Alex Goodman f0129112be fix: normalize decoded FullPath ...

Nothing checked that a decoded `FullPath` actually extends `RealPath` with an archive chain. The SPDX
decoder sets `FullPath` to the file name even when the name doesn't end with the comment's chain, and
syft-json takes whatever is in the document. `{RealPath: "/x", FullPath: "/x"}` and `{RealPath: "/x"}`
share an ID but are different map keys, so decoded files, unknowns and locations could fail to line
up with the same coordinates built by a resolver.

The syft-json and SPDX decoders now clear a `FullPath` that equals `RealPath` or doesn't start with
`RealPath` + `!/`.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

2026-10-21 11:32:50 -04:00

..

find_root_packages_test.go

perf(spdx): make findRootPackages linear instead of packages x relationships (#5280)

2026-09-11 21:11:21 +00:00

to_format_model_test.go

fix: keep RealPath as top-level, use FullPath and utility functions FullNestedPath, LocalPath, Path

2026-10-19 15:44:37 -04:00

to_format_model.go

fix: unknowns, better full vs local path handling

2026-10-20 11:15:17 -04:00

to_syft_model_test.go

fix: normalize decoded FullPath

2026-10-21 11:32:50 -04:00

to_syft_model_v3_test.go

fix: keep RealPath as top-level, use FullPath and utility functions FullNestedPath, LocalPath, Path

2026-10-19 15:44:37 -04:00

to_syft_model_v3.go

fix: unknowns, better full vs local path handling

2026-10-20 11:15:17 -04:00

to_syft_model.go

fix: normalize decoded FullPath

2026-10-21 11:32:50 -04:00