mirror of
https://github.com/anchore/syft.git
synced 2026-02-12 10:36:45 +01:00
4c38ee1932
* fix:the os of an elf binary should be detected even when the os version is empty Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore:revoke the update of appCpe Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore:resume the testcase Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * fix:revoke the possible compromise to the json schema Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * fix:align with the json schema Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * add a json schema(pre-relase,may be in conflict with others') Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore:add a json schema Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore:revert the accidental change to 16.1.0 Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * regression/fix:best effort to get the os info Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore:resume the previous json file Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * update the schema ver to 16.2.0 Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore:no breaking behavior Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * chore: follow the guide of the README.md Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * appCpe is temporarily unused Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * preserve json field for osCPE Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Yuntao Hu <victorhu493@gmail.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
61 lines
2.7 KiB
Go
61 lines
2.7 KiB
Go
package pkg
|
|
|
|
import "github.com/anchore/syft/syft/file"
|
|
|
|
// BinarySignature represents a set of matched values within a binary file.
|
|
type BinarySignature struct {
|
|
Matches []ClassifierMatch `mapstructure:"Matches" json:"matches"`
|
|
}
|
|
|
|
// ClassifierMatch represents a single matched value within a binary file and the "class" name the search pattern represents.
|
|
type ClassifierMatch struct {
|
|
Classifier string `mapstructure:"Classifier" json:"classifier"`
|
|
Location file.Location `mapstructure:"Location" json:"location"`
|
|
}
|
|
|
|
// ELFBinaryPackageNoteJSONPayload Represents metadata captured from the .note.package section of an ELF-formatted binary
|
|
type ELFBinaryPackageNoteJSONPayload struct {
|
|
// (these are well-known fields as defined by systemd ELF package metadata "spec" https://systemd.io/ELF_PACKAGE_METADATA/)
|
|
|
|
// Type is the type of the package (e.g. "rpm", "deb", "apk", etc.)
|
|
Type string `json:"type,omitempty"`
|
|
|
|
// Architecture of the binary package (e.g. "amd64", "arm", etc.)
|
|
Architecture string `json:"architecture,omitempty"`
|
|
|
|
// OSCPE is a CPE name for the OS, typically corresponding to CPE_NAME in os-release (e.g. cpe:/o:fedoraproject:fedora:33)
|
|
//
|
|
// Deprecated: in Syft 2.0 the struct tag will be corrected to `osCpe` to match the systemd spec casing.
|
|
OSCPE string `json:"osCPE,omitempty"`
|
|
|
|
// AppCpe is a CPE name for the upstream Application, as found in NVD CPE search (e.g. cpe:2.3:a:gnu:coreutils:5.0)
|
|
AppCpe string `json:"appCpe,omitempty"`
|
|
|
|
// OS is the OS name, typically corresponding to ID in os-release (e.g. "fedora")
|
|
OS string `json:"os,omitempty"`
|
|
|
|
// osVersion is the version of the OS, typically corresponding to VERSION_ID in os-release (e.g. "33")
|
|
OSVersion string `json:"osVersion,omitempty"`
|
|
|
|
/////////////////////////////////////////////////////////////////////////////////
|
|
// (these are additional fields that are not part of the systemd spec)
|
|
|
|
// System is a context-specific name for the system that the binary package is intended to run on or a part of
|
|
System string `json:"system,omitempty"`
|
|
|
|
// Vendor is the individual or organization that produced the source code for the binary
|
|
Vendor string `json:"vendor,omitempty"`
|
|
|
|
// SourceRepo is the URL to the source repository for which the binary was built from
|
|
SourceRepo string `json:"sourceRepo,omitempty"`
|
|
|
|
// Commit is the commit hash of the source repository for which the binary was built from
|
|
Commit string `json:"commit,omitempty"`
|
|
}
|
|
|
|
// PEBinary represents metadata captured from a Portable Executable formatted binary (dll, exe, etc.)
|
|
type PEBinary struct {
|
|
// VersionResources contains key-value pairs extracted from the PE file's version resource section (e.g., FileVersion, ProductName, CompanyName).
|
|
VersionResources KeyValues
|
|
}
|