syft/syft/pkg/relationships_evident_by.go

package pkg

import (
	"github.com/anchore/syft/syft/artifact"
)

func RelationshipsEvidentBy(catalog *Catalog) []artifact.Relationship {
	var edges []artifact.Relationship
	for _, p := range catalog.Sorted() {
		for _, l := range p.Locations.ToSlice() {
			if v, exists := l.Annotations[EvidenceAnnotationKey]; !exists || v != PrimaryEvidenceAnnotation {
				// skip non-primary evidence from being expressed as a relationship.
				// note: this may be configurable in the future.
				continue
			}
			edges = append(edges, artifact.Relationship{
				From: p,
				To:   l.Coordinates,
				Type: artifact.EvidentByRelationship,
			})
		}
	}

	return edges
}