Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add support Swift Package Manager #4926

Closed
DmitriyLewen opened this issue Aug 2, 2023 · 1 comment · Fixed by #4932
Closed

add support Swift Package Manager #4926

DmitriyLewen opened this issue Aug 2, 2023 · 1 comment · Fixed by #4932
Assignees
@DmitriyLewen
Labels
kind/feature Categorizes issue or PR as related to a new feature. scan/vulnerability Issues relating to vulnerability scanning
Milestone
v0.45.0

Comments

@DmitriyLewen
Copy link
Contributor

Description

Add support for finding vulnerabilities for Swift Package Manager (Package.swift files).
Use GHSA as datasource.
@DmitriyLewen DmitriyLewen added kind/feature Categorizes issue or PR as related to a new feature. scan/vulnerability Issues relating to vulnerability scanning labels Aug 2, 2023
@DmitriyLewen DmitriyLewen self-assigned this Aug 2, 2023
@knqyf263 knqyf263 added this to the v0.45.0 milestone Aug 2, 2023
@DmitriyLewen
Copy link
Contributor Author

Package.swift files can contains branches, version ranges, etc...
But there is Package.resolved file - https://github.com/apple/swift-package-manager/blob/main/Documentation/Usage.md#resolving-versions-packageresolved-file
This is lock file for Swift.

File is created after every swift package command.

Use this file to find dependencies.

@DmitriyLewen DmitriyLewen mentioned this issue Aug 3, 2023
Merged
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@DmitriyLewen DmitriyLewen

Labels
kind/feature Categorizes issue or PR as related to a new feature. scan/vulnerability Issues relating to vulnerability scanning
Projects
Trivy Roadmap
Archived in project
Milestone
v0.45.0
Development

Successfully merging a pull request may close this issue.

feat: add Package.resolved swift files support DmitriyLewen/trivy
2 participants
@knqyf263 @DmitriyLewen