mirror of
https://github.com/anchore/syft.git
synced 2026-02-15 12:06:41 +01:00
bbef262b8f
* feat: Add license enrichment from pypi to python packages * Implement license caching and improve test coverage --------- Signed-off-by: Tim Olshansky <456103+timols@users.noreply.github.com>
42 lines
1.7 KiB
Go
42 lines
1.7 KiB
Go
/*
|
|
Package python provides a concrete Cataloger implementation relating to packages within the Python language ecosystem.
|
|
*/
|
|
package python
|
|
|
|
import (
|
|
"github.com/anchore/syft/syft/pkg"
|
|
"github.com/anchore/syft/syft/pkg/cataloger/generic"
|
|
)
|
|
|
|
const eggInfoGlob = "**/*.egg-info"
|
|
|
|
// NewPackageCataloger returns a new cataloger for python packages referenced from poetry lock files, requirements.txt files, and setup.py files.
|
|
func NewPackageCataloger(cfg CatalogerConfig) pkg.Cataloger {
|
|
poetryLockParser := newPoetryLockParser(cfg)
|
|
pipfileLockParser := newPipfileLockParser(cfg)
|
|
setupFileParser := newSetupFileParser(cfg)
|
|
uvLockParser := newUvLockParser(cfg)
|
|
pdmLockParser := newPdmLockParser(cfg)
|
|
requirementsFileParser := newRequirementsParser(cfg)
|
|
return generic.NewCataloger("python-package-cataloger").
|
|
WithParserByGlobs(requirementsFileParser.parseRequirementsTxt, "**/*requirements*.txt").
|
|
WithParserByGlobs(poetryLockParser.parsePoetryLock, "**/poetry.lock").
|
|
WithParserByGlobs(pipfileLockParser.parsePipfileLock, "**/Pipfile.lock").
|
|
WithParserByGlobs(setupFileParser.parseSetupFile, "**/setup.py").
|
|
WithParserByGlobs(uvLockParser.parseUvLock, "**/uv.lock").
|
|
WithParserByGlobs(pdmLockParser.parsePdmLock, "**/pdm.lock")
|
|
}
|
|
|
|
// NewInstalledPackageCataloger returns a new cataloger for python packages within egg or wheel installation directories.
|
|
func NewInstalledPackageCataloger() pkg.Cataloger {
|
|
return generic.NewCataloger("python-installed-package-cataloger").
|
|
WithParserByGlobs(
|
|
parseWheelOrEgg,
|
|
eggInfoGlob,
|
|
"**/*dist-info/METADATA",
|
|
"**/*egg-info/PKG-INFO",
|
|
"**/*DIST-INFO/METADATA",
|
|
"**/*EGG-INFO/PKG-INFO",
|
|
).WithResolvingProcessors(wheelEggRelationships)
|
|
}
|