mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 08:23:15 +01:00
6d5ff0fd8e
* add marking package relations by file ownership Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * correct json schema version; ensure fileOwners dont return dups; pin test pkg versions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract package relationships into separate section Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * pull in client-go features for import of PackageRelationships Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * move unit test for ownership by files relationship further down Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename relationship to "ownership-by-file-overlap" Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
66 lines
1.9 KiB
Go
66 lines
1.9 KiB
Go
package pkg
|
|
|
|
import (
|
|
"sort"
|
|
|
|
"github.com/anchore/syft/syft/distro"
|
|
"github.com/package-url/packageurl-go"
|
|
"github.com/scylladb/go-set/strset"
|
|
)
|
|
|
|
const DpkgDbGlob = "**/var/lib/dpkg/status"
|
|
|
|
var _ fileOwner = (*DpkgMetadata)(nil)
|
|
|
|
// DpkgMetadata represents all captured data for a Debian package DB entry; available fields are described
|
|
// at http://manpages.ubuntu.com/manpages/xenial/man1/dpkg-query.1.html in the --showformat section.
|
|
type DpkgMetadata struct {
|
|
Package string `mapstructure:"Package" json:"package"`
|
|
Source string `mapstructure:"Source" json:"source"`
|
|
Version string `mapstructure:"Version" json:"version"`
|
|
SourceVersion string `mapstructure:"SourceVersion" json:"sourceVersion"`
|
|
Architecture string `mapstructure:"Architecture" json:"architecture"`
|
|
Maintainer string `mapstructure:"Maintainer" json:"maintainer"`
|
|
InstalledSize int `mapstructure:"InstalledSize" json:"installedSize"`
|
|
Files []DpkgFileRecord `json:"files"`
|
|
}
|
|
|
|
// DpkgFileRecord represents a single file attributed to a debian package.
|
|
type DpkgFileRecord struct {
|
|
Path string `json:"path"`
|
|
MD5 string `json:"md5"`
|
|
}
|
|
|
|
// PackageURL returns the PURL for the specific Debian package (see https://github.com/package-url/purl-spec)
|
|
func (m DpkgMetadata) PackageURL(d *distro.Distro) string {
|
|
if d == nil {
|
|
return ""
|
|
}
|
|
pURL := packageurl.NewPackageURL(
|
|
// TODO: replace with `packageurl.TypeDebian` upon merge of https://github.com/package-url/packageurl-go/pull/21
|
|
"deb",
|
|
d.Type.String(),
|
|
m.Package,
|
|
m.Version,
|
|
packageurl.Qualifiers{
|
|
{
|
|
Key: "arch",
|
|
Value: m.Architecture,
|
|
},
|
|
},
|
|
"")
|
|
return pURL.ToString()
|
|
}
|
|
|
|
func (m DpkgMetadata) ownedFiles() (result []string) {
|
|
s := strset.New()
|
|
for _, f := range m.Files {
|
|
if f.Path != "" {
|
|
s.Add(f.Path)
|
|
}
|
|
}
|
|
result = s.List()
|
|
sort.Strings(result)
|
|
return
|
|
}
|