Add CycloneDX decoder (#811)

syft/pkg/cataloger/rust/cargo_metadata.go

@@ -1,21 +0,0 @@
-package rust
-
-import "github.com/anchore/syft/syft/pkg"
-
-type CargoMetadata struct {
-	Packages []pkg.CargoPackageMetadata `toml:"package"`
-}
-
-// Pkgs returns all of the packages referenced within the Cargo.lock metadata.
-func (m CargoMetadata) Pkgs() []*pkg.Package {
-	pkgs := make([]*pkg.Package, 0)
-
-	for _, p := range m.Packages {
-		if p.Dependencies == nil {
-			p.Dependencies = make([]string, 0)
-		}
-		pkgs = append(pkgs, p.Pkg())
-	}
-
-	return pkgs
-}

syft/pkg/cataloger/rust/parse_cargo_lock.go

@@ -20,7 +20,7 @@ func parseCargoLock(_ string, reader io.Reader) ([]*pkg.Package, []artifact.Rela
 		return nil, nil, fmt.Errorf("unable to load Cargo.lock for parsing: %v", err)
 	}
 
-	metadata := CargoMetadata{}
+	metadata := pkg.CargoMetadata{}
 	err = tree.Unmarshal(&metadata)
 	if err != nil {
 		return nil, nil, fmt.Errorf("unable to parse Cargo.lock: %v", err)