From 2f508929c38ef17fa4b6de6e4d900c0dd526d601 Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Tue, 27 Aug 2024 11:26:15 +0100 Subject: [PATCH] fix: use official CPE for curl binary cataloger The official CPE for curl is `cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*` Signed-off-by: Weston Steimel --- syft/pkg/cataloger/binary/classifiers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/syft/pkg/cataloger/binary/classifiers.go b/syft/pkg/cataloger/binary/classifiers.go index 563a39cfafe2..b9df7aa46dd2 100644 --- a/syft/pkg/cataloger/binary/classifiers.go +++ b/syft/pkg/cataloger/binary/classifiers.go @@ -537,7 +537,7 @@ func DefaultClassifiers() []Classifier { ), Package: "curl", PURL: mustPURL("pkg:generic/curl@version"), - CPEs: singleCPE("cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*"), + CPEs: singleCPE("cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"), }, } }