From 58392a97178728eec07b1139ee34fb6cd47c9d4f Mon Sep 17 00:00:00 2001 From: Will Murphy Date: Mon, 12 May 2025 16:17:18 -0400 Subject: [PATCH] fix: stop emitting redis redis CPE for PHP PECL redis (#3881) This prevents the cpe:a:redis:redis... from being emitted for the PHP Pear / PECL package called redis. Signed-off-by: Will Murphy --- .../internal/cpegenerate/candidate_by_package_type.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/syft/pkg/cataloger/internal/cpegenerate/candidate_by_package_type.go b/syft/pkg/cataloger/internal/cpegenerate/candidate_by_package_type.go index 39b62342a..d3425353a 100644 --- a/syft/pkg/cataloger/internal/cpegenerate/candidate_by_package_type.go +++ b/syft/pkg/cataloger/internal/cpegenerate/candidate_by_package_type.go @@ -630,6 +630,12 @@ var defaultCandidateRemovals = buildCandidateRemovalLookup( candidateKey{PkgName: "grpc"}, candidateRemovals{ProductsToRemove: []string{"grpc"}}, }, + // PHP Packages + { + pkg.PhpPearPkg, + candidateKey{PkgName: "redis"}, + candidateRemovals{ProductsToRemove: []string{"redis"}}, + }, }) // buildCandidateLookup is a convenience function for creating the defaultCandidateAdditions set