Alex Goodman
78f1d44e3c
fix: restore case-insensitive java globbing for licenses, version and nested jars
...
The `archiveEntries` refactor dropped `GlobMatch`'s case-insensitive flag, so with nested cataloging
off (the default) three lookups that main matched regardless of case became case-sensitive:
- license files under `/META-INF/*` and `/*` (`meta-inf/LICENSE` was missed)
- `/version.properties`
- the `**/*.jar`, `**/*.war` check behind the "nested archives not cataloged" unknown, so `LIB.JAR`
slipped past it
`archiveEntries` now has a `globFold` for those call sites. The zip side restores
`GlobMatch(true, ...)`, and the resolver side matches case-folded over every entry, since resolver
globs are case-sensitive.
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-10-21 11:37:45 -04:00
Keith Zantow
47cafae01b
chore: simplify and cleanup
...
Signed-off-by: Keith Zantow <keith.zantow@anchore.com >
2026-09-22 00:23:36 -04:00
Keith Zantow
9e3150b7ee
fix: java archives excluded due to incorrect license glob results ( #4449 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2025-12-08 15:58:13 -05:00
Kudryavcev Nikolay
89842bd2f6
chore: migrate syft to use mholt/archives instead of anchore fork ( #4029 )
...
---------
Signed-off-by: Kudryavcev Nikolay <kydry.nikolau@gmail.com >
Signed-off-by: Christopher Phillips <spiffcs@users.noreply.github.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-11-13 23:04:43 +00:00
anchore-actions-token-generator[bot] and spiffcs
f11377fe30
chore(deps): update tools to latest versions ( #3775 )
...
---------
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
2025-04-03 17:35:26 +00:00
Keith Zantow and Alex Goodman
ccbee94b87
feat: report unknowns in sbom ( #2998 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-10-07 16:11:37 -04:00
Colm O hEigeartaigh
1daf18fee9
feat: Perform case insensitive matching on Java license files ( #2235 )
...
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org >
2023-10-25 09:51:59 -04:00
Alex Goodman
7018573bf7
Remove internal string set ( #2219 )
...
* remove internal string set
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* incorporate changes from #2227
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* beef up the pkg.License.Merg() doc string
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-10-17 12:52:11 -04:00
Alex Goodman
6a398f9771
update zip util tests
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-06-04 12:11:49 -04:00
Alex Goodman
bf1bf057ab
add and update zip util tests with ZipReadCloser coverage
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-06-04 12:11:49 -04:00
Alex Goodman
c892c3609e
improve doc comments
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2020-11-17 12:37:13 -05:00
Dan Luhring
bffc4713a7
Update zip archive handling to match globs as expected ( #244 )
...
* Refactor zip file tests
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Add glob support for leading slashes
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Update zip testing to account for glob matching
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Ignore .DS_STORE
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Improve normalization of zip entry names
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Rename zip test helpers file
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
2020-10-28 16:50:40 -04:00
Alex Goodman
26855a2a9e
ignore apk xattr file checksum + remove log.Errorf error wraps ( #192 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2020-09-28 17:22:17 -04:00
Alex Goodman
a4016d35ce
rename to syft
2020-07-23 20:54:04 -04:00
Alex Goodman
66a16a67fd
Add support for detecting nested java archives ( #77 )
...
* with sb build app
* test nested jar support
* pin jdk version during parse test (but dont compare version)
2020-07-15 07:42:35 -04:00