feat(elixir): emit dependency relationships from mix.lock (#4985)

adds dependency-of relationships between elixir locked packages, matching how other
ecosystem catalogers (alpine, arch, debian, redhat, python) express the
dependency graph via the shared dependency.Processor/Specifier mechanism.

Signed-off-by: Chris Greeno <cgreeno@gmail.com>
This commit is contained in:
Chris Greeno
2026-06-29 10:22:38 -04:00
committed by GitHub
parent 1143c12a97
commit 37fee88b5c
11 changed files with 4593 additions and 39 deletions
+3 -1
View File
@@ -6,10 +6,12 @@ package elixir
import (
"github.com/anchore/syft/syft/pkg"
"github.com/anchore/syft/syft/pkg/cataloger/generic"
"github.com/anchore/syft/syft/pkg/cataloger/internal/dependency"
)
// NewMixLockCataloger returns a cataloger object for Elixir mix.lock files.
func NewMixLockCataloger() pkg.Cataloger {
return generic.NewCataloger("elixir-mix-lock-cataloger").
WithParserByGlobs(parseMixLock, "**/mix.lock")
WithParserByGlobs(parseMixLock, "**/mix.lock").
WithProcessors(dependency.Processor(mixLockDependencySpecifier))
}