oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-17 16:33:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

add additional vendors for springframework (#945)

Browse Source 
The Official CPE dictionary currently contains entries for springframework with three different vendors: springsource, vmware, and pivotal_software.  This appears to be because ownership has changed over time.

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
This commit is contained in:
Weston Steimel 2022-04-11 13:38:52 +00:00 committed by GitHub
parent 782b2e3348
commit 15e45a8ce1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
syft/pkg/cataloger/common/cpe/candidate_by_package_type.go
View File

@ -19,12 +19,12 @@ var defaultCandidateAdditions = buildCandidateLookup(
{ {
pkg.JavaPkg, pkg.JavaPkg,
candidateKey{PkgName: "springframework"}, candidateKey{PkgName: "springframework"},
candidateAddition{AdditionalProducts: []string{"spring_framework", "springsource_spring_framework"}}, candidateAddition{AdditionalProducts: []string{"spring_framework", "springsource_spring_framework"}, AdditionalVendors: []string{"pivotal_software", "springsource", "vmware"}},
}, },
{ {
pkg.JavaPkg, pkg.JavaPkg,
candidateKey{PkgName: "spring-core"}, candidateKey{PkgName: "spring-core"},
candidateAddition{AdditionalProducts: []string{"spring_framework", "springsource_spring_framework"}}, candidateAddition{AdditionalProducts: []string{"spring_framework", "springsource_spring_framework"}, AdditionalVendors: []string{"pivotal_software", "springsource", "vmware"}},
}, },
{ {
// example image: docker.io/nuxeo:latest // example image: docker.io/nuxeo:latest