mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 16:33:21 +01:00
* Improve CycloneDX format output ## Additions to CycloneDX output * CPEs * Authors * Publishers * External References (Website, Distribution, VCS) * Description Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
84 lines
1.5 KiB
Go
84 lines
1.5 KiB
Go
package cyclonedxhelpers
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/CycloneDX/cyclonedx-go"
|
|
"github.com/anchore/syft/syft/pkg"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func Test_License(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
input pkg.Package
|
|
expected *cyclonedx.Licenses
|
|
}{
|
|
{
|
|
name: "no licenses",
|
|
input: pkg.Package{},
|
|
expected: nil,
|
|
},
|
|
{
|
|
name: "no SPDX licenses",
|
|
input: pkg.Package{
|
|
Licenses: []string{
|
|
"made-up",
|
|
},
|
|
},
|
|
expected: nil,
|
|
},
|
|
{
|
|
name: "with SPDX license",
|
|
input: pkg.Package{
|
|
Licenses: []string{
|
|
"MIT",
|
|
},
|
|
},
|
|
expected: &cyclonedx.Licenses{
|
|
{License: &cyclonedx.License{ID: "MIT"}},
|
|
},
|
|
},
|
|
{
|
|
name: "with SPDX license expression",
|
|
input: pkg.Package{
|
|
Licenses: []string{
|
|
"MIT",
|
|
"GPL-3.0",
|
|
},
|
|
},
|
|
expected: &cyclonedx.Licenses{
|
|
{License: &cyclonedx.License{ID: "MIT"}},
|
|
{License: &cyclonedx.License{ID: "GPL-3.0"}},
|
|
},
|
|
},
|
|
{
|
|
name: "cap insensitive",
|
|
input: pkg.Package{
|
|
Licenses: []string{
|
|
"gpl-3.0",
|
|
},
|
|
},
|
|
expected: &cyclonedx.Licenses{
|
|
{License: &cyclonedx.License{ID: "GPL-3.0"}},
|
|
},
|
|
},
|
|
{
|
|
name: "debian to spdx conversion",
|
|
input: pkg.Package{
|
|
Licenses: []string{
|
|
"GPL-2",
|
|
},
|
|
},
|
|
expected: &cyclonedx.Licenses{
|
|
{License: &cyclonedx.License{ID: "GPL-2.0"}},
|
|
},
|
|
},
|
|
}
|
|
for _, test := range tests {
|
|
t.Run(test.name, func(t *testing.T) {
|
|
assert.Equal(t, test.expected, Licenses(test.input))
|
|
})
|
|
}
|
|
}
|