Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Java cataloger miscellaneous fixes #245

Merged
merged 4 commits into from
Oct 28, 2020
Merged

Conversation

wagoodman
Copy link
Contributor

@wagoodman wagoodman commented Oct 28, 2020

  • Adds a virtualPath for java archives to indicate if the archive was found within another java archive (similar to Anchore engine). e.g. hudson.war:WEB-INF/lib/args4j-2.0.16.jar
  • Removes the parentPackage from the json output for java archives
  • Removes optional fields from json output when empty
  • Parses java manifest sections separately; Fixes Java cataloger reporting packages without name and version #220
  • Forces lowercase of pom properties path variable

Partially addresses findings from anchore/grype#182 and anchore/grype#192 as well as helps with anchore/anchore-engine#681

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
…sing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
@wagoodman wagoodman added the bug Something isn't working label Oct 28, 2020
@wagoodman wagoodman requested a review from a team October 28, 2020 21:26
@wagoodman wagoodman self-assigned this Oct 28, 2020
@wagoodman wagoodman changed the title Update java cataloger for engine Java cataloger miscellaneous fixes Oct 28, 2020
@wagoodman wagoodman merged commit 452426d into main Oct 28, 2020
@wagoodman wagoodman deleted the update-java-cataloger-for-engine branch October 28, 2020 21:36
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
…-engine

Java cataloger miscellaneous fixes
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Java cataloger reporting packages without name and version
2 participants