mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 08:23:15 +01:00
466da7cbda
Fixes #931 PR #1948 introduces a new implicit exclusion for binary packages that overlap by file ownership and have certain characteristics: 1) the relationship between packages is OwnershipByFileOverlap 2) the parent package is an "os" package - see changelog for included catalogers 3) the child is a synthetic package generated by the binary cataloger - see changelog for included catalogers 4) the package names are identical --------- Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
8 lines
296 B
Docker
8 lines
296 B
Docker
FROM alpine:latest
|
|
|
|
# syft should not longer show the binary package for this image:
|
|
# https://github.com/anchore/syft/issues/931
|
|
# busybox 1.36.1 binary <-- not reported synthetic package overlap
|
|
# busybox 1.36.1-r0 apk
|
|
RUN apk update && apk add busybox
|