Add package URL support to the CycloneDX presenter (#164)

* add package URL support to the CycloneDX presenter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * wrap license tags with licenses Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2026-11-03 07:56:36 +01:00 · 2020-08-30 21:40:19 -04:00
parent eda0f8c774
commit 8a4886ec0e
27 changed files with 669 additions and 116 deletions
@@ -0,0 +1,136 @@
+package pkg
+
+import (
+	"github.com/anchore/syft/syft/distro"
+	"github.com/sergi/go-diff/diffmatchpatch"
+	"testing"
+)
+
+func TestPackage_pURL(t *testing.T) {
+	tests := []struct {
+		pkg      Package
+		distro   distro.Distro
+		expected string
+	}{
+		{
+			pkg: Package{
+				Name:    "github.com/anchore/syft",
+				Version: "v0.1.0",
+				Type:    GoModulePkg,
+			},
+			expected: "pkg:golang/github.com/anchore/syft@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    WheelPkg,
+			},
+			expected: "pkg:pypi/name@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    EggPkg,
+			},
+			expected: "pkg:pypi/name@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    PythonSetupPkg,
+			},
+			expected: "pkg:pypi/name@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    PythonRequirementsPkg,
+			},
+			expected: "pkg:pypi/name@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    BundlerPkg,
+			},
+			expected: "pkg:gem/name@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    NpmPkg,
+			},
+			expected: "pkg:npm/name@v0.1.0",
+		},
+		{
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    YarnPkg,
+			},
+			expected: "pkg:npm/name@v0.1.0",
+		},
+		{
+			distro: distro.Distro{
+				Type: distro.Ubuntu,
+			},
+			pkg: Package{
+				Name:    "bad-name",
+				Version: "bad-v0.1.0",
+				Type:    DebPkg,
+				Metadata: DpkgMetadata{
+					Package:      "name",
+					Version:      "v0.1.0",
+					Architecture: "amd64",
+				},
+			},
+			expected: "pkg:deb/ubuntu/name@v0.1.0?arch=amd64",
+		},
+		{
+			distro: distro.Distro{
+				Type: distro.CentOS,
+			},
+			pkg: Package{
+				Name:    "bad-name",
+				Version: "bad-v0.1.0",
+				Type:    RpmPkg,
+				Metadata: RpmMetadata{
+					Name:    "name",
+					Version: "v0.1.0",
+					Epoch:   2,
+					Arch:    "amd64",
+					Release: "3",
+				},
+			},
+			expected: "pkg:rpm/centos/name@2:v0.1.0-3?arch=amd64",
+		},
+		{
+			distro: distro.Distro{
+				Type: distro.UnknownDistroType,
+			},
+			pkg: Package{
+				Name:    "name",
+				Version: "v0.1.0",
+				Type:    DebPkg,
+			},
+			expected: "pkg:deb/name@v0.1.0",
+		},
+	}
+
+	for _, test := range tests {
+		t.Run(string(test.pkg.Type)+"|"+test.expected, func(t *testing.T) {
+			actual := test.pkg.PackageURL(test.distro)
+			if actual != test.expected {
+				dmp := diffmatchpatch.New()
+				diffs := dmp.DiffMain(test.expected, actual, true)
+				t.Errorf("diff: %s", dmp.DiffPrettyText(diffs))
+			}
+		})
+	}
+}