STRLCPY/grype

■ ■ ■ ■ ■ ■

grype/matcher/apk/matcher_test.go

		skipped 349 lines
350	350		SearchedBy: search.CPEParameters{
351	351		CPEs: []string{"cpe:2.3:a::libvncserver:0.9.9:::::::"},
352	352		Namespace: "nvd:cpe",
	353	+	Package: search.CPEPackageParameter{
	354	+	Name: "libvncserver",
	355	+	Version: "0.9.9",
	356	+	},
353	357		},
354	358		Found: search.CPEResult{
355	359		CPEs: []string{vulnFound.CPEs[0].BindToFmtString()},
		skipped 69 lines
425	429		SearchedBy: search.CPEParameters{
426	430		CPEs: []string{"cpe:2.3:a::libvncserver:0.9.11:::::::"},
427	431		Namespace: "nvd:cpe",
	432	+	Package: search.CPEPackageParameter{
	433	+	Name: "libvncserver",
	434	+	Version: "0.9.11-r10",
	435	+	},
428	436		},
429	437		Found: search.CPEResult{
430	438		CPEs: []string{vulnFound.CPEs[0].BindToFmtString()},
		skipped 248 lines
679	687		SearchedBy: search.CPEParameters{
680	688		CPEs: []string{"cpe:2.3:a:musl:musl::::::::"},
681	689		Namespace: "nvd:cpe",
	690	+	Package: search.CPEPackageParameter{
	691	+	Name: "musl",
	692	+	Version: "1.3.2-r0",
	693	+	},
682	694		},
683	695		Found: search.CPEResult{
684	696		CPEs: []string{vulnFound.CPEs[0].BindToFmtString()},
		skipped 27 lines

■ ■ ■ ■ ■ ■

grype/search/cpe.go

		skipped 16 lines
17	17		syftPkg "github.com/anchore/syft/syft/pkg"
18	18		)
19	19
	20	+	type CPEPackageParameter struct {
	21	+	Name string `json:"name"`
	22	+	Version string `json:"version"`
	23	+	}
	24	+
20	25		type CPEParameters struct {
21	26		Namespace string `json:"namespace"`
22	27		CPEs []string `json:"cpes"`
	28	+	Package CPEPackageParameter
23	29		}
24	30
25	31		func (i *CPEParameters) Merge(other CPEParameters) error {
		skipped 120 lines
146	152		Namespace: vuln.Namespace,
147	153		CPEs: []string{
148	154		searchedByCPE.BindToFmtString(),
	155	+	},
	156	+	Package: CPEPackageParameter{
	157	+	Name: p.Name,
	158	+	Version: p.Version,
149	159		},
150	160		},
151	161		Found: CPEResult{
		skipped 91 lines

■ ■ ■ ■ ■ ■

grype/search/cpe_test.go

		skipped 196 lines
197	197		SearchedBy: CPEParameters{
198	198		Namespace: "nvd:cpe",
199	199		CPEs: []string{"cpe:2.3::activerecord:activerecord:3.7.5:rando4::re::rails::*"},
	200	+	Package: CPEPackageParameter{
	201	+	Name: "activerecord",
	202	+	Version: "3.7.5",
	203	+	},
200	204		},
201	205		Found: CPEResult{
202	206		CPEs: []string{"cpe:2.3::activerecord:activerecord::::::rails::"},
		skipped 44 lines
247	251		"cpe:2.3::activerecord:activerecord:3.7.3:rando4::re::rails::*",
248	252		},
249	253		Namespace: "nvd:cpe",
	254	+	Package: CPEPackageParameter{
	255	+	Name: "activerecord",
	256	+	Version: "3.7.3",
	257	+	},
250	258		},
251	259		Found: CPEResult{
252	260		CPEs: []string{"cpe:2.3::activerecord:activerecord::::::rails::"},
		skipped 27 lines
280	288		SearchedBy: CPEParameters{
281	289		CPEs: []string{"cpe:2.3::activerecord:activerecord:3.7.3:rando1::ra::ruby::*"},
282	290		Namespace: "nvd:cpe",
	291	+	Package: CPEPackageParameter{
	292	+	Name: "activerecord",
	293	+	Version: "3.7.3",
	294	+	},
283	295		},
284	296		Found: CPEResult{
285	297		CPEs: []string{"cpe:2.3::activerecord:activerecord::::::ruby::"},
		skipped 39 lines
325	337		SearchedBy: CPEParameters{
326	338		CPEs: []string{"cpe:2.3:::activerecord:4.0.1:::::::*"},
327	339		Namespace: "nvd:cpe",
	340	+	Package: CPEPackageParameter{
	341	+	Name: "activerecord",
	342	+	Version: "4.0.1",
	343	+	},
328	344		},
329	345		Found: CPEResult{
330	346		CPEs: []string{"cpe:2.3::activerecord:activerecord:4.0.1:::::::"},
		skipped 47 lines
378	394		SearchedBy: CPEParameters{
379	395		CPEs: []string{"cpe:2.3::awesome:awesome:98SE1:rando1::ra::dunno::*"},
380	396		Namespace: "nvd:cpe",
	397	+	Package: CPEPackageParameter{
	398	+	Name: "awesome",
	399	+	Version: "98SE1",
	400	+	},
381	401		},
382	402		Found: CPEResult{
383	403		CPEs: []string{"cpe:2.3::awesome:awesome::::::::*"},
		skipped 40 lines
424	444		SearchedBy: CPEParameters{
425	445		CPEs: []string{"cpe:2.3::multiple:multiple:1.0:::::::"},
426	446		Namespace: "nvd:cpe",
	447	+	Package: CPEPackageParameter{
	448	+	Name: "multiple",
	449	+	Version: "1.0",
	450	+	},
427	451		},
428	452		Found: CPEResult{
429	453		CPEs: []string{
		skipped 54 lines
484	508		SearchedBy: CPEParameters{
485	509		CPEs: []string{"cpe:2.3::sw:sw::::::::*"},
486	510		Namespace: "nvd:cpe",
	511	+	Package: CPEPackageParameter{
	512	+	Name: "sw",
	513	+	Version: "0.1",
	514	+	},
487	515		},
488	516		Found: CPEResult{
489	517		CPEs: []string{
		skipped 46 lines
536	564		SearchedBy: CPEParameters{
537	565		CPEs: []string{"cpe:2.3::funfun:funfun::::::python::"},
538	566		Namespace: "nvd:cpe",
	567	+	Package: CPEPackageParameter{
	568	+	Name: "funfun",
	569	+	Version: "5.2.1",
	570	+	},
539	571		},
540	572		Found: CPEResult{
541	573		CPEs: []string{
		skipped 41 lines
583	615		SearchedBy: CPEParameters{
584	616		CPEs: []string{"cpe:2.3:a:handlebarsjs:handlebars::::::::"},
585	617		Namespace: "nvd:cpe",
	618	+	Package: CPEPackageParameter{
	619	+	Name: "handlebars",
	620	+	Version: "0.1",
	621	+	},
586	622		},
587	623		Found: CPEResult{
588	624		CPEs: []string{
		skipped 40 lines
629	665		SearchedBy: CPEParameters{
630	666		CPEs: []string{"cpe:2.3:a:handlebarsjs:handlebars::::::::"},
631	667		Namespace: "nvd:cpe",
	668	+	Package: CPEPackageParameter{
	669	+	Name: "handlebars",
	670	+	Version: "0.1",
	671	+	},
632	672		},
633	673		Found: CPEResult{
634	674		CPEs: []string{
		skipped 439 lines

■ ■ ■ ■ ■ ■

grype/search/language.go

		skipped 45 lines
46	46		SearchedBy: map[string]interface{}{
47	47		"language": string(p.Language),
48	48		"namespace": vuln.Namespace,
	49	+	"package": map[string]string{
	50	+	"name": p.Name,
	51	+	"version": p.Version,
	52	+	},
49	53		},
50	54		Found: map[string]interface{}{
51	55		"vulnerabilityID": vuln.ID,
		skipped 10 lines

■ ■ ■ ■ ■ ■

grype/search/language_test.go

		skipped 78 lines
79	79		SearchedBy: map[string]interface{}{
80	80		"language": "ruby",
81	81		"namespace": "github:ruby",
	82	+	"package": map[string]string{"name": p.Name, "version": p.Version},
82	83		},
83	84		Found: map[string]interface{}{
84	85		"versionConstraint": constraint,
		skipped 46 lines

■ ■ ■ ■ ■ ■

grype/vulnerability_matcher_test.go

		skipped 490 lines
491	491		CPEs: []string{
492	492		"cpe:2.3::activerecord:activerecord::::::rails::",
493	493		},
	494	+	Package: search.CPEPackageParameter{
	495	+	Name: "activerecord",
	496	+	Version: "3.7.5",
	497	+	},
494	498		},
495	499		Found: search.CPEResult{
496	500		VulnerabilityID: "CVE-2014-fake-3",
		skipped 29 lines
526	530		SearchedBy: map[string]any{
527	531		"language": "ruby",
528	532		"namespace": "github:language:ruby",
	533	+	"package": map[string]string{"name": "activerecord", "version": "3.7.5"},
529	534		},
530	535		Found: map[string]any{
531	536		"versionConstraint": "< 3.7.6 (unknown)",
		skipped 48 lines
580	585		Package: activerecordPkg,
581	586		Details: match.Details{
582	587		{
	588	+	Type: match.ExactDirectMatch,
	589	+	SearchedBy: map[string]any{
	590	+	"language": "ruby",
	591	+	"namespace": "github:language:ruby",
	592	+	"package": map[string]string{"name": "activerecord", "version": "3.7.5"},
	593	+	},
	594	+	Found: map[string]any{
	595	+	"versionConstraint": "< 3.7.6 (unknown)",
	596	+	"vulnerabilityID": "GHSA-2014-fake-3",
	597	+	},
	598	+	Matcher: "ruby-gem-matcher",
	599	+	Confidence: 1,
	600	+	},
	601	+	{
583	602		Type: match.CPEMatch,
584	603		SearchedBy: search.CPEParameters{
585	604		Namespace: "nvd:cpe",
586	605		CPEs: []string{
587	606		"cpe:2.3::activerecord:activerecord::::::rails::",
	607	+	},
	608	+	Package: search.CPEPackageParameter{
	609	+	Name: "activerecord",
	610	+	Version: "3.7.5",
588	611		},
589	612		},
590	613		Found: search.CPEResult{
		skipped 6 lines
597	620		Matcher: "ruby-gem-matcher",
598	621		Confidence: 0.9,
599	622		},
600		-	{
601		-	Type: match.ExactDirectMatch,
602		-	SearchedBy: map[string]any{
603		-	"language": "ruby",
604		-	"namespace": "github:language:ruby",
605		-	},
606		-	Found: map[string]any{
607		-	"versionConstraint": "< 3.7.6 (unknown)",
608		-	"vulnerabilityID": "GHSA-2014-fake-3",
609		-	},
610		-	Matcher: "ruby-gem-matcher",
611		-	Confidence: 1,
612		-	},
613	623		},
614	624		},
615	625		),
		skipped 44 lines
660	670		Namespace: "nvd:cpe",
661	671		CPEs: []string{
662	672		"cpe:2.3::activerecord:activerecord::::::rails::",
	673	+	},
	674	+	Package: search.CPEPackageParameter{
	675	+	Name: "activerecord",
	676	+	Version: "3.7.5",
663	677		},
664	678		},
665	679		Found: search.CPEResult{
		skipped 65 lines
731	745		SearchedBy: map[string]any{
732	746		"language": "ruby",
733	747		"namespace": "github:language:ruby",
	748	+	"package": map[string]string{"name": "activerecord", "version": "3.7.5"},
734	749		},
735	750		Found: map[string]any{
736	751		"versionConstraint": "< 3.7.6 (unknown)",
		skipped 51 lines
788	803		SearchedBy: map[string]any{
789	804		"language": "ruby",
790	805		"namespace": "github:language:ruby",
	806	+	"package": map[string]string{"name": "activerecord", "version": "3.7.5"},
791	807		},
792	808		Found: map[string]any{
793	809		"versionConstraint": "< 3.7.6 (unknown)",
		skipped 31 lines
825	841		Namespace: "nvd:cpe",
826	842		CPEs: []string{
827	843		"cpe:2.3::activerecord:activerecord::::::rails::",
	844	+	},
	845	+	Package: search.CPEPackageParameter{
	846	+	Name: "activerecord",
	847	+	Version: "3.7.5",
828	848		},
829	849		},
830	850		Found: search.CPEResult{
		skipped 52 lines

■ ■ ■ ■ ■ ■

test/integration/match_by_image_test.go

		skipped 106 lines
107	107		SearchedBy: map[string]interface{}{
108	108		"language": "javascript",
109	109		"namespace": "github:language:javascript",
	110	+	"package": map[string]string{
	111	+	"name": thePkg.Name,
	112	+	"version": thePkg.Version,
	113	+	},
110	114		},
111	115		Found: map[string]interface{}{
112	116		"versionConstraint": "> 5, < 7.2.1 (unknown)",
		skipped 31 lines
144	148		SearchedBy: map[string]interface{}{
145	149		"language": "python",
146	150		"namespace": "github:language:python",
	151	+	"package": map[string]string{
	152	+	"name": thePkg.Name,
	153	+	"version": thePkg.Version,
	154	+	},
147	155		},
148	156		Found: map[string]interface{}{
149	157		"versionConstraint": "< 2.6.2 (python)",
		skipped 31 lines
181	189		SearchedBy: map[string]interface{}{
182	190		"language": "dotnet",
183	191		"namespace": "github:language:dotnet",
	192	+	"package": map[string]string{
	193	+	"name": thePkg.Name,
	194	+	"version": thePkg.Version,
	195	+	},
184	196		},
185	197		Found: map[string]interface{}{
186	198		"versionConstraint": ">= 3.7.0.0, < 3.7.12.0 (unknown)",
		skipped 27 lines
214	226		SearchedBy: map[string]interface{}{
215	227		"language": "ruby",
216	228		"namespace": "github:language:ruby",
	229	+	"package": map[string]string{
	230	+	"name": thePkg.Name,
	231	+	"version": thePkg.Version,
	232	+	},
217	233		},
218	234		Found: map[string]interface{}{
219	235		"versionConstraint": "> 2.0.0, <= 2.1.4 (unknown)",
		skipped 43 lines
263	279		SearchedBy: map[string]interface{}{
264	280		"language": "go",
265	281		"namespace": "github:language:go",
	282	+	"package": map[string]string{
	283	+	"name": thePkg.Name,
	284	+	"version": thePkg.Version,
	285	+	},
266	286		},
267	287		Found: map[string]interface{}{
268	288		"versionConstraint": "< 1.4.0 (unknown)",
		skipped 37 lines
306	326		SearchedBy: map[string]interface{}{
307	327		"language": "java",
308	328		"namespace": "github:language:java",
	329	+	"package": map[string]string{
	330	+	"name": thePkg.Name,
	331	+	"version": thePkg.Version,
	332	+	},
309	333		},
310	334		Found: map[string]interface{}{
311	335		"versionConstraint": ">= 0.0.1, < 1.2.0 (unknown)",
		skipped 186 lines
498	522		SearchedBy: map[string]any{
499	523		"language": "haskell",
500	524		"namespace": "github:language:haskell",
	525	+	"package": map[string]string{
	526	+	"name": thePkg.Name,
	527	+	"version": thePkg.Version,
	528	+	},
501	529		},
502	530		Found: map[string]any{
503	531		"versionConstraint": "< 0.9.0 (unknown)",
		skipped 154 lines

■ ■ ■ ■ ■ ■

test/integration/match_by_sbom_document_test.go

		skipped 61 lines
62	62		SearchedBy: map[string]interface{}{
63	63		"language": "python",
64	64		"namespace": "github:language:python",
	65	+	"package": map[string]string{"name": "my-package", "version": "1.0.5"},
65	66		},
66	67		Found: map[string]interface{}{
67	68		"versionConstraint": "< 2.0 (python)",
		skipped 47 lines

feat: add package info to search by for all match details (#1339)