oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-17 16:33:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

do not search binary contents for version for go package (#3874)

Browse Source 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
This commit is contained in:
Alex Goodman 2025-05-09 13:49:17 -04:00 committed by GitHub
parent abe5e27b4b
commit f9d0fa81ab
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
syft/pkg/cataloger/golang/config.go
View File

@ -91,7 +91,7 @@ func defaultGoModDir() string {
func DefaultMainModuleVersionConfig() MainModuleVersionConfig { func DefaultMainModuleVersionConfig() MainModuleVersionConfig {
return MainModuleVersionConfig{ return MainModuleVersionConfig{
FromLDFlags: true, FromLDFlags: true,
FromContents: true, FromContents: false,
FromBuildSettings: true, FromBuildSettings: true,
} }
} }

8
syft/pkg/cataloger/golang/parse_go_binary_test.go
View File

@ -855,6 +855,14 @@ func TestBuildGoPkgInfo(t *testing.T) {
}, },
{ {
name: "parse main mod and replace devel with pattern from binary contents", name: "parse main mod and replace devel with pattern from binary contents",
cfg: func() *CatalogerConfig {
c := DefaultCatalogerConfig()
// off by default
assert.False(t, c.MainModuleVersion.FromContents)
// override to true for this test
c.MainModuleVersion.FromContents = true
return &c
}(),
mod: &extendedBuildInfo{ mod: &extendedBuildInfo{
BuildInfo: &debug.BuildInfo{ BuildInfo: &debug.BuildInfo{
GoVersion: goCompiledVersion, GoVersion: goCompiledVersion,