From 2293641e3bd628a01bb37639318d62c0ebe89b39 Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Mon, 10 Aug 2026 15:26:29 +0100 Subject: [PATCH] fix: add correct CPE vendor/product candidates for Git for Windows PE binary (#5156) Signed-off-by: Weston Steimel --- .../cataloger/internal/cpegenerate/candidate_for_pe.go | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/syft/pkg/cataloger/internal/cpegenerate/candidate_for_pe.go b/syft/pkg/cataloger/internal/cpegenerate/candidate_for_pe.go index 00a032c5a..c5e29a897 100644 --- a/syft/pkg/cataloger/internal/cpegenerate/candidate_for_pe.go +++ b/syft/pkg/cataloger/internal/cpegenerate/candidate_for_pe.go @@ -32,6 +32,11 @@ func candidateVendorsForPE(p pkg.Package) fieldCandidateSet { candidates.addValue("artifex") } + if product == "git" || fileDesc == "git setup" || company == "the git development community" { + candidates.addValue("git_for_windows_project") + candidates.addValue("gitforwindows") + } + return candidates } @@ -59,5 +64,10 @@ func candidateProductsForPE(p pkg.Package) fieldCandidateSet { candidates.addValue("ghostscript") } + if product == "git" || fileDesc == "git setup" { + candidates.addValue("git_for_windows") + candidates.addValue("git") + } + return candidates }