oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-18 00:43:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

remove "package-of" relationship (in favor of "contains")

Browse Source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
This commit is contained in:
Alex Goodman 2021-11-17 14:49:05 -05:00
parent d52894ce86
commit d20f1010db
No known key found for this signature in database
GPG Key ID: 5CB45AE22BAB7EA7
3 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
internal/formats/spdx22json/to_format_model.go
View File

@ -129,7 +129,7 @@ func toPackages(catalog *pkg.Catalog, relationships []artifact.Relationship) []m
func fileIDsForPackage(packageSpdxID string, relationships []artifact.Relationship) (fileIDs []string) {
for _, relationship := range relationships {
if relationship.Type != artifact.PackageOfRelationship {
if relationship.Type != artifact.ContainsRelationship {
continue
}
@ -252,8 +252,8 @@ func toRelationships(relationships []artifact.Relationship) (result []model.Rela
func lookupRelationship(ty artifact.RelationshipType) (bool, model.RelationshipType, string) {
switch ty {
case artifact.PackageOfRelationship:
return true, model.PackageOfRelationship, ""
case artifact.ContainsRelationship:
return true, model.ContainsRelationship, ""
case artifact.OwnershipByFileOverlapRelationship:
return true, model.OtherRelationship, fmt.Sprintf("%s: indicates that the parent package claims ownership of a child package since the parent metadata indicates overlap with a location that a cataloger found the child package by", ty)
}

5
syft/artifact/relationship.go
View File

@ -7,9 +7,8 @@ const (
// has been completed.
OwnershipByFileOverlapRelationship RelationshipType = "ownership-by-file-overlap"
// PackageOfRelationship (supports any-to-package linkages) is a proxy for the SPDX 2.2 PACKAGE_OF
// relationship which is defined as: "to be used when artifact X is used as a package as part of package Y"
PackageOfRelationship RelationshipType = "package-of"
// ContainsRelationship (supports any-to-any linkages) is a proxy for the SPDX 2.2 CONTAINS relationship.
ContainsRelationship RelationshipType = "contains"
)
type RelationshipType string

6
syft/pkg/cataloger/catalog.go
View File

@ -119,9 +119,9 @@ func packageFileOwnershipRelationships(p pkg.Package, resolver source.FilePathRe
for _, l := range locations {
relationships = append(relationships, artifact.Relationship{
From: l.Coordinates,
To: p,
Type: artifact.PackageOfRelationship,
From: p,
To: l.Coordinates,
Type: artifact.ContainsRelationship,
})
}
}