From 99be365f625fc49f2c4f9b7a4dbbb56af5d71b6e Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Tue, 27 Aug 2024 14:03:19 +0100 Subject: [PATCH] fix: use official CPE for curl binary cataloger (#3164) The official CPE for curl is `cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*` Signed-off-by: Weston Steimel --- syft/pkg/cataloger/binary/classifiers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/syft/pkg/cataloger/binary/classifiers.go b/syft/pkg/cataloger/binary/classifiers.go index 563a39cfa..b9df7aa46 100644 --- a/syft/pkg/cataloger/binary/classifiers.go +++ b/syft/pkg/cataloger/binary/classifiers.go @@ -537,7 +537,7 @@ func DefaultClassifiers() []Classifier { ), Package: "curl", PURL: mustPURL("pkg:generic/curl@version"), - CPEs: singleCPE("cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*"), + CPEs: singleCPE("cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*"), }, } }