add artifact.Identifiable by Identity() method

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

internal/formats/syftjson/to_format_model.go

@@ -93,8 +93,8 @@ func toRelationshipModel(relationships []artifact.Relationship) []model.Relation
 	result := make([]model.Relationship, len(relationships))
 	for i, r := range relationships {
 		result[i] = model.Relationship{
-			Parent:   string(r.From),
+			Parent:   string(r.From.Identity()),
-			Child:    string(r.To),
+			Child:    string(r.To.Identity()),
 			Type:     string(r.Type),
 			Metadata: r.Data,
 		}

syft/artifact/id.go

@@ -2,3 +2,7 @@ package artifact
 
 // ID represents a unique value for each package added to a package catalog.
 type ID string
+
+type Identifiable interface {
+	Identity() ID
+}

syft/artifact/relationship.go

@@ -8,8 +8,8 @@ const (
 type RelationshipType string
 
 type Relationship struct {
-	From ID               `json:"from"`
+	From Identifiable     `json:"from"`
-	To   ID               `json:"to"`
+	To   Identifiable     `json:"to"`
 	Type RelationshipType `json:"type"`
 	Data interface{}      `json:"data,omitempty"`
 }

syft/pkg/ownership_by_files_relationship.go

@@ -28,8 +28,8 @@ func ownershipByFilesRelationships(catalog *Catalog) []artifact.Relationship {
 	for parent, children := range relationships {
 		for child, files := range children {
 			edges = append(edges, artifact.Relationship{
-				From: parent,
+				From: catalog.byID[parent],
-				To:   child,
+				To:   catalog.byID[child],
 				Type: artifact.OwnershipByFileOverlapRelationship,
 				Data: ownershipByFilesMetadata{
 					Files: files.List(),

syft/pkg/ownership_by_files_relationship_test.go

@@ -10,7 +10,16 @@ import (
 	"github.com/anchore/syft/syft/source"
 )
 
+type node struct {
+	id string
+}
+
+func (n node) Identity() artifact.ID {
+	return artifact.ID(n.id)
+}
+
 func TestOwnershipByFilesRelationship(t *testing.T) {
+
 	tests := []struct {
 		name              string
 		pkgs              []Package
@@ -58,8 +67,8 @@ func TestOwnershipByFilesRelationship(t *testing.T) {
 			},
 			expectedRelations: []artifact.Relationship{
 				{
-					From: "parent",
+					From: node{"parent"},
-					To:   "child",
+					To:   node{"child"},
 					Type: artifact.OwnershipByFileOverlapRelationship,
 					Data: ownershipByFilesMetadata{
 						Files: []string{
@@ -111,8 +120,8 @@ func TestOwnershipByFilesRelationship(t *testing.T) {
 			},
 			expectedRelations: []artifact.Relationship{
 				{
-					From: "parent",
+					From: node{"parent"},
-					To:   "child",
+					To:   node{"child"},
 					Type: artifact.OwnershipByFileOverlapRelationship,
 					Data: ownershipByFilesMetadata{
 						Files: []string{

syft/pkg/package.go

@@ -30,6 +30,11 @@ type Package struct {
 	Metadata     interface{}  // additional data found while parsing the package source
 }
 
+func (p Package) Identity() artifact.ID {
+	// TODO: tie this into the fingerprint system on rebase
+	return p.ID
+}
+
 // Stringer to represent a package.
 func (p Package) String() string {
 	return fmt.Sprintf("Pkg(type=%s, name=%s, version=%s)", p.Type, p.Name, p.Version)