oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-31 22:46:36 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat(elixir): emit dependency relationships from mix.lock (#4985)

Browse Source 
adds dependency-of relationships between elixir locked packages, matching how other
ecosystem catalogers (alpine, arch, debian, redhat, python) express the
dependency graph via the shared dependency.Processor/Specifier mechanism.

Signed-off-by: Chris Greeno <cgreeno@gmail.com>
This commit is contained in:
Chris Greeno
2026-06-29 10:22:38 -04:00
committed by GitHub
parent 1143c12a97
commit 37fee88b5c
11 changed files with 4593 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
syft/pkg/elixir.go
+5
View File
@@ -13,4 +13,9 @@ type ElixirMixLockEntry struct {
// PkgHashExt is the extended package hash format (inner checksum is deprecated - SHA-256 of concatenated file contents excluding CHECKSUM file, now replaced by outer checksum)
PkgHashExt string `mapstructure:"pkgHashExt" json:"pkgHashExt"`
// Dependencies are the names of the packages this entry depends on, as
// declared in the entry's dependency list within mix.lock. Used to derive
// dependency-of relationships between locked packages.
Dependencies []string `mapstructure:"dependencies" json:"dependencies,omitempty"`
}