oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-11 21:57:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,520 Commits 63 Branches 272 Tags
392539dc28bd489f94e2a28edf989b738b938d01
Commit Graph
2 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sueun ChoandChristopher Phillips 93cf89363b fix(rpm): keep the epoch when parsing RPM manifest packages (#5201) 
---------

Signed-off-by: Sueun Cho <sueun.dev@gmail.com>
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
 2026-08-21 14:47:23 -04:00
Sueun Cho fd4796b0d8 fix(python): keep epoch-pinned requirements in the SBOM (#5161) 
parsePinnedVersion rejected any version constraint containing "!" to
skip the "!=" exclusion operator. PEP 440 epochs use "!" as well
(e.g. "1!2.0.0"), so an exact pin like "pkg == 1!2.0.0" was treated as
unparseable and returned "". parseRequirementsTxt drops a requirement
whose version resolves to "", so the package never made it into the
SBOM at all in either the pinned or guessed path.

Check for the "!=" operator as a substring instead of the bare "!"
character, which leaves the epoch separator alone.

Signed-off-by: Sueun Cho <sueun.dev@gmail.com>
 2026-08-20 13:06:17 +00:00