port python cataloger to new generic cataloger pattern (#1319)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2026-10-31 14:36:33 +01:00 · 2022-11-04 08:59:03 -04:00
parent 2deb96a801
commit 1076281566
19 changed files with 381 additions and 460 deletions
@@ -0,0 +1,81 @@
+package python
+
+import (
+	"fmt"
+
+	"github.com/anchore/packageurl-go"
+	"github.com/anchore/syft/syft/pkg"
+	"github.com/anchore/syft/syft/source"
+)
+
+func newPackageForIndex(name, version string, locations ...source.Location) pkg.Package {
+	p := pkg.Package{
+		Name:      name,
+		Version:   version,
+		Locations: source.NewLocationSet(locations...),
+		PURL:      packageURL(name, version, nil),
+		Language:  pkg.Python,
+		Type:      pkg.PythonPkg,
+	}
+
+	p.SetID()
+
+	return p
+}
+
+func newPackageForPackage(m pkg.PythonPackageMetadata, sources ...source.Location) pkg.Package {
+	var licenses []string
+	if m.License != "" {
+		licenses = []string{m.License}
+	}
+
+	p := pkg.Package{
+		Name:         m.Name,
+		Version:      m.Version,
+		PURL:         packageURL(m.Name, m.Version, &m),
+		Locations:    source.NewLocationSet(sources...),
+		Licenses:     licenses,
+		Language:     pkg.Python,
+		Type:         pkg.PythonPkg,
+		MetadataType: pkg.PythonPackageMetadataType,
+		Metadata:     m,
+	}
+
+	p.SetID()
+	return p
+}
+
+func packageURL(name, version string, m *pkg.PythonPackageMetadata) string {
+	// generate a purl from the package data
+	pURL := packageurl.NewPackageURL(
+		packageurl.TypePyPi,
+		"",
+		name,
+		version,
+		purlQualifiersForPackage(m),
+		"")
+
+	return pURL.ToString()
+}
+
+func purlQualifiersForPackage(m *pkg.PythonPackageMetadata) packageurl.Qualifiers {
+	q := packageurl.Qualifiers{}
+	if m == nil {
+		return q
+	}
+	if m.DirectURLOrigin != nil {
+		q = append(q, vcsURLQualifierForPackage(m.DirectURLOrigin)...)
+	}
+	return q
+}
+
+func vcsURLQualifierForPackage(p *pkg.PythonDirectURLOriginInfo) packageurl.Qualifiers {
+	if p == nil || p.VCS == "" {
+		return nil
+	}
+	// Taken from https://github.com/package-url/purl-spec/blob/master/PURL-SPECIFICATION.rst#known-qualifiers-keyvalue-pairs
+	// packageurl-go still doesn't support all qualifier names
+	return packageurl.Qualifiers{
+		{Key: pkg.PURLQualifierVCSURL, Value: fmt.Sprintf("%s+%s@%s", p.VCS, p.URL, p.CommitID)},
+	}
+}