mirror of
https://github.com/anchore/syft.git
synced 2025-11-18 00:43:20 +01:00
681d250fdc
* add portage as file owners Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update json schema with NPM files Signed-off-by: Alex Goodman <alex.goodman@anchore.com> --------- Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
27 lines
1.3 KiB
Go
27 lines
1.3 KiB
Go
package pkg
|
|
|
|
// GemMetadata represents all metadata parsed from the gemspec file
|
|
type GemMetadata struct {
|
|
Name string `mapstructure:"name" json:"name"`
|
|
Version string `mapstructure:"version" json:"version"`
|
|
// note regarding if Files can contribute to GemMetadata being able to implement FileOwner: this list is a
|
|
// "logical" list of files, not a list of paths that can be used to find the files without additional processing.
|
|
//
|
|
// For example: The "bundler" gem has a file entry of:
|
|
// "lib/bundler/vendor/uri/lib/uri/ldap.rb"
|
|
// but the actual file is located at:
|
|
// "/usr/local/lib/ruby/3.2.0/bundler/vendor/uri/lib/uri/ldap.rb"
|
|
// which do not match (the "lib" prefix is missing even for relative processing).
|
|
//
|
|
// without additional information about:
|
|
// - the gem installation path
|
|
// - the ruby installation path
|
|
// - the ruby version
|
|
// - environment variables (e.g. GEM_HOME) that may affect the gem installation path
|
|
// ... we can't reliably determine the full path to the file on disk, thus cannot implement FileOwner (...yet...).
|
|
Files []string `mapstructure:"files" json:"files,omitempty"`
|
|
Authors []string `mapstructure:"authors" json:"authors,omitempty"`
|
|
Licenses []string `mapstructure:"licenses" json:"licenses,omitempty"`
|
|
Homepage string `mapstructure:"homepage" json:"homepage,omitempty"`
|
|
}
|