mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 16:33:21 +01:00
4194a2cd34
This PR adds DependencyOf relationships when ELF packages have been discovered by the binary cataloger. The discovered file.Executable type has a []ImportedLibraries that's read from the file when discovered by syft. By mapping these imported libraries back to the package collection, syft is able to create relationships showing which packages are dependencies of other packages by just reading metadata from the ELF executable. --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Brian Ebarb <ebarb.brian@sers.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
60 lines
1.6 KiB
Go
60 lines
1.6 KiB
Go
package binary
|
|
|
|
import (
|
|
"github.com/scylladb/go-set/strset"
|
|
|
|
"github.com/anchore/syft/syft/artifact"
|
|
)
|
|
|
|
type relationshipIndex struct {
|
|
typesByFromTo map[artifact.ID]map[artifact.ID]*strset.Set
|
|
additional []artifact.Relationship
|
|
}
|
|
|
|
func newRelationshipIndex(existing ...artifact.Relationship) *relationshipIndex {
|
|
r := &relationshipIndex{
|
|
typesByFromTo: make(map[artifact.ID]map[artifact.ID]*strset.Set),
|
|
additional: make([]artifact.Relationship, 0),
|
|
}
|
|
for _, rel := range existing {
|
|
r.track(rel)
|
|
}
|
|
return r
|
|
}
|
|
|
|
// track this relationship as "exists" in the index (this is used to prevent duplicate relationships from being added).
|
|
// returns true if the relationship is new to the index, false otherwise.
|
|
func (i *relationshipIndex) track(r artifact.Relationship) bool {
|
|
fromID := r.From.ID()
|
|
if _, ok := i.typesByFromTo[fromID]; !ok {
|
|
i.typesByFromTo[fromID] = make(map[artifact.ID]*strset.Set)
|
|
}
|
|
|
|
toID := r.To.ID()
|
|
if _, ok := i.typesByFromTo[fromID][toID]; !ok {
|
|
i.typesByFromTo[fromID][toID] = strset.New()
|
|
}
|
|
|
|
var exists bool
|
|
if i.typesByFromTo[fromID][toID].Has(string(r.Type)) {
|
|
exists = true
|
|
}
|
|
|
|
i.typesByFromTo[fromID][toID].Add(string(r.Type))
|
|
return !exists
|
|
}
|
|
|
|
// add a new relationship to the index, returning true if the relationship is new to the index, false otherwise (thus is a duplicate).
|
|
// nolint:unparam
|
|
func (i *relationshipIndex) add(r artifact.Relationship) bool {
|
|
if i.track(r) {
|
|
i.additional = append(i.additional, r)
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
|
|
func (i *relationshipIndex) newRelationships() []artifact.Relationship {
|
|
return i.additional
|
|
}
|