Files
syft/syft/pkg/cataloger
Juan 5ec416cb24 fix: do not generate CPEs for msrc-kb packages (#5510)
A msrc-kb package's name is an MSRC product ID and its version a KB
number, so the generic generator produced CPEs such as
cpe:2.3:a:12437:12437:935509:*:*:*:*:*:*:*. A KB is a patch rather than
a product and has no CPE representation; these packages are matched
against MSRC data by name and version. Skip generation for them, as is
already done for ML model packages. The dictionary lookup already
returns nothing for this type.

Signed-off-by: juanjsebgarcia <github@juangarcia.co.uk>
2026-11-02 15:52:38 -05:00
..
2026-10-29 17:33:07 -04:00
2026-10-29 17:33:07 -04:00
…
2026-10-29 17:33:07 -04:00
2026-10-29 17:33:07 -04:00
2026-10-29 17:33:07 -04:00
2026-09-30 10:58:11 -04:00