mirror of
https://github.com/anchore/syft.git
synced 2026-10-30 14:02:26 +01:00
When the goModCataloger processes a Replace directive it currently adds the new package to the resulting package list, but does not remove the old one unless the path is unchanged. Based on an existing comment in the code, removing the old one seems to be the intended behavior, and results in a more expected end-result, so this does so. Signed-off-by: Russell Haering <russellhaering@gmail.com>