syft/internal/relationship at 36d417d52a8adde5e4775a0a63829e1cdc5d7bed - syft - Sa' Rocí Solutions

oss/syft

mirror of https://github.com/anchore/syft.git synced 2026-10-30 22:12:28 +01:00

Files

T

Alex Goodman 01546d4e06 fix: don't index nested packages under the outer archive path

`indexedPaths` added each location's `RealPath`, which for a nested file is the outermost archive. So
`PackagesByPath("/opt/x.jar")` returned every package found inside it at any depth, a root OS package
owning that file got ownership-overlap edges to all of them, and
`ExcludeBinaryPackagesWithFileOwnershipOverlap` then deleted nested binary, ELF and JVM packages.

Packages are now indexed by full path and access path only. An archive's own package still sits at
root coordinates and is found by its path; what's inside it stays linked to it by CONTAINS edges
rather than by ownership of the archive file.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

2026-10-21 11:35:21 -04:00

binary

fix: keep RealPath as top-level, use FullPath and utility functions FullNestedPath, LocalPath, Path

2026-10-19 15:44:37 -04:00

by_file_ownership_test.go

fix: don't index nested packages under the outer archive path

2026-10-21 11:35:21 -04:00

by_file_ownership.go

fix: keep RealPath as top-level, use FullPath and utility functions FullNestedPath, LocalPath, Path

2026-10-19 15:44:37 -04:00

evident_by_test.go

fix: keep RealPath as top-level, use FullPath and utility functions FullNestedPath, LocalPath, Path