Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Java cataloger miscellaneous fixes #245

Merged
merged 4 commits into from
Oct 28, 2020
Merged

Conversation

wagoodman
Copy link
Contributor

@wagoodman wagoodman commented Oct 28, 2020

  • Adds a virtualPath for java archives to indicate if the archive was found within another java archive (similar to Anchore engine). e.g. hudson.war:WEB-INF/lib/args4j-2.0.16.jar
  • Removes the parentPackage from the json output for java archives
  • Removes optional fields from json output when empty
  • Parses java manifest sections separately; Fixes Java cataloger reporting packages without name and version #220
  • Forces lowercase of pom properties path variable

Partially addresses findings from anchore/grype#182 and anchore/grype#192 as well as helps with anchore/anchore-engine#681

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
…sing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
@wagoodman wagoodman added the bug Something isn't working label Oct 28, 2020
@wagoodman wagoodman requested a review from a team October 28, 2020 21:26
@wagoodman wagoodman self-assigned this Oct 28, 2020
@wagoodman wagoodman changed the title Update java cataloger for engine Java cataloger miscellaneous fixes Oct 28, 2020
@wagoodman wagoodman merged commit 452426d into main Oct 28, 2020
@wagoodman wagoodman deleted the update-java-cataloger-for-engine branch October 28, 2020 21:36
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
…-engine

Java cataloger miscellaneous fixes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Java cataloger reporting packages without name and version
2 participants