mirror of
https://github.com/anchore/syft.git
synced 2026-11-01 06:56:40 +01:00
William Murphy
da3624644a
Add a cataloger that detects installed R packages by looking for DESCRIPTION files. The base R package is now picked up in coverageImage tests in test/cli/packages_cmd_test.go, so increment expected package counts for the tests that use that image. Signed-off-by: Will Murphy <will.murphy@anchore.com>
70 lines
2.3 KiB
Go
70 lines
2.3 KiB
Go
package spdxhelpers
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/anchore/syft/syft/pkg"
|
|
)
|
|
|
|
//nolint:funlen
|
|
func SourceInfo(p pkg.Package) string {
|
|
answer := ""
|
|
switch p.Type {
|
|
case pkg.AlpmPkg:
|
|
answer = "acquired package info from ALPM DB"
|
|
case pkg.RpmPkg:
|
|
answer = "acquired package info from RPM DB"
|
|
case pkg.ApkPkg:
|
|
answer = "acquired package info from APK DB"
|
|
case pkg.DartPubPkg:
|
|
answer = "acquired package info from pubspec manifest"
|
|
case pkg.DebPkg:
|
|
answer = "acquired package info from DPKG DB"
|
|
case pkg.DotnetPkg:
|
|
answer = "acquired package info from dotnet project assets file"
|
|
case pkg.NpmPkg:
|
|
answer = "acquired package info from installed node module manifest file"
|
|
case pkg.PythonPkg:
|
|
answer = "acquired package info from installed python package manifest file"
|
|
case pkg.JavaPkg, pkg.JenkinsPluginPkg:
|
|
answer = "acquired package info from installed java archive"
|
|
case pkg.GemPkg:
|
|
answer = "acquired package info from installed gem metadata file"
|
|
case pkg.GoModulePkg:
|
|
answer = "acquired package info from go module information"
|
|
case pkg.RustPkg:
|
|
answer = "acquired package info from rust cargo manifest"
|
|
case pkg.PhpComposerPkg:
|
|
answer = "acquired package info from PHP composer manifest"
|
|
case pkg.CocoapodsPkg:
|
|
answer = "acquired package info from installed cocoapods manifest file"
|
|
case pkg.ConanPkg:
|
|
answer = "acquired package info from conan manifest"
|
|
case pkg.PortagePkg:
|
|
answer = "acquired package info from portage DB"
|
|
case pkg.HackagePkg:
|
|
answer = "acquired package info from cabal or stack manifest files"
|
|
case pkg.HexPkg:
|
|
answer = "acquired package info from rebar3 or mix manifest file"
|
|
case pkg.LinuxKernelPkg:
|
|
answer = "acquired package info from linux kernel archive"
|
|
case pkg.LinuxKernelModulePkg:
|
|
answer = "acquired package info from linux kernel module files"
|
|
case pkg.NixPkg:
|
|
answer = "acquired package info from nix store path"
|
|
case pkg.Rpkg:
|
|
answer = "acquired package info from R-package DESCRIPTION file"
|
|
default:
|
|
answer = "acquired package info from the following paths"
|
|
}
|
|
if p.FoundBy == "sbom-cataloger" {
|
|
answer = "acquired package info from SBOM"
|
|
}
|
|
var paths []string
|
|
for _, l := range p.Locations.ToSlice() {
|
|
paths = append(paths, l.RealPath)
|
|
}
|
|
|
|
return answer + ": " + strings.Join(paths, ", ")
|
|
}
|