Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parse donet dependency trees #2143

Merged
merged 6 commits into from
Oct 11, 2023
Merged

Conversation

noqcks
Copy link
Contributor

@noqcks noqcks commented Sep 17, 2023

Adds dependency information for the dotnet ecosystem

This allows one to see the relationships between packages such as with the dependencies field in CycloneDX https://cyclonedx.org/docs/1.5/json/#dependencies.

Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Benji Visser <benji@093b.org>
@tgerla
Copy link
Contributor

tgerla commented Sep 21, 2023

Hey @noqcks, thanks much! We will need a little time to review this but we'll do that as soon as we can, and we'll let you know if we need anything from you. Thanks again for the patch.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Copy link
Contributor

@wagoodman wagoodman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I only made a few adjustments:

  • add some comments to the test capturing the expectations
  • unexported the RelationshipLess function and added caveat doc comments for the SortRelationships function (it will most likely be replaced in the future since there are limitations with the current implementation, however, the current function is necessary).

overall, nice work! 🙌

@wagoodman wagoodman enabled auto-merge (squash) October 11, 2023 17:47
@wagoodman wagoodman merged commit fe7a417 into anchore:main Oct 11, 2023
9 checks passed
@wagoodman wagoodman added the enhancement New feature or request label Oct 20, 2023
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
* add dependency information for .NET pkgs

Signed-off-by: Benji Visser <benji@093b.org>

* update pkg coverage directory test

Signed-off-by: Benji Visser <benji@093b.org>

* reverse dependsOn relationship

Signed-off-by: Benji Visser <benji@093b.org>

* update root pkg parsing

Signed-off-by: Benji Visser <benji@093b.org>

* add comments about the test relationships represented

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

* add docs around relationship sorting functions + update test helpers

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

---------

Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

3 participants