mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 08:23:15 +01:00
aebe843c6f
* Improve CycloneDX format output ## Additions to CycloneDX output * CPEs * Authors * Publishers * External References (Website, Distribution, VCS) * Description Signed-off-by: Sambhav Kothari <skothari44@bloomberg.net>
43 lines
1.2 KiB
Go
43 lines
1.2 KiB
Go
package cyclonedx13xml
|
|
|
|
import (
|
|
"flag"
|
|
"regexp"
|
|
"testing"
|
|
|
|
"github.com/anchore/syft/internal/formats/common/testutils"
|
|
)
|
|
|
|
var updateCycloneDx = flag.Bool("update-cyclonedx", false, "update the *.golden files for cyclone-dx encoders")
|
|
|
|
func TestCycloneDxDirectoryEncoder(t *testing.T) {
|
|
testutils.AssertEncoderAgainstGoldenSnapshot(t,
|
|
Format(),
|
|
testutils.DirectoryInput(t),
|
|
*updateCycloneDx,
|
|
cycloneDxRedactor,
|
|
)
|
|
}
|
|
|
|
func TestCycloneDxImageEncoder(t *testing.T) {
|
|
testImage := "image-simple"
|
|
testutils.AssertEncoderAgainstGoldenImageSnapshot(t,
|
|
Format(),
|
|
testutils.ImageInput(t, testImage),
|
|
testImage,
|
|
*updateCycloneDx,
|
|
cycloneDxRedactor,
|
|
)
|
|
}
|
|
|
|
func cycloneDxRedactor(s []byte) []byte {
|
|
serialPattern := regexp.MustCompile(`serialNumber="[a-zA-Z0-9\-:]+"`)
|
|
rfc3339Pattern := regexp.MustCompile(`([0-9]+)-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])[Tt]([01][0-9]|2[0-3]):([0-5][0-9]):([0-5][0-9]|60)(\.[0-9]+)?(([Zz])|([\+|\-]([01][0-9]|2[0-3]):[0-5][0-9]))`)
|
|
sha256Pattern := regexp.MustCompile(`sha256:[A-Fa-f0-9]{64}`)
|
|
|
|
for _, pattern := range []*regexp.Regexp{serialPattern, rfc3339Pattern, sha256Pattern} {
|
|
s = pattern.ReplaceAll(s, []byte("redacted"))
|
|
}
|
|
return s
|
|
}
|