oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-17 16:33:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add spdx relationship encoding for dependencies (#1342)

Browse Source 
Co-authored-by: Keith Zantow <kzantow@gmail.com>
This commit is contained in:
Alex Goodman 2022-11-18 09:40:10 -05:00 committed by GitHub
parent 42cb0a47a4
commit 9afc9231c0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
syft/formats/common/spdxhelpers/to_format_model.go
View File

@ -362,6 +362,8 @@ func lookupRelationship(ty artifact.RelationshipType) (bool, RelationshipType, s
switch ty {
case artifact.ContainsRelationship:
return true, ContainsRelationship, ""
case artifact.DependencyOfRelationship:
return true, DependencyOfRelationship, ""
case artifact.OwnershipByFileOverlapRelationship:
return true, OtherRelationship, fmt.Sprintf("%s: indicates that the parent package claims ownership of a child package since the parent metadata indicates overlap with a location that a cataloger found the child package by", ty)
}