mirror of
https://github.com/anchore/syft.git
synced 2026-11-03 07:56:36 +01:00
* consider additional vendor candidates for ruby, python, rpm, npm, and java Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add java pom.xml processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * allow for downstream transform control in cpe generation processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate CPE generation logic to dedicated package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * split java manifest groupID extraction into two tiers Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract groupID from pom parent project during CPE generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update java groupID processing tests to cover multi-tier approach Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix constructor names for cpe.fieldCandidate Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename helper function to startsWithTopLevelDomain Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add nil changes for java manifest sections Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update comment to reflect parsing maven files Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * split out java description parsing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * split out pom parent processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * simplify vendorsFromGroupIDs and associated tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * simplify test type for vendorsFromGroupIDs Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * copy candidate varidations to new instances Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename CPE generation string util functions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add an explanation around fieldCandidate Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * simplify type for the cpe.fieldCandidateSet Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * make CPE filter function names more readable Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update groupIDsFromJavaManifest to use a guard clause Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract groupID extraction from artifactID fields into a separate function Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * bump goreleaser version to combat failure Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
100 lines
1.7 KiB
Go
100 lines
1.7 KiB
Go
package cpe
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestCandidateProductForGo(t *testing.T) {
|
|
tests := []struct {
|
|
pkg string
|
|
expected string
|
|
}{
|
|
{
|
|
pkg: "github.com/someone/something",
|
|
expected: "something",
|
|
},
|
|
{
|
|
pkg: "golang.org/x/xerrors",
|
|
expected: "x/xerrors",
|
|
},
|
|
{
|
|
pkg: "gopkg.in/yaml.v2",
|
|
expected: "yaml.v2",
|
|
},
|
|
{
|
|
pkg: "place",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "place.com/",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "place.com/someone-or-thing",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "google.golang.org/genproto/googleapis/rpc/status",
|
|
expected: "genproto",
|
|
},
|
|
{
|
|
pkg: "github.com/someone/something/long/package/name",
|
|
expected: "something",
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
t.Run(test.pkg, func(t *testing.T) {
|
|
assert.Equal(t, test.expected, candidateProductForGo(test.pkg))
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestCandidateVendorForGo(t *testing.T) {
|
|
tests := []struct {
|
|
pkg string
|
|
expected string
|
|
}{
|
|
{
|
|
pkg: "github.com/someone/something",
|
|
expected: "someone",
|
|
},
|
|
{
|
|
pkg: "golang.org/x/xerrors",
|
|
expected: "golang",
|
|
},
|
|
{
|
|
pkg: "gopkg.in/yaml.v2",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "place",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "place.com/",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "place.com/someone-or-thing",
|
|
expected: "",
|
|
},
|
|
{
|
|
pkg: "google.golang.org/genproto/googleapis/rpc/status",
|
|
expected: "google",
|
|
},
|
|
{
|
|
pkg: "github.com/someone/something/long/package/name",
|
|
expected: "someone",
|
|
},
|
|
}
|
|
|
|
for _, test := range tests {
|
|
t.Run(test.pkg, func(t *testing.T) {
|
|
assert.Equal(t, test.expected, candidateVendorForGo(test.pkg))
|
|
})
|
|
}
|
|
}
|