feat(image): goversion as stdlib (#6277)

Co-authored-by: knqyf263 <knqyf263@gmail.com>
aquasecurity · Apr 15, 2024 · d82d6cb · d82d6cb
1 parent cfddfb3
commit d82d6cb
Show file tree

Hide file tree

Showing 3 changed files with 25 additions and 1 deletion.
diff --git a/pkg/dependency/parser/golang/binary/parse.go b/pkg/dependency/parser/golang/binary/parse.go
@@ -42,7 +42,11 @@ func (p *Parser) Parse(r xio.ReadSeekerAt) ([]types.Library, []types.Dependency,
 		return nil, nil, convertError(err)
 	}
 
-	libs := make([]types.Library, 0, len(info.Deps))
+	libs := make([]types.Library, 0, len(info.Deps)+1)
+	libs = append(libs, types.Library{
+		Name:    "stdlib",
+		Version: strings.TrimPrefix(info.GoVersion, "go"),
+	})
 
 	for _, dep := range info.Deps {
 		// binaries with old go version may incorrectly add module in Deps

diff --git a/pkg/dependency/parser/golang/binary/parse_test.go b/pkg/dependency/parser/golang/binary/parse_test.go
@@ -22,6 +22,10 @@ func TestParse(t *testing.T) {
 			name:      "ELF",
 			inputFile: "testdata/test.elf",
 			want: []types.Library{
+				{
+					Name:    "stdlib",
+					Version: "1.15.2",
+				},
 				{
 					Name:    "github.com/aquasecurity/go-pep440-version",
 					Version: "v0.0.0-20210121094942-22b2f8951d46",
@@ -40,6 +44,10 @@ func TestParse(t *testing.T) {
 			name:      "PE",
 			inputFile: "testdata/test.exe",
 			want: []types.Library{
+				{
+					Name:    "stdlib",
+					Version: "1.15.2",
+				},
 				{
 					Name:    "github.com/aquasecurity/go-pep440-version",
 					Version: "v0.0.0-20210121094942-22b2f8951d46",
@@ -58,6 +66,10 @@ func TestParse(t *testing.T) {
 			name:      "Mach-O",
 			inputFile: "testdata/test.macho",
 			want: []types.Library{
+				{
+					Name:    "stdlib",
+					Version: "1.15.2",
+				},
 				{
 					Name:    "github.com/aquasecurity/go-pep440-version",
 					Version: "v0.0.0-20210121094942-22b2f8951d46",
@@ -76,6 +88,10 @@ func TestParse(t *testing.T) {
 			name:      "with replace directive",
 			inputFile: "testdata/replace.elf",
 			want: []types.Library{
+				{
+					Name:    "stdlib",
+					Version: "1.16.4",
+				},
 				{
 					Name:    "github.com/davecgh/go-spew",
 					Version: "v1.1.1",

diff --git a/pkg/fanal/analyzer/language/golang/binary/binary_test.go b/pkg/fanal/analyzer/language/golang/binary/binary_test.go
@@ -29,6 +29,10 @@ func Test_gobinaryLibraryAnalyzer_Analyze(t *testing.T) {
 						Type:     types.GoBinary,
 						FilePath: "testdata/executable_gobinary",
 						Libraries: types.Packages{
+							{
+								Name:    "stdlib",
+								Version: "1.15.2",
+							},
 							{
 								Name:    "github.com/aquasecurity/go-pep440-version",
 								Version: "v0.0.0-20210121094942-22b2f8951d46",