Skip to content

Read Description from dpkg status files#996

Merged
spiffcs merged 1 commit intoanchore:mainfrom
ryanmoran:main
Jun 6, 2022
Merged

Read Description from dpkg status files#996
spiffcs merged 1 commit intoanchore:mainfrom
ryanmoran:main

Conversation

@ryanmoran
Copy link
Copy Markdown
Contributor

There are a number of fields that might appear in the status file for a Debian package. This PR adds the Description field to the set of fields parsed when cataloging Debian operating systems. This change does not include the addition of this field in any of the SBOM output formats (as far as I can tell), and is initially meant for consumption via library users taking advantage of Syft's package cataloging features. I'm not sure whether it makes sense to include it in SBOM output in the future. I don't specifically have a need for it, but I would like to see it parsed and returned within the sbom.SBOM object.

@spiffcs
Copy link
Copy Markdown
Contributor

spiffcs commented May 12, 2022

Thanks for the PR @ryanmoran! Would you be able to merge the latest changes from main and push to your branch? We recently fixed a CI test and those changes are not present in this PR which is why I think the validations are failing.

Signed-off-by: Ryan Moran <rmoran@vmware.com>
@spiffcs
Copy link
Copy Markdown
Contributor

spiffcs commented Jun 6, 2022

🟢 Thanks for adding the field will merge this now. If there are test issues I will jump in to try and resolve them

@spiffcs spiffcs self-assigned this Jun 6, 2022
@spiffcs spiffcs merged commit 5e2ab08 into anchore:main Jun 6, 2022
spiffcs added a commit to jonasagx/syft that referenced this pull request Jun 27, 2022
* main: (70 commits)
  fix: add php catalogers to all catalogers (anchore#1065)
  feat: add use-all-catalogers flag (anchore#1050)
  Updates parsing of `yarn.lock` to use `resolved` URLs that are pulled from yarn and npm registries (anchore#926)
  remove OSS Meetup message (anchore#1057)
  add pom.xml cataloger (anchore#1055)
  Add support for CBL-Mariner distroless images (anchore#1045)
  Add catalogers configuration (anchore#1038)
  add template output (anchore#1051)
  update stereoscope to latest version (anchore#1052)
  update zip_read_closer to incorporate zip64 support (anchore#1041)
  Add pacman (alpm) parser support (anchore#943)
  Update of README.md (anchore#1027)
  bump cosign to v1.9.0 to resolve reporting of GHSA-66x3-6cw3-v5gj (anchore#1025)
  add workflows to test new project automation (anchore#1023)
  improve LanguageByName and add unit tests (anchore#1034)
  Read Description from dpkg status files (anchore#996)
  Add announcement for Anchore OSS Virtual Meetup (anchore#1033)
  add main module field to go bin metadata (anchore#1026)
  Add filters to package cataloger (anchore#1021)
  change draft to false for release process (anchore#1016)
  ...

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
aiwantaozi pushed a commit to aiwantaozi/syft that referenced this pull request Oct 20, 2022
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

2 participants