feat(elixir): emit dependency relationships from mix.lock (#4985)

adds dependency-of relationships between elixir locked packages, matching how other
ecosystem catalogers (alpine, arch, debian, redhat, python) express the
dependency graph via the shared dependency.Processor/Specifier mechanism.

Signed-off-by: Chris Greeno <cgreeno@gmail.com>
This commit is contained in:
Chris Greeno
2026-06-29 10:22:38 -04:00
committed by GitHub
parent 1143c12a97
commit 37fee88b5c
11 changed files with 4593 additions and 39 deletions
File diff suppressed because it is too large Load Diff
+8 -1
View File
@@ -1,6 +1,6 @@
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "anchore.io/schema/syft/json/16.1.5/document",
"$id": "anchore.io/schema/syft/json/16.1.6/document",
"$ref": "#/$defs/Document",
"$defs": {
"AlpmDbEntry": {
@@ -1267,6 +1267,13 @@
"pkgHashExt": {
"type": "string",
"description": "PkgHashExt is the extended package hash format (inner checksum is deprecated - SHA-256 of concatenated file contents excluding CHECKSUM file, now replaced by outer checksum)"
},
"dependencies": {
"items": {
"type": "string"
},
"type": "array",
"description": "Dependencies are the names of the packages this entry depends on, as\ndeclared in the entry's dependency list within mix.lock. Used to derive\ndependency-of relationships between locked packages."
}
},
"type": "object",