oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-01 23:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: add package for go compiler given binary detection (#2195)

Browse Source 
adds a unique synthetic package to the SBOM output that represents the go compiler when it is detected as a part of a package discovered by the go binary cataloger.

When using an SBOM generated by syft - downstream vulnerability scanners now have the opportunity to detect/report on the PURL/CPEs attached to the new stdlib package.
---------

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
This commit is contained in:
Christopher Angelo Phillips
2023-10-06 13:15:50 -04:00
committed by GitHub
parent 87e57aa925
commit f6c8057977
6 changed files with 175 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/integration/test-fixtures/image-golang-compiler/Dockerfile
+1
View File
@@ -0,0 +1 @@
FROM golang:1.18.10-alpine