mirror of
https://github.com/anchore/syft
synced 2024-11-12 23:27:20 +00:00
b0ab75fd89
* remove existing cataloging API Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add file cataloging config Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add package cataloging config Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add configs for cross-cutting concerns Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename CLI option configs to not require import aliases later Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update all nested structs for the Catalog struct Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update Catalog cli options - add new cataloger selection options (selection and default) - remove the excludeBinaryOverlapByOwnership - deprecate "catalogers" flag - add new javascript configuration Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * migrate relationship capabilities to separate internal package Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor golang cataloger to use configuration options when creating packages Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * create internal object to facilitate reading from and writing to an SBOM Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * create a command-like object (task) to facilitate partial SBOM creation Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add cataloger selection capability - be able to parse string expressions into a set of resolved actions against sets - be able to use expressions to select/add/remove tasks to/from the final set of tasks to run Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add package, file, and environment related tasks Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update existing file catalogers to use nested UI elements Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add CreateSBOMConfig that drives the SBOM creation process Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * capture SBOM creation info as a struct Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add CreateSBOM() function Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update docs with SBOM selection help + breaking changes Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix multiple override default inputs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix deprecation flag printing to stdout Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor cataloger selection description to separate object Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * keep expression errors and show specific suggestions only Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address additional review feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address more review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * addressed additional PR review feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix file selection references Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove guess language data generation option Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests for coordinatesForSelection Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename relationship attributes Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add descriptions to relationships config fields Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * improve documentation around configuration options Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add explicit errors around legacy config entries Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
135 lines
3.3 KiB
Go
135 lines
3.3 KiB
Go
package task
|
|
|
|
import (
|
|
"context"
|
|
"crypto"
|
|
"fmt"
|
|
|
|
"github.com/anchore/syft/internal/sbomsync"
|
|
"github.com/anchore/syft/syft/artifact"
|
|
"github.com/anchore/syft/syft/file"
|
|
"github.com/anchore/syft/syft/file/cataloger/filecontent"
|
|
"github.com/anchore/syft/syft/file/cataloger/filedigest"
|
|
"github.com/anchore/syft/syft/file/cataloger/filemetadata"
|
|
"github.com/anchore/syft/syft/pkg"
|
|
"github.com/anchore/syft/syft/sbom"
|
|
)
|
|
|
|
func NewFileDigestCatalogerTask(selection file.Selection, hashers ...crypto.Hash) Task {
|
|
if selection == file.NoFilesSelection || len(hashers) == 0 {
|
|
return nil
|
|
}
|
|
|
|
digestsCataloger := filedigest.NewCataloger(hashers)
|
|
|
|
fn := func(ctx context.Context, resolver file.Resolver, builder sbomsync.Builder) error {
|
|
accessor := builder.(sbomsync.Accessor)
|
|
|
|
coordinates, ok := coordinatesForSelection(selection, builder.(sbomsync.Accessor))
|
|
if !ok {
|
|
return nil
|
|
}
|
|
|
|
result, err := digestsCataloger.Catalog(resolver, coordinates...)
|
|
if err != nil {
|
|
return fmt.Errorf("unable to catalog file digests: %w", err)
|
|
}
|
|
|
|
accessor.WriteToSBOM(func(sbom *sbom.SBOM) {
|
|
sbom.Artifacts.FileDigests = result
|
|
})
|
|
|
|
return nil
|
|
}
|
|
|
|
return NewTask("file-digest-cataloger", fn)
|
|
}
|
|
|
|
func NewFileMetadataCatalogerTask(selection file.Selection) Task {
|
|
if selection == file.NoFilesSelection {
|
|
return nil
|
|
}
|
|
|
|
metadataCataloger := filemetadata.NewCataloger()
|
|
|
|
fn := func(ctx context.Context, resolver file.Resolver, builder sbomsync.Builder) error {
|
|
accessor := builder.(sbomsync.Accessor)
|
|
|
|
coordinates, ok := coordinatesForSelection(selection, builder.(sbomsync.Accessor))
|
|
if !ok {
|
|
return nil
|
|
}
|
|
|
|
result, err := metadataCataloger.Catalog(resolver, coordinates...)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
accessor.WriteToSBOM(func(sbom *sbom.SBOM) {
|
|
sbom.Artifacts.FileMetadata = result
|
|
})
|
|
|
|
return nil
|
|
}
|
|
|
|
return NewTask("file-metadata-cataloger", fn)
|
|
}
|
|
|
|
func NewFileContentCatalogerTask(cfg filecontent.Config) Task {
|
|
if len(cfg.Globs) == 0 {
|
|
return nil
|
|
}
|
|
|
|
cat := filecontent.NewCataloger(cfg)
|
|
|
|
fn := func(ctx context.Context, resolver file.Resolver, builder sbomsync.Builder) error {
|
|
accessor := builder.(sbomsync.Accessor)
|
|
|
|
result, err := cat.Catalog(resolver)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
accessor.WriteToSBOM(func(sbom *sbom.SBOM) {
|
|
sbom.Artifacts.FileContents = result
|
|
})
|
|
|
|
return nil
|
|
}
|
|
|
|
return NewTask("file-content-cataloger", fn)
|
|
}
|
|
|
|
// TODO: this should be replaced with a fix that allows passing a coordinate or location iterator to the cataloger
|
|
// Today internal to both cataloger this functions differently: a slice of coordinates vs a channel of locations
|
|
func coordinatesForSelection(selection file.Selection, accessor sbomsync.Accessor) ([]file.Coordinates, bool) {
|
|
if selection == file.AllFilesSelection {
|
|
return nil, true
|
|
}
|
|
|
|
if selection == file.FilesOwnedByPackageSelection {
|
|
var coordinates []file.Coordinates
|
|
|
|
accessor.ReadFromSBOM(func(sbom *sbom.SBOM) {
|
|
for _, r := range sbom.Relationships {
|
|
if r.Type != artifact.ContainsRelationship {
|
|
continue
|
|
}
|
|
if _, ok := r.From.(pkg.Package); !ok {
|
|
continue
|
|
}
|
|
if c, ok := r.To.(file.Coordinates); ok {
|
|
coordinates = append(coordinates, c)
|
|
}
|
|
}
|
|
})
|
|
|
|
if len(coordinates) == 0 {
|
|
return nil, false
|
|
}
|
|
|
|
return coordinates, true
|
|
}
|
|
|
|
return nil, false
|
|
}
|