oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-02-12 02:26:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: CPE generation for django (#2068)

Browse Source 
Signed-off-by: witchcraze <witchcraze@gmail.com>
This commit is contained in:
witchcraze 2023-08-28 21:28:01 +09:00 committed by GitHub
parent dd09e0362e
commit cedfa05e93
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
syft/pkg/cataloger/common/cpe/candidate_by_package_type.go
View File

@ -183,6 +183,11 @@ var defaultCandidateAdditions = buildCandidateLookup(
candidateKey{PkgName: "pip"},
candidateAddition{AdditionalVendors: []string{"pypa"}},
},
{
pkg.PythonPkg,
candidateKey{PkgName: "Django"},
candidateAddition{AdditionalVendors: []string{"djangoproject"}},
},
// Alpine packages
{
pkg.ApkPkg,

8
syft/pkg/cataloger/common/cpe/generate_test.go
View File

@ -896,6 +896,14 @@ func TestCandidateVendor(t *testing.T) {
},
expected: []string{"apache"},
},
{
name: "Django",
p: pkg.Package{
Name: "Django",
Type: pkg.PythonPkg,
},
expected: []string{"djangoproject" /* <-- known good names | default guess --> */, "Django"},
},
}
for _, test := range tests {