fix: Follow symlinks when searching for globs in all-layers scope (#1221

)

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

syft/source/all_layers_resolver.go

@@ -126,7 +126,7 @@ func (r *allLayersResolver) FilesByGlob(patterns ...string) ([]Location, error)
 
 	for _, pattern := range patterns {
 		for idx, layerIdx := range r.layers {
-			results, err := r.img.Layers[layerIdx].Tree.FilesByGlob(pattern, filetree.FollowBasenameLinks, filetree.DoNotFollowDeadBasenameLinks)
+			results, err := r.img.Layers[layerIdx].SquashedTree.FilesByGlob(pattern, filetree.FollowBasenameLinks, filetree.DoNotFollowDeadBasenameLinks)
 			if err != nil {
 				return nil, fmt.Errorf("failed to resolve files by glob (%s): %w", pattern, err)
 			}

test/integration/all_layers_squashed_comparison_test.go

@@ -0,0 +1,20 @@
+package integration
+
+import (
+	"testing"
+
+	"github.com/anchore/syft/syft/source"
+)
+
+func Test_AllLayersIncludesSquashed(t *testing.T) {
+	// This is a verification test for issue #894 (https://github.com/anchore/syft/issues/894)
+	allLayers, _ := catalogFixtureImage(t, "image-suse-all-layers", source.AllLayersScope, nil)
+	squashed, _ := catalogFixtureImage(t, "image-suse-all-layers", source.SquashedScope, nil)
+
+	lenAllLayers := len(allLayers.Artifacts.PackageCatalog.Sorted())
+	lenSquashed := len(squashed.Artifacts.PackageCatalog.Sorted())
+
+	if lenAllLayers < lenSquashed {
+		t.Errorf("squashed has more packages than all-layers: %d > %d", lenSquashed, lenAllLayers)
+	}
+}

test/integration/test-fixtures/image-suse-all-layers/Dockerfile

@@ -0,0 +1,2 @@
+FROM registry.suse.com/suse/sle15:15.3.17.20.20
+RUN zypper in -y wget