STRLCPY/grype

Retrieve target from directory sbom types in addition to image types (#440)

* Retrieve target from directory sbom types in addition to image types

Signed-off-by: Samuel Dacanay <[email protected]>

* add dir sbom ingest test

Signed-off-by: Alex Goodman <[email protected]>

Co-authored-by: Alex Goodman <[email protected]>

Sam Dacanay committed with GitHub 3 years ago

2dd41311

1 parent 6fe9fc2c

Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)

Total 3 files Show one by one

■ ■ ■ ■ ■ ■

grype/pkg/syft_json_provider.go

		skipped 36 lines
37	37		s.Type = unpacker.Type
38	38
39	39		switch s.Type {
	40	+	case "directory":
	41	+	s.Target = string(unpacker.Target[:])
40	42		case "image":
41	43		var payload source.ImageMetadata
42	44		if err := json.Unmarshal(unpacker.Target, &payload); err != nil {
		skipped 264 lines

■ ■ ■ ■ ■ ■

test/cli/sbom_input_test.go

		skipped 5 lines
6	6		"testing"
7	7		)
8	8
9		-	const sbomLocation = "./test-fixtures/sbom-ubuntu-20.04--pruned.json"
10		-
11	9		func TestSBOMInput_AsArgument(t *testing.T) {
12	10		workingDirectory, err := os.Getwd()
13	11		if err != nil {
		skipped 5 lines
19	17		path string
20	18		}{
21	19		{
22		-	"absolute path",
23		-	path.Join(workingDirectory, sbomLocation),
	20	+	"absolute path - image scan",
	21	+	path.Join(workingDirectory, "./test-fixtures/sbom-ubuntu-20.04--pruned.json"),
24	22		},
25	23		{
26		-	"relative path",
27		-	sbomLocation,
	24	+	"relative path - image scan",
	25	+	"./test-fixtures/sbom-ubuntu-20.04--pruned.json",
	26	+	},
	27	+	{
	28	+	"directory scan",
	29	+	"./test-fixtures/sbom-grype-source.json",
28	30		},
29	31		}
30	32
		skipped 23 lines
54	56		func TestSBOMInput_FromStdin(t *testing.T) {
55	57		cmd := getGrypeCommand(t)
56	58
57		-	sbom, err := os.Open(sbomLocation)
	59	+	sbom, err := os.Open("./test-fixtures/sbom-ubuntu-20.04--pruned.json")
58	60		if err != nil {
59	61		t.Fatal(err)
60	62		}
		skipped 6 lines

■ ■ ■ ■ ■ ■

test/cli/test-fixtures/sbom-grype-source.json

1	+	{
2	+	"artifacts": [
3	+	{
4	+	"id": "bef1ce7f-cce6-4049-9da4-53882a612bb3",
5	+	"name": "Pygments",
6	+	"version": "2.6.1",
7	+	"type": "python",
8	+	"foundBy": "python-package-cataloger",
9	+	"locations": [
10	+	{
11	+	"path": "test/integration/test-fixtures/image-debian-match-coverage/python/dist-info/METADATA"
12	+	},
13	+	{
14	+	"path": "test/integration/test-fixtures/image-debian-match-coverage/python/dist-info/top_level.txt"
15	+	}
16	+	],
17	+	"licenses": [
18	+	"BSD License"
19	+	],
20	+	"language": "python",
21	+	"cpes": [
22	+	"cpe:2.3:a:python-Pygments:python-Pygments:2.6.1:::::::*",
23	+	"cpe:2.3:a:python_Pygments:python-Pygments:2.6.1:::::::*",
24	+	"cpe:2.3:a:python-Pygments:python_Pygments:2.6.1:::::::*",
25	+	"cpe:2.3:a:python_Pygments:python_Pygments:2.6.1:::::::*",
26	+	"cpe:2.3:a:georg_brandl:python_Pygments:2.6.1:::::::*",
27	+	"cpe:2.3:a:georg_brandl:python-Pygments:2.6.1:::::::*",
28	+	"cpe:2.3:a:Pygments:python_Pygments:2.6.1:::::::*",
29	+	"cpe:2.3:a:Pygments:python-Pygments:2.6.1:::::::*",
30	+	"cpe:2.3:a:python_Pygments:Pygments:2.6.1:::::::*",
31	+	"cpe:2.3:a:python-Pygments:Pygments:2.6.1:::::::*",
32	+	"cpe:2.3:a:python:python_Pygments:2.6.1:::::::*",
33	+	"cpe:2.3:a:python:python-Pygments:2.6.1:::::::*",
34	+	"cpe:2.3:a:georg_brandl:Pygments:2.6.1:::::::*",
35	+	"cpe:2.3:a:georg:python-Pygments:2.6.1:::::::*",
36	+	"cpe:2.3:a:georg:python_Pygments:2.6.1:::::::*",
37	+	"cpe:2.3:a:Pygments:Pygments:2.6.1:::::::*",
38	+	"cpe:2.3:a:python:Pygments:2.6.1:::::::*",
39	+	"cpe:2.3:a:georg:Pygments:2.6.1:::::::*"
40	+	],
41	+	"purl": "pkg:pypi/[email protected]",
42	+	"metadataType": "PythonPackageMetadata",
43	+	"metadata": {
44	+	"name": "Pygments",
45	+	"version": "2.6.1",
46	+	"license": "BSD License",
47	+	"author": "Georg Brandl",
48	+	"authorEmail": "[email protected]",
49	+	"platform": "any",
50	+	"sitePackagesRootPath": "test/integration/test-fixtures/image-debian-match-coverage/python",
51	+	"topLevelPackages": [
52	+	"pygments"
53	+	]
54	+	}
55	+	},
56	+	{
57	+	"id": "651f06ac-d509-4b33-92f1-88bf006beaf7",
58	+	"name": "apt",
59	+	"version": "1.8.2",
60	+	"type": "deb",
61	+	"foundBy": "dpkgdb-cataloger",
62	+	"locations": [
63	+	{
64	+	"path": "test/integration/test-fixtures/image-debian-match-coverage/var/lib/dpkg/status"
65	+	}
66	+	],
67	+	"licenses": [],
68	+	"language": "",
69	+	"cpes": [
70	+	"cpe:2.3:a:apt:apt:1.8.2:::::::*"
71	+	],
72	+	"purl": "",
73	+	"metadataType": "DpkgMetadata",
74	+	"metadata": {
75	+	"package": "apt",
76	+	"source": "apt-dev",
77	+	"version": "1.8.2",
78	+	"sourceVersion": "",
79	+	"architecture": "amd64",
80	+	"maintainer": "APT Development Team <[email protected]>",
81	+	"installedSize": 4064,
82	+	"files": [
83	+	{
84	+	"path": "/etc/apt/apt.conf.d/01autoremove",
85	+	"digest": {
86	+	"algorithm": "md5",
87	+	"value": "76120d358bc9037bb6358e737b3050b5"
88	+	},
89	+	"isConfigFile": true
90	+	},
91	+	{
92	+	"path": "/etc/cron.daily/apt-compat",
93	+	"digest": {
94	+	"algorithm": "md5",
95	+	"value": "49e9b2cfa17849700d4db735d04244f3"
96	+	},
97	+	"isConfigFile": true
98	+	},
99	+	{
100	+	"path": "/etc/kernel/postinst.d/apt-auto-removal",
101	+	"digest": {
102	+	"algorithm": "md5",
103	+	"value": "4ad976a68f045517cf4696cec7b8aa3a"
104	+	},
105	+	"isConfigFile": true
106	+	},
107	+	{
108	+	"path": "/etc/logrotate.d/apt",
109	+	"digest": {
110	+	"algorithm": "md5",
111	+	"value": "179f2ed4f85cbaca12fa3d69c2a4a1c3"
112	+	},
113	+	"isConfigFile": true
114	+	}
115	+	]
116	+	}
117	+	},
118	+	{
119	+	"id": "e1d0474e-2a82-420c-ad82-a9de40d866c7",
120	+	"name": "dive",
121	+	"version": "0.9.2-1",
122	+	"type": "rpm",
123	+	"foundBy": "rpmdb-cataloger",
124	+	"locations": [
125	+	{
126	+	"path": "test/integration/test-fixtures/image-sles-match-coverage/var/lib/rpm/Packages"
127	+	}
128	+	],
129	+	"licenses": [],
130	+	"language": "",
131	+	"cpes": [
132	+	"cpe:2.3:a:dive:dive:0.9.2-1:::::::*"
133	+	],
134	+	"purl": "",
135	+	"metadataType": "RpmdbMetadata",
136	+	"metadata": {
137	+	"name": "dive",
138	+	"version": "0.9.2",
139	+	"epoch": null,
140	+	"architecture": "x86_64",
141	+	"release": "1",
142	+	"sourceRpm": "dive-0.9.2-1.src.rpm",
143	+	"size": 12406784,
144	+	"license": "MIT",
145	+	"vendor": "",
146	+	"files": []
147	+	}
148	+	},
149	+	{
150	+	"id": "4f86c82e-2e7a-4f61-97cc-2058938257be",
151	+	"name": "example-java-app-maven",
152	+	"version": "0.1.0",
153	+	"type": "java-archive",
154	+	"foundBy": "java-cataloger",
155	+	"locations": [
156	+	{
157	+	"path": "test/integration/test-fixtures/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar"
158	+	}
159	+	],
160	+	"licenses": [],
161	+	"language": "java",
162	+	"cpes": [
163	+	"cpe:2.3:a:example_java_app_maven:example-java-app-maven:0.1.0:::::::*",
164	+	"cpe:2.3:a:example_java_app_maven:example_java_app_maven:0.1.0:::::::*",
165	+	"cpe:2.3:a:example-java-app-maven:example_java_app_maven:0.1.0:::::::*",
166	+	"cpe:2.3:a:example-java-app-maven:example-java-app-maven:0.1.0:::::::*",
167	+	"cpe:2.3:a:example_java_app:example-java-app-maven:0.1.0:::::::*",
168	+	"cpe:2.3:a:example_java_app:example_java_app_maven:0.1.0:::::::*",
169	+	"cpe:2.3:a:example-java-app:example-java-app-maven:0.1.0:::::::*",
170	+	"cpe:2.3:a:example-java-app:example_java_app_maven:0.1.0:::::::*",
171	+	"cpe:2.3:a:example_java:example-java-app-maven:0.1.0:::::::*",
172	+	"cpe:2.3:a:example-java:example-java-app-maven:0.1.0:::::::*",
173	+	"cpe:2.3:a:example-java:example_java_app_maven:0.1.0:::::::*",
174	+	"cpe:2.3:a:example_java:example_java_app_maven:0.1.0:::::::*",
175	+	"cpe:2.3:a:example:example-java-app-maven:0.1.0:::::::*",
176	+	"cpe:2.3:a:example:example_java_app_maven:0.1.0:::::::*",
177	+	"cpe:2.3:a:anchore:example-java-app-maven:0.1.0:::::::*",
178	+	"cpe:2.3:a:anchore:example_java_app_maven:0.1.0:::::::*"
179	+	],
180	+	"purl": "pkg:maven/org.anchore/[email protected]",
181	+	"metadataType": "JavaMetadata",
182	+	"metadata": {
183	+	"virtualPath": "test/integration/test-fixtures/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar",
184	+	"manifest": {
185	+	"main": {
186	+	"Archiver-Version": "Plexus Archiver",
187	+	"Build-Jdk": "14.0.1",
188	+	"Built-By": "?",
189	+	"Created-By": "Apache Maven 3.6.3",
190	+	"Main-Class": "hello.HelloWorld",
191	+	"Manifest-Version": "1.0"
192	+	}
193	+	},
194	+	"pomProperties": {
195	+	"path": "META-INF/maven/org.anchore/example-java-app-maven/pom.properties",
196	+	"name": "",
197	+	"groupId": "org.anchore",
198	+	"artifactId": "example-java-app-maven",
199	+	"version": "0.1.0",
200	+	"extraFields": {}
201	+	}
202	+	}
203	+	},
204	+	{
205	+	"id": "26f1dd60-f006-480f-8ad2-3c92a8d19f42",
206	+	"name": "github.com/acarl005/stripansi",
207	+	"version": "v0.0.0-20180116102854-5a71ef0e047d",
208	+	"type": "go-module",
209	+	"foundBy": "go-cataloger",
210	+	"locations": [
211	+	{
212	+	"path": "go.mod"
213	+	}
214	+	],
215	+	"licenses": [],
216	+	"language": "go",
217	+	"cpes": [
218	+	"cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:::::::*"
219	+	],
220	+	"purl": "pkg:golang/github.com/acarl005/[email protected]",
221	+	"metadataType": "",
222	+	"metadata": null
223	+	},
224	+	{
225	+	"id": "b296ad62-b21d-487e-9914-6a5f5358f53a",
226	+	"name": "github.com/adrg/xdg",
227	+	"version": "v0.2.1",
228	+	"type": "go-module",
229	+	"foundBy": "go-cataloger",
230	+	"locations": [
231	+	{
232	+	"path": "go.mod"
233	+	}
234	+	],
235	+	"licenses": [],
236	+	"language": "go",
237	+	"cpes": [
238	+	"cpe:2.3:a:adrg:xdg:v0.2.1:::::::*"
239	+	],
240	+	"purl": "pkg:golang/github.com/adrg/[email protected]",
241	+	"metadataType": "",
242	+	"metadata": null
243	+	},
244	+	{
245	+	"id": "e1a7a167-c7c1-41b8-938e-3b17de0907fd",
246	+	"name": "github.com/anchore/go-testutils",
247	+	"version": "v0.0.0-20200925183923-d5f45b0d3c04",
248	+	"type": "go-module",
249	+	"foundBy": "go-cataloger",
250	+	"locations": [
251	+	{
252	+	"path": "go.mod"
253	+	}
254	+	],
255	+	"licenses": [],
256	+	"language": "go",
257	+	"cpes": [
258	+	"cpe:2.3:a:anchore:go_testutils:v0.0.0-20200925183923-d5f45b0d3c04:::::::*",
259	+	"cpe:2.3:a:anchore:go-testutils:v0.0.0-20200925183923-d5f45b0d3c04:::::::*"
260	+	],
261	+	"purl": "pkg:golang/github.com/anchore/[email protected]",
262	+	"metadataType": "",
263	+	"metadata": null
264	+	},
265	+	{
266	+	"id": "9ae8c8cb-0513-46c4-9a10-91720a0cf3c0",
267	+	"name": "github.com/anchore/go-version",
268	+	"version": "v1.2.2-0.20210903204242-51efa5b487c4",
269	+	"type": "go-module",
270	+	"foundBy": "go-cataloger",
271	+	"locations": [
272	+	{
273	+	"path": "go.mod"
274	+	}
275	+	],
276	+	"licenses": [],
277	+	"language": "go",
278	+	"cpes": [
279	+	"cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:::::::*",
280	+	"cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:::::::*"
281	+	],
282	+	"purl": "pkg:golang/github.com/anchore/[email protected]",
283	+	"metadataType": "",
284	+	"metadata": null
285	+	},
286	+	{
287	+	"id": "2268071f-cb45-4f99-82d3-87ac2ad0f1cc",
288	+	"name": "github.com/anchore/grype-db",
289	+	"version": "v0.0.0-20210928194208-f146397d6cd0",
290	+	"type": "go-module",
291	+	"foundBy": "go-cataloger",
292	+	"locations": [
293	+	{
294	+	"path": "go.mod"
295	+	}
296	+	],
297	+	"licenses": [],
298	+	"language": "go",
299	+	"cpes": [
300	+	"cpe:2.3:a:anchore:grype-db:v0.0.0-20210928194208-f146397d6cd0:::::::*",
301	+	"cpe:2.3:a:anchore:grype_db:v0.0.0-20210928194208-f146397d6cd0:::::::*"
302	+	],
303	+	"purl": "pkg:golang/github.com/anchore/[email protected]",
304	+	"metadataType": "",
305	+	"metadata": null
306	+	},
307	+	{
308	+	"id": "65c50f92-183e-4ff5-ba28-15c7eb5838dc",
309	+	"name": "github.com/anchore/stereoscope",
310	+	"version": "v0.0.0-20210817160504-0f4abc2a5a5a",
311	+	"type": "go-module",
312	+	"foundBy": "go-cataloger",
313	+	"locations": [
314	+	{
315	+	"path": "go.mod"
316	+	}
317	+	],
318	+	"licenses": [],
319	+	"language": "go",
320	+	"cpes": [
321	+	"cpe:2.3:a:anchore:stereoscope:v0.0.0-20210817160504-0f4abc2a5a5a:::::::*"
322	+	],
323	+	"purl": "pkg:golang/github.com/anchore/[email protected]",
324	+	"metadataType": "",
325	+	"metadata": null
326	+	},
327	+	{
328	+	"id": "42c879dc-c9d8-4c08-afde-2623f0ce6749",
329	+	"name": "github.com/anchore/syft",
330	+	"version": "v0.24.1",
331	+	"type": "go-module",
332	+	"foundBy": "go-cataloger",
333	+	"locations": [
334	+	{
335	+	"path": "go.mod"
336	+	}
337	+	],
338	+	"licenses": [],
339	+	"language": "go",
340	+	"cpes": [
341	+	"cpe:2.3:a:anchore:syft:v0.24.1:::::::*"
342	+	],
343	+	"purl": "pkg:golang/github.com/anchore/[email protected]",
344	+	"metadataType": "",
345	+	"metadata": null
346	+	},
347	+	{
348	+	"id": "70be86c2-9e8b-43b3-90d7-2f0e61100b54",
349	+	"name": "github.com/bmatcuk/doublestar/v2",
350	+	"version": "v2.0.4",
351	+	"type": "go-module",
352	+	"foundBy": "go-cataloger",
353	+	"locations": [
354	+	{
355	+	"path": "go.mod"
356	+	}
357	+	],
358	+	"licenses": [],
359	+	"language": "go",
360	+	"cpes": [
361	+	"cpe:2.3:a:bmatcuk:doublestar:v2.0.4:::::::*"
362	+	],
363	+	"purl": "pkg:golang/github.com/bmatcuk/doublestar/[email protected]",
364	+	"metadataType": "",
365	+	"metadata": null
366	+	},
367	+	{
368	+	"id": "814fe4dd-afad-4db8-bb2a-09d9d8fccbb1",
369	+	"name": "github.com/docker/docker",
370	+	"version": "v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible",
371	+	"type": "go-module",
372	+	"foundBy": "go-cataloger",
373	+	"locations": [
374	+	{
375	+	"path": "go.mod"
376	+	}
377	+	],
378	+	"licenses": [],
379	+	"language": "go",
380	+	"cpes": [
381	+	"cpe:2.3:a:docker:docker:v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible:::::::*"
382	+	],
383	+	"purl": "pkg:golang/github.com/docker/[email protected]+incompatible",
384	+	"metadataType": "",
385	+	"metadata": null
386	+	},
387	+	{
388	+	"id": "8fda3ee5-90c5-4fbc-9b74-ac53f75e95a7",
389	+	"name": "github.com/dustin/go-humanize",
390	+	"version": "v1.0.0",
391	+	"type": "go-module",
392	+	"foundBy": "go-cataloger",
393	+	"locations": [
394	+	{
395	+	"path": "go.mod"
396	+	}
397	+	],
398	+	"licenses": [],
399	+	"language": "go",
400	+	"cpes": [
401	+	"cpe:2.3:a:dustin:go-humanize:v1.0.0:::::::*",
402	+	"cpe:2.3:a:dustin:go_humanize:v1.0.0:::::::*"
403	+	],
404	+	"purl": "pkg:golang/github.com/dustin/[email protected]",
405	+	"metadataType": "",
406	+	"metadata": null
407	+	},
408	+	{
409	+	"id": "8b49fe37-0618-4dad-8379-692443ddc5e8",
410	+	"name": "github.com/facebookincubator/nvdtools",
411	+	"version": "v0.1.4",
412	+	"type": "go-module",
413	+	"foundBy": "go-cataloger",
414	+	"locations": [
415	+	{
416	+	"path": "go.mod"
417	+	}
418	+	],
419	+	"licenses": [],
420	+	"language": "go",
421	+	"cpes": [
422	+	"cpe:2.3:a:facebookincubator:nvdtools:v0.1.4:::::::*"
423	+	],
424	+	"purl": "pkg:golang/github.com/facebookincubator/[email protected]",
425	+	"metadataType": "",
426	+	"metadata": null
427	+	},
428	+	{
429	+	"id": "04e5343e-1023-48a1-9423-79972c4e4214",
430	+	"name": "github.com/go-test/deep",
431	+	"version": "v1.0.7",
432	+	"type": "go-module",
433	+	"foundBy": "go-cataloger",
434	+	"locations": [
435	+	{
436	+	"path": "go.mod"
437	+	}
438	+	],
439	+	"licenses": [],
440	+	"language": "go",
441	+	"cpes": [
442	+	"cpe:2.3:a:go-test:deep:v1.0.7:::::::*",
443	+	"cpe:2.3:a:go_test:deep:v1.0.7:::::::*",
444	+	"cpe:2.3:a:go:deep:v1.0.7:::::::*"
445	+	],
446	+	"purl": "pkg:golang/github.com/go-test/[email protected]",
447	+	"metadataType": "",
448	+	"metadata": null
449	+	},
450	+	{
451	+	"id": "1ad992ea-1296-47e8-a468-4eb0c362a7e3",
452	+	"name": "github.com/google/go-cmp",
453	+	"version": "v0.4.1",
454	+	"type": "go-module",
455	+	"foundBy": "go-cataloger",
456	+	"locations": [
457	+	{
458	+	"path": "go.mod"
459	+	}
460	+	],
461	+	"licenses": [],
462	+	"language": "go",
463	+	"cpes": [
464	+	"cpe:2.3:a:google:go-cmp:v0.4.1:::::::*",
465	+	"cpe:2.3:a:google:go_cmp:v0.4.1:::::::*"
466	+	],
467	+	"purl": "pkg:golang/github.com/google/[email protected]",
468	+	"metadataType": "",
469	+	"metadata": null
470	+	},
471	+	{
472	+	"id": "6d6cff34-9f29-450f-8cb8-ffe70775c1dd",
473	+	"name": "github.com/google/uuid",
474	+	"version": "v1.1.1",
475	+	"type": "go-module",
476	+	"foundBy": "go-cataloger",
477	+	"locations": [
478	+	{
479	+	"path": "go.mod"
480	+	}
481	+	],
482	+	"licenses": [],
483	+	"language": "go",
484	+	"cpes": [
485	+	"cpe:2.3:a:google:uuid:v1.1.1:::::::*"
486	+	],
487	+	"purl": "pkg:golang/github.com/google/[email protected]",
488	+	"metadataType": "",
489	+	"metadata": null
490	+	},
491	+	{
492	+	"id": "b4202bbd-9fb5-4d6f-83bd-83a4aa6d1608",
493	+	"name": "github.com/gookit/color",
494	+	"version": "v1.4.2",
495	+	"type": "go-module",
496	+	"foundBy": "go-cataloger",
497	+	"locations": [
498	+	{
499	+	"path": "go.mod"
500	+	}
501	+	],
502	+	"licenses": [],
503	+	"language": "go",
504	+	"cpes": [
505	+	"cpe:2.3:a:gookit:color:v1.4.2:::::::*"
506	+	],
507	+	"purl": "pkg:golang/github.com/gookit/[email protected]",
508	+	"metadataType": "",
509	+	"metadata": null
510	+	},
511	+	{
512	+	"id": "4ef230a8-22ef-4a45-92bb-fda1a17785bd",
513	+	"name": "github.com/hashicorp/go-getter",
514	+	"version": "v1.4.1",
515	+	"type": "go-module",
516	+	"foundBy": "go-cataloger",
517	+	"locations": [
518	+	{
519	+	"path": "go.mod"
520	+	}
521	+	],
522	+	"licenses": [],
523	+	"language": "go",
524	+	"cpes": [
525	+	"cpe:2.3:a:hashicorp:go_getter:v1.4.1:::::::*",
526	+	"cpe:2.3:a:hashicorp:go-getter:v1.4.1:::::::*"
527	+	],
528	+	"purl": "pkg:golang/github.com/hashicorp/[email protected]",
529	+	"metadataType": "",
530	+	"metadata": null
531	+	},
532	+	{
533	+	"id": "53de4a0f-f65c-4df4-90e7-9274471ae45e",
534	+	"name": "github.com/hashicorp/go-multierror",
535	+	"version": "v1.1.0",
536	+	"type": "go-module",
537	+	"foundBy": "go-cataloger",
538	+	"locations": [
539	+	{
540	+	"path": "go.mod"
541	+	}
542	+	],
543	+	"licenses": [],
544	+	"language": "go",
545	+	"cpes": [
546	+	"cpe:2.3:a:hashicorp:go-multierror:v1.1.0:::::::*",
547	+	"cpe:2.3:a:hashicorp:go_multierror:v1.1.0:::::::*"
548	+	],
549	+	"purl": "pkg:golang/github.com/hashicorp/[email protected]",
550	+	"metadataType": "",
551	+	"metadata": null
552	+	},
553	+	{
554	+	"id": "3eacac5b-f362-4d47-a509-3dfaa0f65bde",
555	+	"name": "github.com/jinzhu/copier",
556	+	"version": "v0.0.0-20190924061706-b57f9002281a",
557	+	"type": "go-module",
558	+	"foundBy": "go-cataloger",
559	+	"locations": [
560	+	{
561	+	"path": "go.mod"
562	+	}
563	+	],
564	+	"licenses": [],
565	+	"language": "go",
566	+	"cpes": [
567	+	"cpe:2.3:a:jinzhu:copier:v0.0.0-20190924061706-b57f9002281a:::::::*"
568	+	],
569	+	"purl": "pkg:golang/github.com/jinzhu/[email protected]",
570	+	"metadataType": "",
571	+	"metadata": null
572	+	},
573	+	{
574	+	"id": "ee1ac005-9c0d-45f4-a9b8-de9c805c8540",
575	+	"name": "github.com/knqyf263/go-deb-version",
576	+	"version": "v0.0.0-20190517075300-09fca494f03d",
577	+	"type": "go-module",
578	+	"foundBy": "go-cataloger",
579	+	"locations": [
580	+	{
581	+	"path": "go.mod"
582	+	}
583	+	],
584	+	"licenses": [],
585	+	"language": "go",
586	+	"cpes": [
587	+	"cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20190517075300-09fca494f03d:::::::*",
588	+	"cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20190517075300-09fca494f03d:::::::*"
589	+	],
590	+	"purl": "pkg:golang/github.com/knqyf263/[email protected]",
591	+	"metadataType": "",
592	+	"metadata": null
593	+	},
594	+	{
595	+	"id": "71970349-8c0d-41d9-b3f9-7dd5b50153ce",
596	+	"name": "github.com/mitchellh/go-homedir",
597	+	"version": "v1.1.0",
598	+	"type": "go-module",
599	+	"foundBy": "go-cataloger",
600	+	"locations": [
601	+	{
602	+	"path": "go.mod"
603	+	}
604	+	],
605	+	"licenses": [],
606	+	"language": "go",
607	+	"cpes": [
608	+	"cpe:2.3:a:mitchellh:go-homedir:v1.1.0:::::::*",
609	+	"cpe:2.3:a:mitchellh:go_homedir:v1.1.0:::::::*"
610	+	],
611	+	"purl": "pkg:golang/github.com/mitchellh/[email protected]",
612	+	"metadataType": "",
613	+	"metadata": null
614	+	},
615	+	{
616	+	"id": "fdf5f063-2178-454b-8e84-1412a65ee968",
617	+	"name": "github.com/olekukonko/tablewriter",
618	+	"version": "v0.0.4",
619	+	"type": "go-module",
620	+	"foundBy": "go-cataloger",
621	+	"locations": [
622	+	{
623	+	"path": "go.mod"
624	+	}
625	+	],
626	+	"licenses": [],
627	+	"language": "go",
628	+	"cpes": [
629	+	"cpe:2.3:a:olekukonko:tablewriter:v0.0.4:::::::*"
630	+	],
631	+	"purl": "pkg:golang/github.com/olekukonko/[email protected]",
632	+	"metadataType": "",
633	+	"metadata": null
634	+	},
635	+	{
636	+	"id": "ed4372e1-d33e-4d18-9b5c-5c4b59e80662",
637	+	"name": "github.com/pkg/profile",
638	+	"version": "v1.6.0",
639	+	"type": "go-module",
640	+	"foundBy": "go-cataloger",
641	+	"locations": [
642	+	{
643	+	"path": "go.mod"
644	+	}
645	+	],
646	+	"licenses": [],
647	+	"language": "go",
648	+	"cpes": [
649	+	"cpe:2.3:a:pkg:profile:v1.6.0:::::::*"
650	+	],
651	+	"purl": "pkg:golang/github.com/pkg/[email protected]",
652	+	"metadataType": "",
653	+	"metadata": null
654	+	},
655	+	{
656	+	"id": "8870327f-8eef-4e2d-af6e-3b57e11d50a7",
657	+	"name": "github.com/scylladb/go-set",
658	+	"version": "v1.0.2",
659	+	"type": "go-module",
660	+	"foundBy": "go-cataloger",
661	+	"locations": [
662	+	{
663	+	"path": "go.mod"
664	+	}
665	+	],
666	+	"licenses": [],
667	+	"language": "go",
668	+	"cpes": [
669	+	"cpe:2.3:a:scylladb:go-set:v1.0.2:::::::*",
670	+	"cpe:2.3:a:scylladb:go_set:v1.0.2:::::::*"
671	+	],
672	+	"purl": "pkg:golang/github.com/scylladb/[email protected]",
673	+	"metadataType": "",
674	+	"metadata": null
675	+	},
676	+	{
677	+	"id": "b1a92a31-3aaf-45ec-9876-37bd1de81f8d",
678	+	"name": "github.com/sergi/go-diff",
679	+	"version": "v1.1.0",
680	+	"type": "go-module",
681	+	"foundBy": "go-cataloger",
682	+	"locations": [
683	+	{
684	+	"path": "go.mod"
685	+	}
686	+	],
687	+	"licenses": [],
688	+	"language": "go",
689	+	"cpes": [
690	+	"cpe:2.3:a:sergi:go_diff:v1.1.0:::::::*",
691	+	"cpe:2.3:a:sergi:go-diff:v1.1.0:::::::*"
692	+	],
693	+	"purl": "pkg:golang/github.com/sergi/[email protected]",
694	+	"metadataType": "",
695	+	"metadata": null
696	+	},
697	+	{
698	+	"id": "432db78d-4f4e-4df3-a1d9-22a19a5cecd3",
699	+	"name": "github.com/sirupsen/logrus",
700	+	"version": "v1.6.0",
701	+	"type": "go-module",
702	+	"foundBy": "go-cataloger",
703	+	"locations": [
704	+	{
705	+	"path": "go.mod"
706	+	}
707	+	],
708	+	"licenses": [],
709	+	"language": "go",
710	+	"cpes": [
711	+	"cpe:2.3:a:sirupsen:logrus:v1.6.0:::::::*"
712	+	],
713	+	"purl": "pkg:golang/github.com/sirupsen/[email protected]",
714	+	"metadataType": "",
715	+	"metadata": null
716	+	},
717	+	{
718	+	"id": "6cbdf0e8-95d6-4be6-b6db-ae1aed8495b3",
719	+	"name": "github.com/spf13/afero",
720	+	"version": "v1.3.2",
721	+	"type": "go-module",
722	+	"foundBy": "go-cataloger",
723	+	"locations": [
724	+	{
725	+	"path": "go.mod"
726	+	}
727	+	],
728	+	"licenses": [],
729	+	"language": "go",
730	+	"cpes": [
731	+	"cpe:2.3:a:spf13:afero:v1.3.2:::::::*"
732	+	],
733	+	"purl": "pkg:golang/github.com/spf13/[email protected]",
734	+	"metadataType": "",
735	+	"metadata": null
736	+	},
737	+	{
738	+	"id": "999d42fa-0df6-4fb3-b12a-4943ce613034",
739	+	"name": "github.com/spf13/cobra",
740	+	"version": "v1.0.1-0.20200909172742-8a63648dd905",
741	+	"type": "go-module",
742	+	"foundBy": "go-cataloger",
743	+	"locations": [
744	+	{
745	+	"path": "go.mod"
746	+	}
747	+	],
748	+	"licenses": [],
749	+	"language": "go",
750	+	"cpes": [
751	+	"cpe:2.3:a:spf13:cobra:v1.0.1-0.20200909172742-8a63648dd905:::::::*"
752	+	],
753	+	"purl": "pkg:golang/github.com/spf13/[email protected]",
754	+	"metadataType": "",
755	+	"metadata": null
756	+	},
757	+	{
758	+	"id": "dccd69f3-390f-4480-a645-262e0d01452f",
759	+	"name": "github.com/spf13/pflag",
760	+	"version": "v1.0.5",
761	+	"type": "go-module",
762	+	"foundBy": "go-cataloger",
763	+	"locations": [
764	+	{
765	+	"path": "go.mod"
766	+	}
767	+	],
768	+	"licenses": [],
769	+	"language": "go",
770	+	"cpes": [
771	+	"cpe:2.3:a:spf13:pflag:v1.0.5:::::::*"
772	+	],
773	+	"purl": "pkg:golang/github.com/spf13/[email protected]",
774	+	"metadataType": "",
775	+	"metadata": null
776	+	},
777	+	{
778	+	"id": "ca7a9196-0bc3-4044-a09f-03b90208d4ca",
779	+	"name": "github.com/spf13/viper",
780	+	"version": "v1.7.0",
781	+	"type": "go-module",
782	+	"foundBy": "go-cataloger",
783	+	"locations": [
784	+	{
785	+	"path": "go.mod"
786	+	}
787	+	],
788	+	"licenses": [],
789	+	"language": "go",
790	+	"cpes": [
791	+	"cpe:2.3:a:spf13:viper:v1.7.0:::::::*"
792	+	],
793	+	"purl": "pkg:golang/github.com/spf13/[email protected]",
794	+	"metadataType": "",
795	+	"metadata": null
796	+	},
797	+	{
798	+	"id": "203ee2fd-d494-4bd3-b563-edf0a217a625",
799	+	"name": "github.com/stretchr/testify",
800	+	"version": "v1.7.0",
801	+	"type": "go-module",
802	+	"foundBy": "go-cataloger",
803	+	"locations": [
804	+	{
805	+	"path": "go.mod"
806	+	}
807	+	],
808	+	"licenses": [],
809	+	"language": "go",
810	+	"cpes": [
811	+	"cpe:2.3:a:stretchr:testify:v1.7.0:::::::*"
812	+	],
813	+	"purl": "pkg:golang/github.com/stretchr/[email protected]",
814	+	"metadataType": "",
815	+	"metadata": null
816	+	},
817	+	{
818	+	"id": "a9b26b3c-b7fa-4896-a1d3-4d57b237e0e2",
819	+	"name": "github.com/wagoodman/go-partybus",
820	+	"version": "v0.0.0-20210627031916-db1f5573bbc5",
821	+	"type": "go-module",
822	+	"foundBy": "go-cataloger",
823	+	"locations": [
824	+	{
825	+	"path": "go.mod"
826	+	}
827	+	],
828	+	"licenses": [],
829	+	"language": "go",
830	+	"cpes": [
831	+	"cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20210627031916-db1f5573bbc5:::::::*",
832	+	"cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20210627031916-db1f5573bbc5:::::::*"
833	+	],
834	+	"purl": "pkg:golang/github.com/wagoodman/[email protected]",
835	+	"metadataType": "",
836	+	"metadata": null
837	+	},
838	+	{
839	+	"id": "0fc965b2-dae1-48c2-b444-aa06c0444e3a",
840	+	"name": "github.com/wagoodman/go-progress",
841	+	"version": "v0.0.0-20200807221327-51d465df1451",
842	+	"type": "go-module",
843	+	"foundBy": "go-cataloger",
844	+	"locations": [
845	+	{
846	+	"path": "go.mod"
847	+	}
848	+	],
849	+	"licenses": [],
850	+	"language": "go",
851	+	"cpes": [
852	+	"cpe:2.3:a:wagoodman:go-progress:v0.0.0-20200807221327-51d465df1451:::::::*",
853	+	"cpe:2.3:a:wagoodman:go_progress:v0.0.0-20200807221327-51d465df1451:::::::*"
854	+	],
855	+	"purl": "pkg:golang/github.com/wagoodman/[email protected]",
856	+	"metadataType": "",
857	+	"metadata": null
858	+	},
859	+	{
860	+	"id": "7d006c48-72c5-442d-b485-c69eae9c2bd8",
861	+	"name": "github.com/wagoodman/jotframe",
862	+	"version": "v0.0.0-20200730190914-3517092dd163",
863	+	"type": "go-module",
864	+	"foundBy": "go-cataloger",
865	+	"locations": [
866	+	{
867	+	"path": "go.mod"
868	+	}
869	+	],
870	+	"licenses": [],
871	+	"language": "go",
872	+	"cpes": [
873	+	"cpe:2.3:a:wagoodman:jotframe:v0.0.0-20200730190914-3517092dd163:::::::*"
874	+	],
875	+	"purl": "pkg:golang/github.com/wagoodman/[email protected]",
876	+	"metadataType": "",
877	+	"metadata": null
878	+	},
879	+	{
880	+	"id": "179ada5b-cac6-49fe-a786-865874ab04ca",
881	+	"name": "github.com/x-cray/logrus-prefixed-formatter",
882	+	"version": "v0.5.2",
883	+	"type": "go-module",
884	+	"foundBy": "go-cataloger",
885	+	"locations": [
886	+	{
887	+	"path": "go.mod"
888	+	}
889	+	],
890	+	"licenses": [],
891	+	"language": "go",
892	+	"cpes": [
893	+	"cpe:2.3:a:x_cray:logrus_prefixed_formatter:v0.5.2:::::::*",
894	+	"cpe:2.3:a:x-cray:logrus_prefixed_formatter:v0.5.2:::::::*",
895	+	"cpe:2.3:a:x_cray:logrus-prefixed-formatter:v0.5.2:::::::*",
896	+	"cpe:2.3:a:x-cray:logrus-prefixed-formatter:v0.5.2:::::::*",
897	+	"cpe:2.3:a:x:logrus_prefixed_formatter:v0.5.2:::::::*",
898	+	"cpe:2.3:a:x:logrus-prefixed-formatter:v0.5.2:::::::*"
899	+	],
900	+	"purl": "pkg:golang/github.com/x-cray/[email protected]",
901	+	"metadataType": "",
902	+	"metadata": null
903	+	},
904	+	{
905	+	"id": "278908c5-bf45-4a37-9ef5-6ada37b2935a",
906	+	"name": "golang.org/x/crypto",
907	+	"version": "v0.0.0-20200622213623-75b288015ac9",
908	+	"type": "go-module",
909	+	"foundBy": "go-cataloger",
910	+	"locations": [
911	+	{
912	+	"path": "go.mod"
913	+	}
914	+	],
915	+	"licenses": [],
916	+	"language": "go",
917	+	"cpes": [
918	+	"cpe:2.3:a:golang:x/crypto:v0.0.0-20200622213623-75b288015ac9:::::::*"
919	+	],
920	+	"purl": "pkg:golang/golang.org/x/[email protected]",
921	+	"metadataType": "",
922	+	"metadata": null
923	+	},
924	+	{
925	+	"id": "ccd900cd-78b1-4377-8265-2b1f2dff34a6",
926	+	"name": "gopkg.in/yaml.v2",
927	+	"version": "v2.3.0",
928	+	"type": "go-module",
929	+	"foundBy": "go-cataloger",
930	+	"locations": [
931	+	{
932	+	"path": "go.mod"
933	+	}
934	+	],
935	+	"licenses": [],
936	+	"language": "go",
937	+	"cpes": [],
938	+	"purl": "pkg:golang/gopkg.in/[email protected]",
939	+	"metadataType": "",
940	+	"metadata": null
941	+	},
942	+	{
943	+	"id": "5582f267-e031-4687-99dc-3ee0d57cb724",
944	+	"name": "joda-time",
945	+	"version": "2.9.2",
946	+	"type": "java-archive",
947	+	"foundBy": "java-cataloger",
948	+	"locations": [
949	+	{
950	+	"path": "test/integration/test-fixtures/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar"
951	+	}
952	+	],
953	+	"licenses": [],
954	+	"language": "java",
955	+	"cpes": [
956	+	"cpe:2.3:a:joda-time:joda-time:2.9.2:::::::*",
957	+	"cpe:2.3:a:joda_time:joda-time:2.9.2:::::::*",
958	+	"cpe:2.3:a:joda-time:joda_time:2.9.2:::::::*",
959	+	"cpe:2.3:a:joda_time:joda_time:2.9.2:::::::*",
960	+	"cpe:2.3:a:joda:joda-time:2.9.2:::::::*",
961	+	"cpe:2.3:a:joda:joda_time:2.9.2:::::::*"
962	+	],
963	+	"purl": "pkg:maven/joda-time/[email protected]",
964	+	"metadataType": "JavaMetadata",
965	+	"metadata": {
966	+	"virtualPath": "test/integration/test-fixtures/image-debian-match-coverage/java/example-java-app-maven-0.1.0.jar:joda-time",
967	+	"pomProperties": {
968	+	"path": "META-INF/maven/joda-time/joda-time/pom.properties",
969	+	"name": "",
970	+	"groupId": "joda-time",
971	+	"artifactId": "joda-time",
972	+	"version": "2.9.2",
973	+	"extraFields": {}
974	+	},
975	+	"pomProject": {
976	+	"path": "META-INF/maven/joda-time/joda-time/pom.xml",
977	+	"groupId": "joda-time",
978	+	"artifactId": "joda-time",
979	+	"version": "2.9.2",
980	+	"name": "Joda-Time",
981	+	"description": "Date and time library to replace JDK date handling",
982	+	"url": "http://www.joda.org/joda-time/"
983	+	}
984	+	}
985	+	},
986	+	{
987	+	"id": "f727dab3-3fe8-4082-b12d-0fed59452c89",
988	+	"name": "libvncserver",
989	+	"version": "0.9.9",
990	+	"type": "apk",
991	+	"foundBy": "apkdb-cataloger",
992	+	"locations": [
993	+	{
994	+	"path": "test/integration/test-fixtures/image-alpine-match-coverage/lib/apk/db/installed"
995	+	}
996	+	],
997	+	"licenses": [
998	+	"GPL-2.0-or-later"
999	+	],
1000	+	"language": "",
1001	+	"cpes": [
1002	+	"cpe:2.3:a:libvncserver:libvncserver:0.9.9:::::::*"
1003	+	],
1004	+	"purl": "pkg:alpine/[email protected]?arch=x86_64",
1005	+	"metadataType": "ApkMetadata",
1006	+	"metadata": {
1007	+	"package": "libvncserver",
1008	+	"originPackage": "libvncserver",
1009	+	"maintainer": "A. Wilcox <[email protected]>",
1010	+	"version": "0.9.9",
1011	+	"license": "GPL-2.0-or-later",
1012	+	"architecture": "x86_64",
1013	+	"url": "http://libvncserver.sourceforge.net/",
1014	+	"description": "Library to make writing a vnc server easy",
1015	+	"size": 166239,
1016	+	"installedSize": 389120,
1017	+	"pullDependencies": "so:libc.musl-x86_64.so.1 so:libgcrypt.so.20 so:libgnutls.so.30 so:libjpeg.so.8 so:libpng16.so.16 so:libz.so.1",
1018	+	"pullChecksum": "Q1z0MwWQKfva+S+q7XmOBYFfQgW/k=",
1019	+	"gitCommitOfApkPort": "bf1ec813f662f128fc6b70f37ef1c0474bb24488",
1020	+	"files": [
1021	+	{
1022	+	"path": "/usr",
1023	+	"digest": {
1024	+	"algorithm": "",
1025	+	"value": ""
1026	+	}
1027	+	},
1028	+	{
1029	+	"path": "/usr/lib",
1030	+	"digest": {
1031	+	"algorithm": "",
1032	+	"value": ""
1033	+	}
1034	+	},
1035	+	{
1036	+	"path": "/usr/lib/libvncclient.so.1",
1037	+	"ownerUid": "0",
1038	+	"ownerGid": "0",
1039	+	"permissions": "777",
1040	+	"digest": {
1041	+	"algorithm": "sha1",
1042	+	"value": "Q1quyp/JcSPFQhtQFjMUYdMwRvAWM="
1043	+	}
1044	+	},
1045	+	{
1046	+	"path": "/usr/lib/libvncserver.so.1.0.0",
1047	+	"ownerUid": "0",
1048	+	"ownerGid": "0",
1049	+	"permissions": "755",
1050	+	"digest": {
1051	+	"algorithm": "sha1",
1052	+	"value": "Q16Pd1AqyqQRMwiFfbUt9XkYnkapw="
1053	+	}
1054	+	},
1055	+	{
1056	+	"path": "/usr/lib/libvncserver.so.1",
1057	+	"ownerUid": "0",
1058	+	"ownerGid": "0",
1059	+	"permissions": "777",
1060	+	"digest": {
1061	+	"algorithm": "sha1",
1062	+	"value": "Q184HrHsxEBqnsH4QNxeU5w8alhKI="
1063	+	}
1064	+	},
1065	+	{
1066	+	"path": "/usr/lib/libvncclient.so.1.0.0",
1067	+	"ownerUid": "0",
1068	+	"ownerGid": "0",
1069	+	"permissions": "755",
1070	+	"digest": {
1071	+	"algorithm": "sha1",
1072	+	"value": "Q1IEjCrEwVlQt2GjIsb3o39vcgqMg="
1073	+	}
1074	+	}
1075	+	]
1076	+	}
1077	+	},
1078	+	{
1079	+	"id": "731abc1d-e0ed-4c6d-9554-1df437e4c540",
1080	+	"name": "rails",
1081	+	"version": "4.1.1",
1082	+	"type": "gem",
1083	+	"foundBy": "ruby-gemfile-cataloger",
1084	+	"locations": [
1085	+	{
1086	+	"path": "test/integration/test-fixtures/image-debian-match-coverage/ruby/Gemfile.lock"
1087	+	}
1088	+	],
1089	+	"licenses": [],
1090	+	"language": "ruby",
1091	+	"cpes": [
1092	+	"cpe:2.3:a:ruby_lang:rails:4.1.1:::::::*",
1093	+	"cpe:2.3:a:ruby-lang:rails:4.1.1:::::::*",
1094	+	"cpe:2.3:a:rails:rails:4.1.1:::::::*",
1095	+	"cpe:2.3:a:ruby:rails:4.1.1:::::::*",
1096	+	"cpe:2.3:a::rails:4.1.1:::::::"
1097	+	],
1098	+	"purl": "pkg:gem/[email protected]",
1099	+	"metadataType": "",
1100	+	"metadata": null
1101	+	}
1102	+	],
1103	+	"artifactRelationships": [],
1104	+	"source": {
1105	+	"type": "directory",
1106	+	"target": "./"
1107	+	},
1108	+	"distro": {
1109	+	"name": "",
1110	+	"version": "",
1111	+	"idLike": ""
1112	+	},
1113	+	"descriptor": {
1114	+	"name": "syft",
1115	+	"version": "[not provided]"
1116	+	},
1117	+	"schema": {
1118	+	"version": "1.1.0",
1119	+	"url": "https://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-1.1.0.json"
1120	+	}
1121	+	}
1122	+