
 }
 

vulnscan/matcher/javascript/matcher.go

@@ -0,0 +1,36 @@
+package javascript
+
+import (
+	"github.com/anchore/imgbom/imgbom/distro"
+	"github.com/anchore/imgbom/imgbom/pkg"
+	"github.com/anchore/vulnscan/vulnscan/match"
+	"github.com/anchore/vulnscan/vulnscan/matcher/common"
+	"github.com/anchore/vulnscan/vulnscan/vulnerability"
+)
+
+type Matcher struct {
+}
+
+func (m *Matcher) PackageTypes() []pkg.Type {
+	return []pkg.Type{pkg.NpmPkg}
+}
+
+func (m *Matcher) Type() match.MatcherType {
+	return match.JavascriptMatcher
+}
+
+func (m *Matcher) Match(store vulnerability.Provider, _ distro.Distro, p *pkg.Package) ([]match.Match, error) {
+	var matches = make([]match.Match, 0)
+	langMatches, err := common.FindMatchesByPackageLanguage(store, p.Language, p, m.Type())
+	if err != nil {
+		return nil, err
+	}
+	matches = append(matches, langMatches...)
+
+	cpeMatches, err := common.FindMatchesByPackageCPE(store, p, m.Type())
+	if err != nil {
+		return nil, err
+	}
+	matches = append(matches, cpeMatches...)
+	return matches, nil
+}