oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-17 16:33:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

index cpes for github repos

Browse Source 
Signed-off-by: Weston Steimel <commits@weston.slmail.me>
This commit is contained in:
Weston Steimel 2024-05-28 17:45:42 +01:00
parent 4267bea068
commit 78167f1492
No known key found for this signature in database
GPG Key ID: E530F3AC99ABCABF
2 changed files with 30992 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30963
syft/pkg/cataloger/internal/cpegenerate/dictionary/data/cpe-index.json
View File

File diff suppressed because it is too large Load Diff

29
syft/pkg/cataloger/internal/cpegenerate/dictionary/index-generator/generate.go
View File

@ -125,6 +125,7 @@ const (
prefixForWordpressThemesTracBrowser = "https://themes.trac.wordpress.org/browser/"
prefixForWordpressThemesTracLog = "https://themes.trac.wordpress.org/log/"
prefixForWordpressThemesWordfence = "https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/"
prefixForGitHubRepo = "https://github.com/"
)
// indexCPEList creates an index of CPEs by ecosystem.
@ -181,6 +182,10 @@ func indexCPEList(list CpeList) *dictionary.Indexed {
addEntryForWordpressTheme(indexed, ref, cpeItemName)
}
if strings.HasPrefix(ref, prefixForGitHubRepo) {
addEntryForGitHubRepo(indexed, ref, cpeItemName)
}
}
}
@ -199,6 +204,30 @@ func updateIndex(indexed *dictionary.Indexed, ecosystem string, pkgName string,
indexed.EcosystemPackages[ecosystem][pkgName].Add(cpe)
}
func addEntryForGitHubRepo(indexed *dictionary.Indexed, ref string, cpeItemName string) {
// Prune off the non-package-name parts of the URL
ref = strings.TrimPrefix(ref, prefixForGitHubRepo)
ref = strings.Split(ref, "?")[0]
components := strings.Split(ref, "/")
if len(components) < 2 {
return
}
owner := strings.ToLower(components[0])
project := strings.ToLower(components[1])
if owner == "advisories" {
return
}
if owner == "cveproject" && project == "cvelist" {
return
}
updateIndex(indexed, "github", owner+"/"+project, cpeItemName)
}
func addEntryForWordpressPlugin(indexed *dictionary.Indexed, ref string, cpeItemName string) {
// Prune off the non-package-name parts of the URL
ref = strings.TrimPrefix(ref, prefixForWordpressPlugins)