Files
syft/syft/pkg
Alex Goodman 47d4b665cf fix: only skip META-INF/maven poms inside an extracted java archive
`isArchiveMetaPom` was an unconditional `strings.Contains(path, "META-INF/maven/")`, so the pom cataloger dropped real poms everywhere, even with the feature off: exploded wars (`WEB-INF/classes/META-INF/maven/...`), test fixtures under `src/test/resources`, source tarballs. That's a regression on the default path.

the skip exists because inside a jar those poms are raw build copies that java already covers from `pom.properties`. So it now applies only when the traversal on the context is a java archive. Outside one, or inside a tarball java doesn't describe, the poms are cataloged as before this PR.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
2026-09-24 13:38:19 -04:00
..
2026-04-15 10:01:39 -04:00
2026-06-30 10:32:57 -04:00
2026-06-23 10:58:22 -04:00
2026-04-15 10:01:39 -04:00
2025-10-28 09:35:11 -04:00