Commits on Mar 1, 2023

1. fix: apk product/vendor generation for old metadata …

   This fixes some instances where the improved APK CPE generation
   logic caused regressions for older alpine package APK metadata.
   It now generates multiple "upstream" candidates with both name
   and package type which reduces the amount of duplicated code in
   the apk cpe gen logic.  This also improves the handling of stream
   version packages, so now we can correctly identify packages such
   as ruby3.2-rexml as the rexml ruby gem.
   
   Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

   

   westonsteimel committed Mar 1, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for f8610b6
   • Browse repository at this point

   Copy the full SHA

   f8610b6 View commit details

   Browse the repository at this point in the history