Mirrors/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft synced 2024-11-10 06:14:16 +00:00
Code Issues Projects Releases Packages Wiki Activity

fix: improve known CPEs and set NVD as source for all current binary classifiers (#3167)

Browse source 
Signed-off-by: Weston Steimel <commits@weston.slmail.me>
This commit is contained in:
Weston Steimel 2024-08-27 17:36:34 +01:00 committed by GitHub
parent e9a8c27be1
commit 5ab43bafec
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 54 additions and 49 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

103
syft/pkg/cataloger/binary/classifiers.go
View file

@ -23,8 +23,8 @@ func DefaultClassifiers() []Classifier {
Package: "python", Package: "python",
PURL: mustPURL("pkg:generic/python@version"), PURL: mustPURL("pkg:generic/python@version"),
CPEs: []cpe.CPE{ CPEs: []cpe.CPE{
cpe.Must("cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
}, },
{ {
@ -34,8 +34,8 @@ func DefaultClassifiers() []Classifier {
Package: "python", Package: "python",
PURL: mustPURL("pkg:generic/python@version"), PURL: mustPURL("pkg:generic/python@version"),
CPEs: []cpe.CPE{ CPEs: []cpe.CPE{
cpe.Must("cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:python_software_foundation:python:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:python:python:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
}, },
{ {
@ -53,7 +53,7 @@ func DefaultClassifiers() []Classifier {
`(?m)go(?P<version>[0-9]+\.[0-9]+(\.[0-9]+|beta[0-9]+|alpha[0-9]+|rc[0-9]+)?)\x00`), `(?m)go(?P<version>[0-9]+\.[0-9]+(\.[0-9]+|beta[0-9]+|alpha[0-9]+|rc[0-9]+)?)\x00`),
Package: "go", Package: "go",
PURL: mustPURL("pkg:generic/go@version"), PURL: mustPURL("pkg:generic/go@version"),
CPEs: singleCPE("cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "julia-binary", Class: "julia-binary",
@ -62,7 +62,7 @@ func DefaultClassifiers() []Classifier {
`(?m)__init__\x00(?P<version>[0-9]+\.[0-9]+\.[0-9]+)\x00verify`), `(?m)__init__\x00(?P<version>[0-9]+\.[0-9]+\.[0-9]+)\x00verify`),
Package: "julia", Package: "julia",
PURL: mustPURL("pkg:generic/julia@version"), PURL: mustPURL("pkg:generic/julia@version"),
CPEs: singleCPE("cpe:2.3:a:julialang:julia:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:julialang:julia:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "helm", Class: "helm",
@ -71,7 +71,7 @@ func DefaultClassifiers() []Classifier {
`(?m)\x00v(?P<version>[0-9]+\.[0-9]+\.[0-9]+)\x00`), `(?m)\x00v(?P<version>[0-9]+\.[0-9]+\.[0-9]+)\x00`),
Package: "helm", Package: "helm",
PURL: mustPURL("pkg:golang/helm.sh/helm@version"), PURL: mustPURL("pkg:golang/helm.sh/helm@version"),
CPEs: singleCPE("cpe:2.3:a:helm:helm:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:helm:helm:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "redis-binary", Class: "redis-binary",
@ -82,7 +82,10 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "redis", Package: "redis",
PURL: mustPURL("pkg:generic/redis@version"), PURL: mustPURL("pkg:generic/redis@version"),
CPEs: singleCPE("cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*"), CPEs: []cpe.CPE{
cpe.Must("cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
},
}, },
{ {
Class: "java-binary-openjdk", Class: "java-binary-openjdk",
@ -103,7 +106,7 @@ func DefaultClassifiers() []Classifier {
Package: "java/jre", Package: "java/jre",
PURL: mustPURL("pkg:generic/java/jre@version"), PURL: mustPURL("pkg:generic/java/jre@version"),
// TODO the updates might need to be part of the CPE Attributes, like: 1.8.0:update152 // TODO the updates might need to be part of the CPE Attributes, like: 1.8.0:update152
CPEs: singleCPE("cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "java-binary-ibm", Class: "java-binary-ibm",
@ -113,7 +116,7 @@ func DefaultClassifiers() []Classifier {
`(?m)\x00java\x00(?P<release>[0-9]+[.0-9]+)\x00{4}(?P<version>[0-9]+[-._a-zA-Z0-9]+)\x00`), `(?m)\x00java\x00(?P<release>[0-9]+[.0-9]+)\x00{4}(?P<version>[0-9]+[-._a-zA-Z0-9]+)\x00`),
Package: "java/jre", Package: "java/jre",
PURL: mustPURL("pkg:generic/java/jre@version"), PURL: mustPURL("pkg:generic/java/jre@version"),
CPEs: singleCPE("cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "java-binary-oracle", Class: "java-binary-oracle",
@ -127,7 +130,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "java/jre", Package: "java/jre",
PURL: mustPURL("pkg:generic/java/jre@version"), PURL: mustPURL("pkg:generic/java/jre@version"),
CPEs: singleCPE("cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "java-binary-graalvm", Class: "java-binary-graalvm",
@ -136,7 +139,7 @@ func DefaultClassifiers() []Classifier {
`(?m)\x00(?P<version>[0-9]+[.0-9]+[.0-9]+\+[0-9]+-jvmci-[0-9]+[.0-9]+-b[0-9]+)\x00`), `(?m)\x00(?P<version>[0-9]+[.0-9]+[.0-9]+\+[0-9]+-jvmci-[0-9]+[.0-9]+-b[0-9]+)\x00`),
Package: "java/graalvm", Package: "java/graalvm",
PURL: mustPURL("pkg:generic/java/graalvm@version"), PURL: mustPURL("pkg:generic/java/graalvm@version"),
CPEs: singleCPE("cpe:2.3:a:oracle:graalvm:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:oracle:graalvm:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "java-binary-jdk", Class: "java-binary-jdk",
@ -145,7 +148,7 @@ func DefaultClassifiers() []Classifier {
`(?m)\x00(?P<version>[0-9]+\.[0-9]+\.[0-9]+(\+[0-9]+)?([-._a-zA-Z0-9]+)?)\x00`), `(?m)\x00(?P<version>[0-9]+\.[0-9]+\.[0-9]+(\+[0-9]+)?([-._a-zA-Z0-9]+)?)\x00`),
Package: "java/jdk", Package: "java/jdk",
PURL: mustPURL("pkg:generic/java/jdk@version"), PURL: mustPURL("pkg:generic/java/jdk@version"),
CPEs: singleCPE("cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:oracle:jdk:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "nodejs-binary", Class: "nodejs-binary",
@ -154,7 +157,7 @@ func DefaultClassifiers() []Classifier {
`(?m)node\.js\/v(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`), `(?m)node\.js\/v(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`),
Package: "node", Package: "node",
PURL: mustPURL("pkg:generic/node@version"), PURL: mustPURL("pkg:generic/node@version"),
CPEs: singleCPE("cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "go-binary-hint", Class: "go-binary-hint",
@ -163,6 +166,7 @@ func DefaultClassifiers() []Classifier {
`(?m)go(?P<version>[0-9]+\.[0-9]+(\.[0-9]+|beta[0-9]+|alpha[0-9]+|rc[0-9]+)?)`), `(?m)go(?P<version>[0-9]+\.[0-9]+(\.[0-9]+|beta[0-9]+|alpha[0-9]+|rc[0-9]+)?)`),
Package: "go", Package: "go",
PURL: mustPURL("pkg:generic/go@version"), PURL: mustPURL("pkg:generic/go@version"),
CPEs: singleCPE("cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "busybox-binary", Class: "busybox-binary",
@ -171,7 +175,7 @@ func DefaultClassifiers() []Classifier {
`(?m)BusyBox\s+v(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`), `(?m)BusyBox\s+v(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`),
Package: "busybox", Package: "busybox",
PURL: mustPURL("pkg:generic/busybox@version"), PURL: mustPURL("pkg:generic/busybox@version"),
CPEs: singleCPE("cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "util-linux-binary", Class: "util-linux-binary",
@ -180,7 +184,7 @@ func DefaultClassifiers() []Classifier {
`\x00util-linux\s(?P<version>[0-9]+\.[0-9]+\.[0-9]+)\x00`), `\x00util-linux\s(?P<version>[0-9]+\.[0-9]+\.[0-9]+)\x00`),
Package: "util-linux", Package: "util-linux",
PURL: mustPURL("pkg:generic/util-linux@version"), PURL: mustPURL("pkg:generic/util-linux@version"),
CPEs: singleCPE("cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "haproxy-binary", Class: "haproxy-binary",
@ -191,7 +195,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "haproxy", Package: "haproxy",
PURL: mustPURL("pkg:generic/haproxy@version"), PURL: mustPURL("pkg:generic/haproxy@version"),
CPEs: singleCPE("cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:haproxy:haproxy:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "perl-binary", Class: "perl-binary",
@ -200,7 +204,7 @@ func DefaultClassifiers() []Classifier {
`(?m)\/usr\/local\/lib\/perl\d\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`), `(?m)\/usr\/local\/lib\/perl\d\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`),
Package: "perl", Package: "perl",
PURL: mustPURL("pkg:generic/perl@version"), PURL: mustPURL("pkg:generic/perl@version"),
CPEs: singleCPE("cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "php-cli-binary", Class: "php-cli-binary",
@ -210,7 +214,7 @@ func DefaultClassifiers() []Classifier {
`(?m)X-Powered-By: PHP\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)`), `(?m)X-Powered-By: PHP\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)`),
Package: "php-cli", Package: "php-cli",
PURL: mustPURL("pkg:generic/php-cli@version"), PURL: mustPURL("pkg:generic/php-cli@version"),
CPEs: singleCPE("cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "php-fpm-binary", Class: "php-fpm-binary",
@ -219,7 +223,7 @@ func DefaultClassifiers() []Classifier {
`(?m)X-Powered-By: PHP\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)`), `(?m)X-Powered-By: PHP\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)`),
Package: "php-fpm", Package: "php-fpm",
PURL: mustPURL("pkg:generic/php-fpm@version"), PURL: mustPURL("pkg:generic/php-fpm@version"),
CPEs: singleCPE("cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "php-apache-binary", Class: "php-apache-binary",
@ -228,7 +232,7 @@ func DefaultClassifiers() []Classifier {
`(?m)X-Powered-By: PHP\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)`), `(?m)X-Powered-By: PHP\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)`),
Package: "libphp", Package: "libphp",
PURL: mustPURL("pkg:generic/php@version"), PURL: mustPURL("pkg:generic/php@version"),
CPEs: singleCPE("cpe:2.3:a:php:php:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "php-composer-binary", Class: "php-composer-binary",
@ -237,7 +241,7 @@ func DefaultClassifiers() []Classifier {
`(?m)'pretty_version'\s*=>\s*'(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)'`), `(?m)'pretty_version'\s*=>\s*'(?P<version>[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)'`),
Package: "composer", Package: "composer",
PURL: mustPURL("pkg:generic/composer@version"), PURL: mustPURL("pkg:generic/composer@version"),
CPEs: singleCPE("cpe:2.3:a:getcomposer:composer:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:getcomposer:composer:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "httpd-binary", Class: "httpd-binary",
@ -246,7 +250,7 @@ func DefaultClassifiers() []Classifier {
`(?m)Apache\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`), `(?m)Apache\/(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`),
Package: "httpd", Package: "httpd",
PURL: mustPURL("pkg:generic/httpd@version"), PURL: mustPURL("pkg:generic/httpd@version"),
CPEs: singleCPE("cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "memcached-binary", Class: "memcached-binary",
@ -255,7 +259,7 @@ func DefaultClassifiers() []Classifier {
`(?m)memcached\s(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`), `(?m)memcached\s(?P<version>[0-9]+\.[0-9]+\.[0-9]+)`),
Package: "memcached", Package: "memcached",
PURL: mustPURL("pkg:generic/memcached@version"), PURL: mustPURL("pkg:generic/memcached@version"),
CPEs: singleCPE("cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "traefik-binary", Class: "traefik-binary",
@ -267,7 +271,7 @@ func DefaultClassifiers() []Classifier {
`(?m)(\x00|\x{FFFD})?v?(?P<version>[0-9]+\.[0-9]+\.[0-9]+(-alpha[0-9]|-beta[0-9]|-rc[0-9])?)\x00`), `(?m)(\x00|\x{FFFD})?v?(?P<version>[0-9]+\.[0-9]+\.[0-9]+(-alpha[0-9]|-beta[0-9]|-rc[0-9])?)\x00`),
Package: "traefik", Package: "traefik",
PURL: mustPURL("pkg:generic/traefik@version"), PURL: mustPURL("pkg:generic/traefik@version"),
CPEs: singleCPE("cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "arangodb-binary", Class: "arangodb-binary",
@ -276,7 +280,7 @@ func DefaultClassifiers() []Classifier {
`(?m)\x00*(?P<version>[0-9]+\.[0-9]+\.[0-9]+(-[0-9]+)?)\s\[linux\]`), `(?m)\x00*(?P<version>[0-9]+\.[0-9]+\.[0-9]+(-[0-9]+)?)\s\[linux\]`),
Package: "arangodb", Package: "arangodb",
PURL: mustPURL("pkg:generic/arangodb@version"), PURL: mustPURL("pkg:generic/arangodb@version"),
CPEs: singleCPE("cpe:2.3:a:arangodb:arangodb:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:arangodb:arangodb:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "postgresql-binary", Class: "postgresql-binary",
@ -289,7 +293,7 @@ func DefaultClassifiers() []Classifier {
`(?m)(\x00|\?)PostgreSQL (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)`), `(?m)(\x00|\?)PostgreSQL (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)`),
Package: "postgresql", Package: "postgresql",
PURL: mustPURL("pkg:generic/postgresql@version"), PURL: mustPURL("pkg:generic/postgresql@version"),
CPEs: singleCPE("cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "mysql-binary", Class: "mysql-binary",
@ -302,7 +306,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "mysql", Package: "mysql",
PURL: mustPURL("pkg:generic/mysql@version"), PURL: mustPURL("pkg:generic/mysql@version"),
CPEs: singleCPE("cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "mysql-binary", Class: "mysql-binary",
@ -312,8 +316,8 @@ func DefaultClassifiers() []Classifier {
Package: "percona-server", Package: "percona-server",
PURL: mustPURL("pkg:generic/percona-server@version"), PURL: mustPURL("pkg:generic/percona-server@version"),
CPEs: []cpe.CPE{ CPEs: []cpe.CPE{
cpe.Must("cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
}, },
{ {
@ -324,9 +328,9 @@ func DefaultClassifiers() []Classifier {
Package: "percona-xtradb-cluster", Package: "percona-xtradb-cluster",
PURL: mustPURL("pkg:generic/percona-xtradb-cluster@version"), PURL: mustPURL("pkg:generic/percona-xtradb-cluster@version"),
CPEs: []cpe.CPE{ CPEs: []cpe.CPE{
cpe.Must("cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:percona:xtradb_cluster:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:percona:xtradb_cluster:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
}, },
{ {
@ -336,7 +340,7 @@ func DefaultClassifiers() []Classifier {
`(?m).*/percona-xtrabackup-(?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)`), `(?m).*/percona-xtrabackup-(?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)`),
Package: "percona-xtrabackup", Package: "percona-xtrabackup",
PURL: mustPURL("pkg:generic/percona-xtrabackup@version"), PURL: mustPURL("pkg:generic/percona-xtrabackup@version"),
CPEs: singleCPE("cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "mariadb-binary", Class: "mariadb-binary",
@ -346,6 +350,7 @@ func DefaultClassifiers() []Classifier {
`(?m)(?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)-MariaDB`), `(?m)(?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)-MariaDB`),
Package: "mariadb", Package: "mariadb",
PURL: mustPURL("pkg:generic/mariadb@version"), PURL: mustPURL("pkg:generic/mariadb@version"),
CPEs: singleCPE("cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "rust-standard-library-linux", Class: "rust-standard-library-linux",
@ -355,7 +360,7 @@ func DefaultClassifiers() []Classifier {
`(?m)(\x00)clang LLVM \(rustc version (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)`), `(?m)(\x00)clang LLVM \(rustc version (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)`),
Package: "rust", Package: "rust",
PURL: mustPURL("pkg:generic/rust@version"), PURL: mustPURL("pkg:generic/rust@version"),
CPEs: singleCPE("cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "rust-standard-library-macos", Class: "rust-standard-library-macos",
@ -365,7 +370,7 @@ func DefaultClassifiers() []Classifier {
`(?m)c (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)`), `(?m)c (?P<version>[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)`),
Package: "rust", Package: "rust",
PURL: mustPURL("pkg:generic/rust@version"), PURL: mustPURL("pkg:generic/rust@version"),
CPEs: singleCPE("cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "ruby-binary", Class: "ruby-binary",
@ -379,7 +384,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "ruby", Package: "ruby",
PURL: mustPURL("pkg:generic/ruby@version"), PURL: mustPURL("pkg:generic/ruby@version"),
CPEs: singleCPE("cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "erlang-binary", Class: "erlang-binary",
@ -396,7 +401,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "erlang", Package: "erlang",
PURL: mustPURL("pkg:generic/erlang@version"), PURL: mustPURL("pkg:generic/erlang@version"),
CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "erlang-alpine-binary", Class: "erlang-alpine-binary",
@ -413,7 +418,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "erlang", Package: "erlang",
PURL: mustPURL("pkg:generic/erlang@version"), PURL: mustPURL("pkg:generic/erlang@version"),
CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "erlang-library", Class: "erlang-library",
@ -430,7 +435,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "erlang", Package: "erlang",
PURL: mustPURL("pkg:generic/erlang@version"), PURL: mustPURL("pkg:generic/erlang@version"),
CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "swipl-binary", Class: "swipl-binary",
@ -440,7 +445,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "swipl", Package: "swipl",
PURL: mustPURL("pkg:generic/swipl@version"), PURL: mustPURL("pkg:generic/swipl@version"),
CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "consul-binary", Class: "consul-binary",
@ -451,7 +456,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "consul", Package: "consul",
PURL: mustPURL("pkg:golang/github.com/hashicorp/consul@version"), PURL: mustPURL("pkg:golang/github.com/hashicorp/consul@version"),
CPEs: singleCPE("cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "nginx-binary", Class: "nginx-binary",
@ -464,8 +469,8 @@ func DefaultClassifiers() []Classifier {
Package: "nginx", Package: "nginx",
PURL: mustPURL("pkg:generic/nginx@version"), PURL: mustPURL("pkg:generic/nginx@version"),
CPEs: []cpe.CPE{ CPEs: []cpe.CPE{
cpe.Must("cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
cpe.Must("cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*", cpe.GeneratedSource), cpe.Must("cpe:2.3:a:nginx:nginx:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
}, },
{ {
@ -480,7 +485,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "bash", Package: "bash",
PURL: mustPURL("pkg:generic/bash@version"), PURL: mustPURL("pkg:generic/bash@version"),
CPEs: singleCPE("cpe:2.3:a:gnu:bash:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:gnu:bash:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "openssl-binary", Class: "openssl-binary",
@ -492,7 +497,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "openssl", Package: "openssl",
PURL: mustPURL("pkg:generic/openssl@version"), PURL: mustPURL("pkg:generic/openssl@version"),
CPEs: singleCPE("cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "gcc-binary", Class: "gcc-binary",
@ -503,7 +508,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "gcc", Package: "gcc",
PURL: mustPURL("pkg:generic/gcc@version"), PURL: mustPURL("pkg:generic/gcc@version"),
CPEs: singleCPE("cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:gnu:gcc:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "fluent-bit-binary", Class: "fluent-bit-binary",
@ -516,7 +521,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "fluent-bit", Package: "fluent-bit",
PURL: mustPURL("pkg:github/fluent/fluent-bit@version"), PURL: mustPURL("pkg:github/fluent/fluent-bit@version"),
CPEs: singleCPE("cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "wordpress-cli-binary", Class: "wordpress-cli-binary",
@ -527,7 +532,7 @@ func DefaultClassifiers() []Classifier {
), ),
Package: "wp-cli", Package: "wp-cli",
PURL: mustPURL("pkg:generic/wp-cli@version"), PURL: mustPURL("pkg:generic/wp-cli@version"),
CPEs: singleCPE("cpe:2.3:a:wp-cli:wp-cli:*:*:*:*:*:*:*:*"), CPEs: singleCPE("cpe:2.3:a:wp-cli:wp-cli:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource),
}, },
{ {
Class: "curl-binary", Class: "curl-binary",