Weston Steimel 8e1205f7ab

fix: apk product/vendor generation for old metadata (#1635) ...

This fixes some instances where the improved APK CPE generation
logic caused regressions for older alpine package APK metadata.
It now generates multiple "upstream" candidates with both name
and package type which reduces the amount of duplicated code in
the apk cpe gen logic.  This also improves the handling of stream
version packages, so now we can correctly identify packages such
as ruby3.2-rexml as the rexml ruby gem.

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

2023-03-01 14:58:35 +00:00

..

cpe

fix: apk product/vendor generation for old metadata (#1635)

2023-03-01 14:58:35 +00:00