oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-06-17 17:58:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: catalog uv PEP 723 script lockfiles (*.py.lock) (#4950)

Browse Source 
Signed-off-by: Kursat Topcuoglu <7313835+ktopcuoglu@users.noreply.github.com>
Co-authored-by: Kursat Topcuoglu <7313835+ktopcuoglu@users.noreply.github.com>
This commit is contained in:
Kursat Topcuoglu 2026-06-15 18:34:02 +03:00 committed by GitHub
parent 6a27678036
commit 00ca43d24a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
syft/pkg/cataloger/python/capabilities.yaml
View File

@ -113,6 +113,7 @@ catalogers:
method: glob # AUTO-GENERATED method: glob # AUTO-GENERATED
criteria: # AUTO-GENERATED criteria: # AUTO-GENERATED
- '**/uv.lock' - '**/uv.lock'
- '**/*.py.lock'
metadata_types: # AUTO-GENERATED metadata_types: # AUTO-GENERATED
- pkg.PythonUvLockEntry - pkg.PythonUvLockEntry
package_types: # AUTO-GENERATED package_types: # AUTO-GENERATED

5
syft/pkg/cataloger/python/cataloger.go
View File

@ -23,7 +23,10 @@ func NewPackageCataloger(cfg CatalogerConfig) pkg.Cataloger {
WithParserByGlobs(poetryLockParser.parsePoetryLock, "**/poetry.lock"). WithParserByGlobs(poetryLockParser.parsePoetryLock, "**/poetry.lock").
WithParserByGlobs(pipfileLockParser.parsePipfileLock, "**/Pipfile.lock"). WithParserByGlobs(pipfileLockParser.parsePipfileLock, "**/Pipfile.lock").
WithParserByGlobs(setupFileParser.parseSetupFile, "**/setup.py"). WithParserByGlobs(setupFileParser.parseSetupFile, "**/setup.py").
WithParserByGlobs(uvLockParser.parseUvLock, "**/uv.lock"). // uv lock files are named "uv.lock", but PEP 723 script lock files
// (created by "uv lock --script <name>.py") are named "<name>.py.lock"
// and use the same format, so catalog both.
WithParserByGlobs(uvLockParser.parseUvLock, "**/uv.lock", "**/*.py.lock").
WithParserByGlobs(pdmLockParser.parsePdmLock, "**/pdm.lock") WithParserByGlobs(pdmLockParser.parsePdmLock, "**/pdm.lock")
} }

1
syft/pkg/cataloger/python/cataloger_test.go
View File

@ -501,6 +501,7 @@ func Test_IndexCataloger_Globs(t *testing.T) {
"src/poetry.lock", "src/poetry.lock",
"src/Pipfile.lock", "src/Pipfile.lock",
"src/uv.lock", "src/uv.lock",
"src/script.py.lock",
"src/pdm.lock", "src/pdm.lock",
}, },
}, },

1
syft/pkg/cataloger/python/testdata/glob-paths/src/script.py.lock vendored Normal file
View File

@ -0,0 +1 @@
bogus