From ea4a6747ebb20f2ff4da842ec4dba285cc487ea6 Mon Sep 17 00:00:00 2001 From: William Murphy Date: Tue, 28 Nov 2023 14:40:03 -0500 Subject: [PATCH] fix: hardcode xalan group ID (#2368) According to maven central, the package called "xalan" should just have the group ID xalan, but currently syft isn't able to find that. Signed-off-by: Will Murphy --- syft/pkg/cataloger/common/cpe/java_groupid_map.go | 1 + 1 file changed, 1 insertion(+) diff --git a/syft/pkg/cataloger/common/cpe/java_groupid_map.go b/syft/pkg/cataloger/common/cpe/java_groupid_map.go index b23a736eb..2b4c55aca 100644 --- a/syft/pkg/cataloger/common/cpe/java_groupid_map.go +++ b/syft/pkg/cataloger/common/cpe/java_groupid_map.go @@ -1199,4 +1199,5 @@ var DefaultArtifactIDToGroupID = map[string]string{ "spring-webflow": "org.springframework.webflow", "spring-ws": "org.springframework.ws", "spring-xml": "org.springframework.ws", + "xalan": "xalan", // see https://mvnrepository.com/artifact/xalan/xalan/2.7.2 }