oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-17 08:23:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

correct poetry lock integrity hash claim

Browse Source 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
This commit is contained in:
Alex Goodman 2025-11-14 23:42:39 -05:00
parent 9f9170a5f2
commit 7e330cdff8
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
internal/capabilities/packages.yaml
View File

@ -3001,8 +3001,7 @@ catalogers:
- name: license - name: license
default: true default: true
- name: dependency.depth - name: dependency.depth
default: default: []
- direct
- name: dependency.edges - name: dependency.edges
default: "" default: ""
- name: dependency.kinds - name: dependency.kinds
@ -3622,10 +3621,9 @@ catalogers:
default: false default: false
- name: package_manager.files.digests - name: package_manager.files.digests
default: false default: false
# TODO: we can enhance this to track file hashes from the poetry.lock file
- name: package_manager.package_integrity_hash - name: package_manager.package_integrity_hash
default: true default: false
evidence:
- PythonPoetryLockEntry.PackageHashes
- function: parseRequirementsTxt - function: parseRequirementsTxt
detector: # AUTO-GENERATED detector: # AUTO-GENERATED
method: glob # AUTO-GENERATED method: glob # AUTO-GENERATED