Mirrors/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft synced 2024-11-10 06:14:16 +00:00
Code Issues Projects Releases Packages Wiki Activity

Remove erroneous Java CPEs from generation (#1918)

Browse source 
Signed-off-by: Dan Luhring <dluhring@chainguard.dev>
This commit is contained in:
Dan Luhring 2023-07-06 16:12:55 -04:00 committed by GitHub
parent 8ce88e11fd
commit 81d8019207
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 84 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

84
syft/pkg/cataloger/common/cpe/candidate_by_package_type.go
View file

@ -377,6 +377,90 @@ var defaultCandidateRemovals = buildCandidateRemovalLookup(
candidateKey{PkgName: "docker"},
candidateRemovals{VendorsToRemove: []string{"docker"}},
},
// Java packages
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-builder-support"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-model"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-repository-metadata"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-settings"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-settings-builder"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-api"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-connector-basic"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-impl"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-named-locks"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-spi"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-transport-file"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-transport-http"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-transport-wagon"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-resolver-util"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "maven-shared-utils"},
candidateRemovals{ProductsToRemove: []string{"maven"}},
},
{
pkg.JavaPkg,
candidateKey{PkgName: "gradle-enterprise"},
candidateRemovals{
ProductsToRemove: []string{"gradle-enterprise"},
VendorsToRemove: []string{"gradle"},
},
},
})
// buildCandidateLookup is a convenience function for creating the defaultCandidateAdditions set