core/

Package config handles Zero configuration loading and management

Package credentials manages API keys and tokens for Zero

Package cyclonedx provides CycloneDX BOM generation and export capabilities.

Package errors provides sentinel errors and error utilities for Zero.

Package feedback provides types and storage for analyst feedback on findings

Package feeds provides external feed synchronization for security data

Package findings provides standardized finding types for all scanners

Package github provides GitHub API interactions

Package languages provides programming language detection utilities using go-enry (a Go port of GitHub Linguist)

Package liveapi provides clients for live API queries (e.g., OSV)

Package logging provides structured logging for Zero using slog.

Package rag provides utilities for loading RAG (Retrieval-Augmented Generation) knowledge files that configure scanner behavior dynamically.

Package rules provides Semgrep rule generation and management

Package sarif provides SARIF (Static Analysis Results Interchange Format) export SARIF is a standard format for the output of static analysis tools.

Package scoring provides standardized score calculation utilities

Package status implements the status command for showing hydrated projects

Package suppression provides filtering of findings based on user feedback and context

Package terminal provides colored output and progress display