diff --git a/syft/pkg/cataloger/common/cpe/candidate_by_package_type.go b/syft/pkg/cataloger/common/cpe/candidate_by_package_type.go index edc9a0af4..82e7ce784 100644 --- a/syft/pkg/cataloger/common/cpe/candidate_by_package_type.go +++ b/syft/pkg/cataloger/common/cpe/candidate_by_package_type.go @@ -350,6 +350,27 @@ var defaultCandidateRemovals = buildCandidateRemovalLookup( candidateKey{PkgName: "redis"}, candidateRemovals{VendorsToRemove: []string{"redis"}}, }, + // NPM packages + { + pkg.NpmPkg, + candidateKey{PkgName: "redis"}, + candidateRemovals{VendorsToRemove: []string{"redis"}}, + }, + { + pkg.NpmPkg, + candidateKey{PkgName: "php"}, + candidateRemovals{VendorsToRemove: []string{"php"}}, + }, + { + pkg.NpmPkg, + candidateKey{PkgName: "delegate"}, + candidateRemovals{VendorsToRemove: []string{"delegate"}}, + }, + { + pkg.NpmPkg, + candidateKey{PkgName: "docker"}, + candidateRemovals{VendorsToRemove: []string{"docker"}}, + }, }) // buildCandidateLookup is a convenience function for creating the defaultCandidateAdditions set