Alex Goodman 9d820c6d94 fix: only look up owned-by-package files in the resolver's own frame ...

with `FilesOwnedByPackageSelection` the file catalogers take every package location in the SBOM and look it up by `RealPath` in the resolver they were given. Inside an archive, the java package's location is the archive itself *in its parent's frame* (`WEB-INF/lib/dep.jar`), so the sub-pipeline looked that path up inside `dep.jar`'s own resolver: a miss, or an unrelated same-named entry by coincidence. At the root, coordinates from inside archives were looked up against the scan root the same way.

`coordinatesForSelection` now keeps only coordinates whose `ArchivePath` matches the current frame (the traversal's `ContentsArchivePath()`, or blank at the root).

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

2026-09-24 13:30:33 -04:00

..

archive_nesting_test.go

fix: emit archive-to-archive CONTAINS edges and drop self-loops

2026-09-24 13:26:59 -04:00

archive_tasks_test.go

fix: a damaged entry truncates the archive instead of failing it

2026-09-24 13:28:53 -04:00

archive_tasks.go

fix: only look up owned-by-package files in the resolver's own frame

2026-09-24 13:30:33 -04:00

cataloging_config.go

feat: 3626 add option enable license content; disable by default (#3631)

2025-02-05 20:41:03 +00:00

environment_tasks.go

chore(deps): update tools to latest versions (#2616)

2024-02-14 14:59:49 +00:00

executor_test.go

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

executor.go

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

expression_test.go

Add file catalogers to selection configuration (#3505)

2025-02-03 19:10:17 +00:00

expression.go

Add file catalogers to selection configuration (#3505)

2025-02-03 19:10:17 +00:00

factory.go

Add file catalogers to selection configuration (#3505)

2025-02-03 19:10:17 +00:00

feature_detection.go

feat: RHEL EUS detection (#4023)

2025-07-07 14:11:20 +00:00

file_tasks_test.go

fix: only look up owned-by-package files in the resolver's own frame

2026-09-24 13:30:33 -04:00

file_tasks.go

fix: only look up owned-by-package files in the resolver's own frame

2026-09-24 13:30:33 -04:00

package_task_factory_test.go

fix: update license content filtering default case to be 'none' for no content returned

2025-05-16 14:25:15 +00:00

package_task_factory.go

feat: initial recursive archive cataloging impl

2026-09-10 08:45:36 -04:00

package_tasks.go

chore: revert custom index in favor of key_Split

2026-09-20 11:22:10 -04:00

relationship_tasks.go

Resolve owned file paths when searching for overlaps (#3828)

2025-04-24 21:59:45 +00:00

scope_tasks.go

Add deep-squashed scope to annotate all layers where a package exists (#3138)

2025-05-05 14:35:57 -04:00

selection_test.go

Add file catalogers to selection configuration (#3505)

2025-02-03 19:10:17 +00:00

selection.go

Add file catalogers to selection configuration (#3505)

2025-02-03 19:10:17 +00:00

set_test.go

Replace core SBOM-creation API with builder pattern (#1383)

2024-01-12 17:39:13 -05:00

set.go

Replace core SBOM-creation API with builder pattern (#1383)

2024-01-12 17:39:13 -05:00

task.go

Replace core SBOM-creation API with builder pattern (#1383)

2024-01-12 17:39:13 -05:00

unknowns_tasks.go

fix:handle compound aliases like ``.tgz`` when cataloging archives (#4421)

2025-12-02 16:55:32 -05:00