chore(deps): update stereoscope to 3610f4ef3e83e8ff2edf8859e8916bce326fa260 (#2336)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: wagoodman <wagoodman@users.noreply.github.com>

cmd/syft/cli/cli.go

@@ -23,8 +23,8 @@ import (
 // It also constructs the syft attest command and the syft version command.
 // `RunE` is the earliest that the complete application configuration can be loaded.
 func Application(id clio.Identification) clio.Application {
-	app, rootCmd := create(id, os.Stdout)
-	return ui.StdoutLoggingApplication(app, rootCmd)
+	app, _ := create(id, os.Stdout)
+	return app
 }
 
 // Command returns the root command for the syft CLI application. This is useful for embedding the entire syft CLI

cmd/syft/cli/commands/attest.go

@@ -13,6 +13,7 @@ import (
 	"github.com/anchore/clio"
 	"github.com/anchore/stereoscope/pkg/image"
 	"github.com/anchore/syft/cmd/syft/cli/options"
+	"github.com/anchore/syft/cmd/syft/internal/ui"
 	"github.com/anchore/syft/internal"
 	"github.com/anchore/syft/internal/bus"
 	"github.com/anchore/syft/internal/file"
@@ -78,6 +79,9 @@ func Attest(app clio.Application) *cobra.Command {
 		Args:    validatePackagesArgs,
 		PreRunE: applicationUpdateCheck(id, &opts.UpdateCheck),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			restoreStdout := ui.CaptureStdoutToTraceLog()
+			defer restoreStdout()
+
 			return runAttest(id, opts, args[0])
 		},
 	}, opts)

cmd/syft/cli/commands/convert.go

@@ -9,6 +9,7 @@ import (
 
 	"github.com/anchore/clio"
 	"github.com/anchore/syft/cmd/syft/cli/options"
+	"github.com/anchore/syft/cmd/syft/internal/ui"
 	"github.com/anchore/syft/internal"
 	"github.com/anchore/syft/internal/log"
 	"github.com/anchore/syft/syft/format"
@@ -47,6 +48,9 @@ func Convert(app clio.Application) *cobra.Command {
 		Args:    validateConvertArgs,
 		PreRunE: applicationUpdateCheck(id, &opts.UpdateCheck),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			restoreStdout := ui.CaptureStdoutToTraceLog()
+			defer restoreStdout()
+
 			return RunConvert(opts, args[0])
 		},
 	}, opts)

cmd/syft/cli/commands/packages.go

@@ -10,6 +10,7 @@ import (
 	"github.com/anchore/stereoscope/pkg/image"
 	"github.com/anchore/syft/cmd/syft/cli/eventloop"
 	"github.com/anchore/syft/cmd/syft/cli/options"
+	"github.com/anchore/syft/cmd/syft/internal/ui"
 	"github.com/anchore/syft/internal"
 	"github.com/anchore/syft/internal/file"
 	"github.com/anchore/syft/internal/log"
@@ -84,6 +85,9 @@ func Packages(app clio.Application) *cobra.Command {
 		Args:    validatePackagesArgs,
 		PreRunE: applicationUpdateCheck(id, &opts.UpdateCheck),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			restoreStdout := ui.CaptureStdoutToTraceLog()
+			defer restoreStdout()
+
 			return runPackages(id, opts, args[0])
 		},
 	}, opts)

cmd/syft/cli/commands/poweruser.go

@@ -12,6 +12,7 @@ import (
 	"github.com/anchore/stereoscope/pkg/image"
 	"github.com/anchore/syft/cmd/syft/cli/eventloop"
 	"github.com/anchore/syft/cmd/syft/cli/options"
+	"github.com/anchore/syft/cmd/syft/internal/ui"
 	"github.com/anchore/syft/internal"
 	"github.com/anchore/syft/syft/artifact"
 	"github.com/anchore/syft/syft/format/syftjson"
@@ -58,6 +59,9 @@ func PowerUser(app clio.Application) *cobra.Command {
 		Hidden:  true,
 		PreRunE: applicationUpdateCheck(id, &opts.UpdateCheck),
 		RunE: func(cmd *cobra.Command, args []string) error {
+			restoreStdout := ui.CaptureStdoutToTraceLog()
+			defer restoreStdout()
+
 			return runPowerUser(id, opts, args[0])
 		},
 	}, opts)

cmd/syft/internal/ui/capture.go

@@ -8,13 +8,19 @@ import (
 	"github.com/anchore/syft/internal/log"
 )
 
-// capture replaces the provided *os.File and redirects output to the provided writer. The return value is a function,
-// which is used to stop the current capturing of output and restore the original file.
+const defaultStdoutLogBufferSize = 1024
+
+// CaptureStdoutToTraceLog replaces stdout and redirects output to the log as trace lines. The return value is a
+// function, which is used to stop the current capturing of output and restore the original file.
 // Example:
 //
-//	restore := capture(&os.Stderr, writer)
-//	// here, stderr will be captured and redirected to the provided writer
-//	restore() // block until the output has all been sent to the writer and restore the original stderr
+//	restore := CaptureStdoutToTraceLog()
+//	// here, stdout will be captured and redirected to the provided writer
+//	restore() // block until the output has all been sent to the writer and restore the original stdout
+func CaptureStdoutToTraceLog() (close func()) {
+	return capture(&os.Stdout, newLogWriter(), defaultStdoutLogBufferSize)
+}
+
 func capture(target **os.File, writer io.Writer, bufSize int) (close func()) {
 	original := *target
 

cmd/syft/internal/ui/log_writer.go

@@ -25,7 +25,7 @@ func (l *logWriter) Write(data []byte) (n int, err error) {
 	s, err := l.r.ReadString('\n')
 	s = strings.TrimRight(s, "\n")
 	for s != "" {
-		log.Trace(s)
+		log.Trace("[unexpected stdout] " + s)
 		n += len(s)
 		if err != nil {
 			break

cmd/syft/internal/ui/log_writer_test.go

@@ -23,14 +23,14 @@ func Test_logWriter(t *testing.T) {
 
 	_, _ = w.Write([]byte("a\nvalue"))
 
-	expected := []any{"a", "value"}
+	expected := []any{"[unexpected stdout] a", "[unexpected stdout] value"}
 	require.Equal(t, expected, bl.values)
 
 	bl.values = nil
 	_, _ = w.Write([]byte("some"))
 	_, _ = w.Write([]byte("thing"))
 
-	expected = []any{"some", "thing"}
+	expected = []any{"[unexpected stdout] some", "[unexpected stdout] thing"}
 	require.Equal(t, expected, bl.values)
 }
 

cmd/syft/internal/ui/stdout_logging_application.go

@@ -1,63 +0,0 @@
-package ui
-
-import (
-	"os"
-
-	"github.com/spf13/cobra"
-	"github.com/spf13/pflag"
-
-	"github.com/anchore/clio"
-)
-
-const defaultStdoutLogBufferSize = 1024
-
-// StdoutLoggingApplication wraps the provided app in a clio.Application, which captures non-report data
-// written to os.Stdout and instead logs it to the internal logger. It also modifies the rootCmd help function
-// to restore os.Stdout in order for Cobra to properly print help to stdout
-func StdoutLoggingApplication(app clio.Application, rootCmd *cobra.Command) clio.Application {
-	return &stdoutLoggingApplication{
-		delegate: app,
-		rootCmd:  rootCmd,
-	}
-}
-
-// stdoutLoggingApplication is a clio.Application, which captures data written to os.Stdout prior to the report
-// being output and instead sends non-report output to the internal logger
-type stdoutLoggingApplication struct {
-	delegate clio.Application
-	rootCmd  *cobra.Command
-}
-
-func (s *stdoutLoggingApplication) ID() clio.Identification {
-	return s.delegate.ID()
-}
-
-func (s *stdoutLoggingApplication) AddFlags(flags *pflag.FlagSet, cfgs ...any) {
-	s.delegate.AddFlags(flags, cfgs...)
-}
-
-func (s *stdoutLoggingApplication) SetupCommand(cmd *cobra.Command, cfgs ...any) *cobra.Command {
-	return s.delegate.SetupCommand(cmd, cfgs...)
-}
-
-func (s *stdoutLoggingApplication) SetupRootCommand(cmd *cobra.Command, cfgs ...any) *cobra.Command {
-	return s.delegate.SetupRootCommand(cmd, cfgs...)
-}
-
-func (s *stdoutLoggingApplication) Run() {
-	// capture everything written to stdout that is not report output
-	restoreStdout := capture(&os.Stdout, newLogWriter(), defaultStdoutLogBufferSize)
-	defer restoreStdout()
-
-	// need to restore stdout for cobra to properly output help text to the user on stdout
-	baseHelpFunc := s.rootCmd.HelpFunc()
-	defer s.rootCmd.SetHelpFunc(baseHelpFunc)
-	s.rootCmd.SetHelpFunc(func(command *cobra.Command, strings []string) {
-		restoreStdout()
-		baseHelpFunc(command, strings)
-	})
-
-	s.delegate.Run()
-}
-
-var _ clio.Application = (*stdoutLoggingApplication)(nil)

go.mod

@@ -16,7 +16,7 @@ require (
 	github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04
 	github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b
 	github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501
-	github.com/anchore/stereoscope v0.0.0-20231027135531-5909e353ee88
+	github.com/anchore/stereoscope v0.0.0-20231117203853-3610f4ef3e83
 	// we are hinting brotli to latest due to warning when installing archiver v3:
 	// go: warning: github.com/andybalholm/brotli@v1.0.1: retracted by module author: occasional panics and data corruption
 	github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46
@@ -76,8 +76,6 @@ require (
 	modernc.org/sqlite v1.27.0
 )
 
-require github.com/spf13/pflag v1.0.5
-
 require (
 	dario.cat/mergo v1.0.0 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
@@ -185,6 +183,7 @@ require (
 	github.com/skeema/knownhosts v1.2.0 // indirect
 	github.com/spf13/cast v1.5.1 // indirect
 	github.com/spf13/jwalterweatherman v1.1.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/spf13/viper v1.16.0 // indirect
 	github.com/subosito/gotenv v1.4.2 // indirect
 	github.com/sylabs/sif/v2 v2.11.5 // indirect

go.sum

@@ -112,8 +112,8 @@ github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b h1:e1bmaoJfZV
 github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b/go.mod h1:Bkc+JYWjMCF8OyZ340IMSIi2Ebf3uwByOk6ho4wne1E=
 github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501 h1:AV7qjwMcM4r8wFhJq3jLRztew3ywIyPTRapl2T1s9o8=
 github.com/anchore/packageurl-go v0.1.1-0.20230104203445-02e0a6721501/go.mod h1:Blo6OgJNiYF41ufcgHKkbCKF2MDOMlrqhXv/ij6ocR4=
-github.com/anchore/stereoscope v0.0.0-20231027135531-5909e353ee88 h1:2fQngWFSfBIUWuMGo6qy+jVTyrMNuY+eL5IkE36oTJo=
-github.com/anchore/stereoscope v0.0.0-20231027135531-5909e353ee88/go.mod h1:GKAnytSVV1hoqB5r5Gd9M5Ph3Rzqq0zPdEJesewjC2w=
+github.com/anchore/stereoscope v0.0.0-20231117203853-3610f4ef3e83 h1:mxGIOmj+asEm8LUkPTG3/v0hi27WIlDVjiEVsUB9eqY=
+github.com/anchore/stereoscope v0.0.0-20231117203853-3610f4ef3e83/go.mod h1:GKAnytSVV1hoqB5r5Gd9M5Ph3Rzqq0zPdEJesewjC2w=
 github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8=
 github.com/andybalholm/brotli v1.0.1/go.mod h1:loMXtMfwqflxFJPmdbJO0a3KNoPuLBgiu3qAvBg8x/Y=
 github.com/andybalholm/brotli v1.0.4 h1:V7DdXeJtZscaqfNuAdSRuRFzuiKlHSC/Zh3zl9qY3JY=

test/cli/version_cmd_test.go

@@ -0,0 +1,29 @@
+package cli
+
+import (
+	"testing"
+)
+
+func TestVersionCmdPrintsToStdout(t *testing.T) {
+	tests := []struct {
+		name       string
+		env        map[string]string
+		assertions []traitAssertion
+	}{
+		{
+			name: "version command prints to stdout",
+			assertions: []traitAssertion{
+				assertInOutput("Version:"),
+			},
+		},
+	}
+
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			pkgCmd, pkgsStdout, pkgsStderr := runSyft(t, test.env, "version")
+			for _, traitFn := range test.assertions {
+				traitFn(t, pkgsStdout, pkgsStderr, pkgCmd.ProcessState.ExitCode())
+			}
+		})
+	}
+}