From 2455b36dd2820a96c999a8f35f073bd494446c78 Mon Sep 17 00:00:00 2001 From: Brady Todhunter Date: Tue, 11 Jan 2022 09:40:55 -0800 Subject: [PATCH 1/3] remove git:// protocol from build steps Signed-off-by: Brady Todhunter --- Dockerfile | 2 +- Makefile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 60586cf14..0b095081c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -55,7 +55,7 @@ RUN set -ex && \ RUN set -ex && \ echo "downloading anchore-cli" && \ - pip3 wheel --wheel-dir=/build_output/cli_wheels/ git+git://github.com/anchore/anchore-cli.git@"${CLI_COMMIT}"\#egg=anchorecli + pip3 wheel --wheel-dir=/build_output/cli_wheels/ git+https://github.com/anchore/anchore-cli.git@"${CLI_COMMIT}"\#egg=anchorecli RUN set -exo pipefail && \ echo "downloading Syft" && \ diff --git a/Makefile b/Makefile index f476b0ea9..7a97c8fc7 100644 --- a/Makefile +++ b/Makefile @@ -74,7 +74,7 @@ GIT_TAG := $(shell echo $${CIRCLE_TAG:=null}) ci: lint build test ## Run full CI pipeline, locally .PHONY: build -build: CLI_REPO ?= git://github.com/anchore/anchore-cli.git +build: CLI_REPO ?= https://github.com/anchore/anchore-cli.git build: Dockerfile setup-test-infra ## Build dev image @$(CI_CMD) build "$(COMMIT_SHA)" "$(GIT_TAG)" "$(TEST_IMAGE_NAME)" "$(CLI_REPO)" From 43224afd11ff169c501cb1baf3a06d7cf9655cb5 Mon Sep 17 00:00:00 2001 From: Vijay Pillai Date: Wed, 26 Jan 2022 09:37:17 -0500 Subject: [PATCH 2/3] add libpq-devel to Dockerfile.functional so that psycopg2 can be compiled on ARM (#1359) Signed-off-by: Vijay Pillai --- scripts/ci/Dockerfile.functional | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/ci/Dockerfile.functional b/scripts/ci/Dockerfile.functional index 97196d58e..fab399718 100644 --- a/scripts/ci/Dockerfile.functional +++ b/scripts/ci/Dockerfile.functional @@ -5,7 +5,7 @@ USER root RUN set -ex && \ echo "installing OS dependencies" && \ - yum install -y gcc make git python38-wheel python38-devel python38-psycopg2 + yum install -y gcc make git python38-wheel python38-devel python38-psycopg2 libpq-devel # Install Docker-in-Docker into the image for testing ENV DOCKERVERSION=18.03.1-ce From e9382a87ca3fc9de9eeb31cce1a58bfcae2a8345 Mon Sep 17 00:00:00 2001 From: Weston Steimel Date: Tue, 1 Feb 2022 23:08:32 +0000 Subject: [PATCH 3/3] integrate syft go-module detection with engine (#1361) * integrate syft go-module detection with engine Signed-off-by: Weston Steimel * add functional tests for golang analyzer Signed-off-by: Weston Steimel * update README Signed-off-by: Weston Steimel --- .gitignore | 1 + README.md | 1 + .../analyzers/syft/handlers/__init__.py | 4 +- .../analyzers/syft/handlers/golang.py | 38 + tests/functional/clients/conftest.py | 8 + ...5857281b1d7dc5477e7e0cbff6ccb2d5f5f8c.json | 31 + .../package_list/fixtures/golang.py | 3163 +++++++++++++++++ .../standalone/package_list/test_golang.py | 62 + .../analyzers/syft/test_syft.py | 3 + 9 files changed, 3310 insertions(+), 1 deletion(-) create mode 100644 anchore_engine/analyzers/syft/handlers/golang.py create mode 100644 tests/functional/clients/scripts/manifests/anchore/test_images@sha256:d7efe8ef45def7a7aa6571de3cc5857281b1d7dc5477e7e0cbff6ccb2d5f5f8c.json create mode 100644 tests/functional/clients/standalone/package_list/fixtures/golang.py create mode 100644 tests/functional/clients/standalone/package_list/test_golang.py diff --git a/.gitignore b/.gitignore index 1780f0546..4abfcfbc8 100644 --- a/.gitignore +++ b/.gitignore @@ -124,3 +124,4 @@ docs/resources/_gen .DS_Store +.local diff --git a/README.md b/README.md index 82440b6c2..b043bcdf2 100644 --- a/README.md +++ b/README.md @@ -40,6 +40,7 @@ Anchore Engine is also the OSS foundation for [Anchore Enterprise](https://ancho - Java Archive (jar, war, ear) - NPM - Python (PIP) +- Go Modules ## Installation diff --git a/anchore_engine/analyzers/syft/handlers/__init__.py b/anchore_engine/analyzers/syft/handlers/__init__.py index 871ad37cf..6100cb41f 100644 --- a/anchore_engine/analyzers/syft/handlers/__init__.py +++ b/anchore_engine/analyzers/syft/handlers/__init__.py @@ -1,4 +1,4 @@ -from . import alpine, debian, gem, java, npm, python, rpm +from . import alpine, debian, gem, golang, java, npm, python, rpm # This is a mapping of **syft** artifact types to modules to transform syft output into engine-compliant output. # Each module has two functions: translate_and_save_entry & save_entry @@ -8,6 +8,7 @@ "npm": npm, "java-archive": java, "jenkins-plugin": java, + "go-module": golang, "apk": alpine, "rpm": rpm, "deb": debian, @@ -25,6 +26,7 @@ "java-war": java, "java-jpi": java, "java-hpi": java, + "go": golang, "apkg": alpine, "rpm": rpm, "dpkg": debian, diff --git a/anchore_engine/analyzers/syft/handlers/golang.py b/anchore_engine/analyzers/syft/handlers/golang.py new file mode 100644 index 000000000..de0048b5a --- /dev/null +++ b/anchore_engine/analyzers/syft/handlers/golang.py @@ -0,0 +1,38 @@ +from anchore_engine.analyzers.syft.handlers.common import save_entry_to_findings + + +def save_entry(findings, engine_entry, pkg_key=None): + if not pkg_key: + pkg_name = engine_entry.get("name", "") + pkg_version = engine_entry.get("version", engine_entry.get("latest", "")) + location = engine_entry.get("location", "/virtual/gopkg/") + pkg_key = f"{location}:{pkg_name}@{pkg_version}" + + save_entry_to_findings(findings, engine_entry, "pkgs.go", pkg_key) + + +def translate_and_save_entry(findings, artifact): + """ + Handler function to map syft results for the go-module type into the engine "raw" document format. + """ + + if len(artifact["locations"]) > 0: + location = artifact["locations"][0]["path"] + else: + location = None + + # craft the artifact document + pkg_value = { + "name": artifact["name"], + "version": artifact["version"], + "location": location, + "type": "go", + "files": [], + "license": "N/A", + "origin": "N/A", + "cpes": artifact.get("cpes", []), + "metadata": artifact.get("metadata", {}), + } + + # inject the artifact document into the "raw" analyzer document + save_entry(findings, pkg_value) diff --git a/tests/functional/clients/conftest.py b/tests/functional/clients/conftest.py index 3bdc1d6c0..6f198a398 100644 --- a/tests/functional/clients/conftest.py +++ b/tests/functional/clients/conftest.py @@ -57,6 +57,14 @@ "image_source": "registry", "schema_version": "v2", }, + "go": { + "registry": "docker.io", + "repo": "anchore/test_images", + "tag": "engine-analyzer-golang-a8b30f2", + "digest": "sha256:d7efe8ef45def7a7aa6571de3cc5857281b1d7dc5477e7e0cbff6ccb2d5f5f8c", + "image_source": "registry", + "schema_version": "v2", + }, "stretch-slim": { "registry": "docker.io", "repo": "anchore/test_images", diff --git a/tests/functional/clients/scripts/manifests/anchore/test_images@sha256:d7efe8ef45def7a7aa6571de3cc5857281b1d7dc5477e7e0cbff6ccb2d5f5f8c.json b/tests/functional/clients/scripts/manifests/anchore/test_images@sha256:d7efe8ef45def7a7aa6571de3cc5857281b1d7dc5477e7e0cbff6ccb2d5f5f8c.json new file mode 100644 index 000000000..e433ba9f4 --- /dev/null +++ b/tests/functional/clients/scripts/manifests/anchore/test_images@sha256:d7efe8ef45def7a7aa6571de3cc5857281b1d7dc5477e7e0cbff6ccb2d5f5f8c.json @@ -0,0 +1,31 @@ +{ + "schemaVersion": 2, + "mediaType": "application/vnd.docker.distribution.manifest.v2+json", + "config": { + "mediaType": "application/vnd.docker.container.image.v1+json", + "size": 2086, + "digest": "sha256:66799fd8f271518d88d027e7df08a428e17b205a624b18399f51b5fca60d1155" + }, + "layers": [ + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "size": 1032, + "digest": "sha256:50d154fea6c198cc6ef3efbe19990bcdb65fc3335928f90a3f4d6683e05ca273" + }, + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "size": 1271, + "digest": "sha256:980015ae30c35f67f9d44ff6fbf0057a255791ec336272d2266fa7725ee13f9e" + }, + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "size": 9331819, + "digest": "sha256:f07027bbe83d08e7432d6587b405a675809eb24e308d45f66a1d02bbec2074fd" + }, + { + "mediaType": "application/vnd.docker.image.rootfs.diff.tar.gzip", + "size": 7580902, + "digest": "sha256:88788463780d9bfa8b52f6800eb0862fce614097408d7e6e08b284f02bb54916" + } + ] +} \ No newline at end of file diff --git a/tests/functional/clients/standalone/package_list/fixtures/golang.py b/tests/functional/clients/standalone/package_list/fixtures/golang.py new file mode 100644 index 000000000..cc4d9ebb3 --- /dev/null +++ b/tests/functional/clients/standalone/package_list/fixtures/golang.py @@ -0,0 +1,3163 @@ +# Generated from result['image']['imagedata']['analysis_report']['package_list']['pkgs.go'] + +pkgs = { + "/usr/local/bin/grype:cloud.google.com/go/storage@v1.10.0": { + "cpes": ["cpe:2.3:a:go:storage:v1.10.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:STgFzyU5/8miMl0//zKh2aQeTyeaUH3WN9bSUiJ09bA=", + }, + "name": "cloud.google.com/go/storage", + "origin": "N/A", + "type": "go", + "version": "v1.10.0", + }, + "/usr/local/bin/grype:cloud.google.com/go@v0.97.0": { + "cpes": [], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:3DXvAyifywvq64LfkKaMOmkWPS1CikIQdMe2lY9vxU8=", + }, + "name": "cloud.google.com/go", + "origin": "N/A", + "type": "go", + "version": "v0.97.0", + }, + "/usr/local/bin/grype:github.com/CycloneDX/cyclonedx-go@v0.4.0": { + "cpes": [ + "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.4.0:*:*:*:*:*:*:*", + "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.4.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Wz4QZ9B4RXGWIWTypVLEOVJgOdFfy5mcS5PGNzUkZxU=", + }, + "name": "github.com/CycloneDX/cyclonedx-go", + "origin": "N/A", + "type": "go", + "version": "v0.4.0", + }, + "/usr/local/bin/grype:github.com/acobaugh/osrelease@v0.1.0": { + "cpes": ["cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Yb59HQDGGNhCj4suHaFQQfBps5wyoKLSSX/J/+UifRE=", + }, + "name": "github.com/acobaugh/osrelease", + "origin": "N/A", + "type": "go", + "version": "v0.1.0", + }, + "/usr/local/bin/grype:github.com/adrg/xdg@v0.2.1": { + "cpes": ["cpe:2.3:a:adrg:xdg:v0.2.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:VSVdnH7cQ7V+B33qSJHTCRlNgra1607Q8PzEmnvb2Ic=", + }, + "name": "github.com/adrg/xdg", + "origin": "N/A", + "type": "go", + "version": "v0.2.1", + }, + "/usr/local/bin/grype:github.com/alicebob/sqlittle@v1.4.0": { + "cpes": ["cpe:2.3:a:alicebob:sqlittle:v1.4.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vgYt0nAjhdf/hg52MjKJ84g/uTzBPfrvI+VUBrIghxA=", + }, + "name": "github.com/alicebob/sqlittle", + "origin": "N/A", + "type": "go", + "version": "v1.4.0", + }, + "/usr/local/bin/grype:github.com/anchore/go-rpmdb@v0.0.0-20210914181456-a9c52348da63": { + "cpes": [ + "cpe:2.3:a:anchore:go-rpmdb:v0.0.0-20210914181456-a9c52348da63:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:go_rpmdb:v0.0.0-20210914181456-a9c52348da63:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:C9W/LAydEz/qdUhx1MdjO9l8NEcFKYknkxDVyo9LAoM=", + }, + "name": "github.com/anchore/go-rpmdb", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210914181456-a9c52348da63", + }, + "/usr/local/bin/grype:github.com/anchore/go-version@v1.2.2-0.20210903204242-51efa5b487c4": { + "cpes": [ + "cpe:2.3:a:anchore:go-version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:go_version:v1.2.2-0.20210903204242-51efa5b487c4:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:rmZG77uXgE+o2gozGEBoUMpX27lsku+xrMwlmBZJtbg=", + }, + "name": "github.com/anchore/go-version", + "origin": "N/A", + "type": "go", + "version": "v1.2.2-0.20210903204242-51efa5b487c4", + }, + "/usr/local/bin/grype:github.com/anchore/packageurl-go@v0.0.0-20210922164639-b3fa992ebd29": { + "cpes": [ + "cpe:2.3:a:anchore:packageurl-go:v0.0.0-20210922164639-b3fa992ebd29:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:packageurl_go:v0.0.0-20210922164639-b3fa992ebd29:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:K9LfnxwhqvihqU0+MF325FNy7fsKV9EGaUxdfR4gnWk=", + }, + "name": "github.com/anchore/packageurl-go", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210922164639-b3fa992ebd29", + }, + "/usr/local/bin/grype:github.com/anchore/stereoscope@v0.0.0-20220110181730-c91cf94a3718": { + "cpes": [ + "cpe:2.3:a:anchore:stereoscope:v0.0.0-20220110181730-c91cf94a3718:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:46+DtmTaPlOCuY5KY3H6zazuz3+E/DSwc+ZpfPhyj50=", + }, + "name": "github.com/anchore/stereoscope", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20220110181730-c91cf94a3718", + }, + "/usr/local/bin/grype:github.com/anchore/syft@v0.36.0": { + "cpes": ["cpe:2.3:a:anchore:syft:v0.36.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:+uwTfkbnkgRnK4HOgQfxw59axlCKBqajG8vmRV17N+8=", + }, + "name": "github.com/anchore/syft", + "origin": "N/A", + "type": "go", + "version": "v0.36.0", + }, + "/usr/local/bin/grype:github.com/andybalholm/brotli@v1.0.4": { + "cpes": ["cpe:2.3:a:andybalholm:brotli:v1.0.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:V7DdXeJtZscaqfNuAdSRuRFzuiKlHSC/Zh3zl9qY3JY=", + }, + "name": "github.com/andybalholm/brotli", + "origin": "N/A", + "type": "go", + "version": "v1.0.4", + }, + "/usr/local/bin/grype:github.com/aws/aws-sdk-go@v1.31.6": { + "cpes": [ + "cpe:2.3:a:aws:aws-sdk-go:v1.31.6:*:*:*:*:*:*:*", + "cpe:2.3:a:aws:aws_sdk_go:v1.31.6:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:nKjQbpXhdImctBh1e0iLg9iQW/X297LPPuY/9f92R2k=", + }, + "name": "github.com/aws/aws-sdk-go", + "origin": "N/A", + "type": "go", + "version": "v1.31.6", + }, + "/usr/local/bin/grype:github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d": { + "cpes": [ + "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*", + "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas=", + }, + "name": "github.com/bgentry/go-netrc", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20140422174119-9fd32a8b3d3d", + }, + "/usr/local/bin/grype:github.com/bmatcuk/doublestar/v2@v2.0.4": { + "cpes": ["cpe:2.3:a:bmatcuk:doublestar:v2.0.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:6I6oUiT/sU27eE2OFcWqBhL1SwjyvQuOssxT4a1yidI=", + }, + "name": "github.com/bmatcuk/doublestar/v2", + "origin": "N/A", + "type": "go", + "version": "v2.0.4", + }, + "/usr/local/bin/grype:github.com/bmatcuk/doublestar/v4@v4.0.2": { + "cpes": ["cpe:2.3:a:bmatcuk:doublestar:v4.0.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:X0krlUVAVmtr2cRoTqR8aDMrDqnB36ht8wpWTiQ3jsA=", + }, + "name": "github.com/bmatcuk/doublestar/v4", + "origin": "N/A", + "type": "go", + "version": "v4.0.2", + }, + "/usr/local/bin/grype:github.com/containerd/containerd@v1.5.9": { + "cpes": ["cpe:2.3:a:containerd:containerd:v1.5.9:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:rs6Xg1gtIxaeyG+Smsb/0xaSDu1VgFhOCKBXxMxbsF4=", + }, + "name": "github.com/containerd/containerd", + "origin": "N/A", + "type": "go", + "version": "v1.5.9", + }, + "/usr/local/bin/grype:github.com/containerd/stargz-snapshotter/estargz@v0.10.0": { + "cpes": [ + "cpe:2.3:a:containerd:stargz-snapshotter:v0.10.0:*:*:*:*:*:*:*", + "cpe:2.3:a:containerd:stargz_snapshotter:v0.10.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:glqzafvxBBAMo+x2w2sdDjUDZeTqqLJmqZPY05qehCU=", + }, + "name": "github.com/containerd/stargz-snapshotter/estargz", + "origin": "N/A", + "type": "go", + "version": "v0.10.0", + }, + "/usr/local/bin/grype:github.com/docker/cli@v20.10.10+incompatible": { + "cpes": ["cpe:2.3:a:docker:cli:v20.10.10\\+incompatible:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:kcbwdgWbrBOH8QwQzaJmyriHwF7XIl4HT1qh0HTRys4=", + }, + "name": "github.com/docker/cli", + "origin": "N/A", + "type": "go", + "version": "v20.10.10+incompatible", + }, + "/usr/local/bin/grype:github.com/docker/distribution@v2.7.1+incompatible": { + "cpes": ["cpe:2.3:a:docker:distribution:v2.7.1\\+incompatible:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:a5mlkVzth6W5A4fOsS3D2EO5BUmsJpcB+cRlLU7cSug=", + }, + "name": "github.com/docker/distribution", + "origin": "N/A", + "type": "go", + "version": "v2.7.1+incompatible", + }, + "/usr/local/bin/grype:github.com/docker/docker-credential-helpers@v0.6.4": { + "cpes": [ + "cpe:2.3:a:docker:docker-credential-helpers:v0.6.4:*:*:*:*:*:*:*", + "cpe:2.3:a:docker:docker_credential_helpers:v0.6.4:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:axCks+yV+2MR3/kZhAmy07yC56WZ2Pwu/fKWtKuZB0o=", + }, + "name": "github.com/docker/docker-credential-helpers", + "origin": "N/A", + "type": "go", + "version": "v0.6.4", + }, + "/usr/local/bin/grype:github.com/docker/docker@v20.10.11+incompatible": { + "cpes": ["cpe:2.3:a:docker:docker:v20.10.11\\+incompatible:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:OqzI/g/W54LczvhnccGqniFoQghHx3pklbLuhfXpqGo=", + }, + "name": "github.com/docker/docker", + "origin": "N/A", + "type": "go", + "version": "v20.10.11+incompatible", + }, + "/usr/local/bin/grype:github.com/docker/go-connections@v0.4.0": { + "cpes": [ + "cpe:2.3:a:docker:go-connections:v0.4.0:*:*:*:*:*:*:*", + "cpe:2.3:a:docker:go_connections:v0.4.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=", + }, + "name": "github.com/docker/go-connections", + "origin": "N/A", + "type": "go", + "version": "v0.4.0", + }, + "/usr/local/bin/grype:github.com/docker/go-units@v0.4.0": { + "cpes": [ + "cpe:2.3:a:docker:go-units:v0.4.0:*:*:*:*:*:*:*", + "cpe:2.3:a:docker:go_units:v0.4.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:3uh0PgVws3nIA0Q+MwDC8yjEPf9zjRfZZWXZYDct3Tw=", + }, + "name": "github.com/docker/go-units", + "origin": "N/A", + "type": "go", + "version": "v0.4.0", + }, + "/usr/local/bin/grype:github.com/dsnet/compress@v0.0.2-0.20210315054119-f66993602bf5": { + "cpes": [ + "cpe:2.3:a:dsnet:compress:v0.0.2-0.20210315054119-f66993602bf5:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:iFaUwBSo5Svw6L7HYpRu/0lE3e0BaElwnNO1qkNQxBY=", + }, + "name": "github.com/dsnet/compress", + "origin": "N/A", + "type": "go", + "version": "v0.0.2-0.20210315054119-f66993602bf5", + }, + "/usr/local/bin/grype:github.com/dustin/go-humanize@v1.0.0": { + "cpes": [ + "cpe:2.3:a:dustin:go-humanize:v1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:dustin:go_humanize:v1.0.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=", + }, + "name": "github.com/dustin/go-humanize", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/grype:github.com/facebookincubator/nvdtools@v0.1.4": { + "cpes": ["cpe:2.3:a:facebookincubator:nvdtools:v0.1.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:x1Ucw9+bSkMd8DJJN4jNQ1Lk4PSFlJarGOxp9D6WUMo=", + }, + "name": "github.com/facebookincubator/nvdtools", + "origin": "N/A", + "type": "go", + "version": "v0.1.4", + }, + "/usr/local/bin/grype:github.com/fsnotify/fsnotify@v1.4.9": { + "cpes": ["cpe:2.3:a:fsnotify:fsnotify:v1.4.9:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=", + }, + "name": "github.com/fsnotify/fsnotify", + "origin": "N/A", + "type": "go", + "version": "v1.4.9", + }, + "/usr/local/bin/grype:github.com/gabriel-vasile/mimetype@v1.3.0": { + "cpes": [ + "cpe:2.3:a:gabriel-vasile:mimetype:v1.3.0:*:*:*:*:*:*:*", + "cpe:2.3:a:gabriel_vasile:mimetype:v1.3.0:*:*:*:*:*:*:*", + "cpe:2.3:a:gabriel:mimetype:v1.3.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:4YOHITFLyYwF+iqG0ybSLGArRItynpfwdlWRmJnd75E=", + }, + "name": "github.com/gabriel-vasile/mimetype", + "origin": "N/A", + "type": "go", + "version": "v1.3.0", + }, + "/usr/local/bin/grype:github.com/go-restruct/restruct@v1.2.0-alpha": { + "cpes": [ + "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*", + "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*", + "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:2Lp474S/9660+SJjpVxoKuWX09JsXHSrdV7Nv3/gkvc=", + }, + "name": "github.com/go-restruct/restruct", + "origin": "N/A", + "type": "go", + "version": "v1.2.0-alpha", + }, + "/usr/local/bin/grype:github.com/gogo/protobuf@v1.3.2": { + "cpes": ["cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=", + }, + "name": "github.com/gogo/protobuf", + "origin": "N/A", + "type": "go", + "version": "v1.3.2", + }, + "/usr/local/bin/grype:github.com/golang/groupcache@v0.0.0-20200121045136-8c9f03a8e57e": { + "cpes": [ + "cpe:2.3:a:golang:groupcache:v0.0.0-20200121045136-8c9f03a8e57e:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:1r7pUrabqp18hOBcwBwiTsbnFeTZHV9eER/QT5JVZxY=", + }, + "name": "github.com/golang/groupcache", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200121045136-8c9f03a8e57e", + }, + "/usr/local/bin/grype:github.com/golang/protobuf@v1.5.2": { + "cpes": ["cpe:2.3:a:golang:protobuf:v1.5.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw=", + }, + "name": "github.com/golang/protobuf", + "origin": "N/A", + "type": "go", + "version": "v1.5.2", + }, + "/usr/local/bin/grype:github.com/golang/snappy@v0.0.3": { + "cpes": ["cpe:2.3:a:golang:snappy:v0.0.3:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:fHPg5GQYlCeLIPB9BZqMVR5nR9A+IM5zcgeTdjMYmLA=", + }, + "name": "github.com/golang/snappy", + "origin": "N/A", + "type": "go", + "version": "v0.0.3", + }, + "/usr/local/bin/grype:github.com/google/go-cmp@v0.5.6": { + "cpes": [ + "cpe:2.3:a:google:go-cmp:v0.5.6:*:*:*:*:*:*:*", + "cpe:2.3:a:google:go_cmp:v0.5.6:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:BKbKCqvP6I+rmFHt06ZmyQtvB8xAkWdhFyr0ZUNZcxQ=", + }, + "name": "github.com/google/go-cmp", + "origin": "N/A", + "type": "go", + "version": "v0.5.6", + }, + "/usr/local/bin/grype:github.com/google/go-containerregistry@v0.7.0": { + "cpes": [ + "cpe:2.3:a:google:go-containerregistry:v0.7.0:*:*:*:*:*:*:*", + "cpe:2.3:a:google:go_containerregistry:v0.7.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:u0onUUOcyoCDHEiJoyR1R1gx5er1+r06V5DBhUU5ndk=", + }, + "name": "github.com/google/go-containerregistry", + "origin": "N/A", + "type": "go", + "version": "v0.7.0", + }, + "/usr/local/bin/grype:github.com/google/uuid@v1.2.0": { + "cpes": ["cpe:2.3:a:google:uuid:v1.2.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qJYtXnJRWmpe7m/3XlyhrsLrEURqHRM2kxzoxXqyUDs=", + }, + "name": "github.com/google/uuid", + "origin": "N/A", + "type": "go", + "version": "v1.2.0", + }, + "/usr/local/bin/grype:github.com/googleapis/gax-go/v2@v2.1.0": { + "cpes": [ + "cpe:2.3:a:googleapis:gax-go:v2.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:googleapis:gax_go:v2.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:6DWmvNpomjL1+3liNSZbVns3zsYzzCjm6pRBO1tLeso=", + }, + "name": "github.com/googleapis/gax-go/v2", + "origin": "N/A", + "type": "go", + "version": "v2.1.0", + }, + "/usr/local/bin/grype:github.com/gookit/color@v1.4.2": { + "cpes": ["cpe:2.3:a:gookit:color:v1.4.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:tXy44JFSFkKnELV6WaMo/lLfu/meqITX3iAV52do7lk=", + }, + "name": "github.com/gookit/color", + "origin": "N/A", + "type": "go", + "version": "v1.4.2", + }, + "/usr/local/bin/grype:github.com/hashicorp/errwrap@v1.0.0": { + "cpes": ["cpe:2.3:a:hashicorp:errwrap:v1.0.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=", + }, + "name": "github.com/hashicorp/errwrap", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/grype:github.com/hashicorp/go-cleanhttp@v0.5.2": { + "cpes": [ + "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=", + }, + "name": "github.com/hashicorp/go-cleanhttp", + "origin": "N/A", + "type": "go", + "version": "v0.5.2", + }, + "/usr/local/bin/grype:github.com/hashicorp/go-getter@v1.5.9": { + "cpes": [ + "cpe:2.3:a:hashicorp:go-getter:v1.5.9:*:*:*:*:*:*:*", + "cpe:2.3:a:hashicorp:go_getter:v1.5.9:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:b7ahZW50iQiUek/at3CvZhPK1/jiV6CtKcsJiR6E4R0=", + }, + "name": "github.com/hashicorp/go-getter", + "origin": "N/A", + "type": "go", + "version": "v1.5.9", + }, + "/usr/local/bin/grype:github.com/hashicorp/go-multierror@v1.1.0": { + "cpes": [ + "cpe:2.3:a:hashicorp:go-multierror:v1.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:hashicorp:go_multierror:v1.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:B9UzwGQJehnUY1yNrnwREHc3fGbC2xefo8g4TbElacI=", + }, + "name": "github.com/hashicorp/go-multierror", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/grype:github.com/hashicorp/go-safetemp@v1.0.0": { + "cpes": [ + "cpe:2.3:a:hashicorp:go-safetemp:v1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:hashicorp:go_safetemp:v1.0.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:2HR189eFNrjHQyENnQMMpCiBAsRxzbTMIgBhEyExpmo=", + }, + "name": "github.com/hashicorp/go-safetemp", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/grype:github.com/hashicorp/go-version@v1.2.0": { + "cpes": [ + "cpe:2.3:a:hashicorp:go-version:v1.2.0:*:*:*:*:*:*:*", + "cpe:2.3:a:hashicorp:go_version:v1.2.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:3vNe/fWF5CBgRIguda1meWhsZHy3m8gCJ5wx+dIzX/E=", + }, + "name": "github.com/hashicorp/go-version", + "origin": "N/A", + "type": "go", + "version": "v1.2.0", + }, + "/usr/local/bin/grype:github.com/hashicorp/hcl@v1.0.0": { + "cpes": ["cpe:2.3:a:hashicorp:hcl:v1.0.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=", + }, + "name": "github.com/hashicorp/hcl", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/grype:github.com/jinzhu/copier@v0.3.2": { + "cpes": ["cpe:2.3:a:jinzhu:copier:v0.3.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:QdBOCbaouLDYaIPFfi1bKv5F5tPpeTwXe4sD0jqtz5w=", + }, + "name": "github.com/jinzhu/copier", + "origin": "N/A", + "type": "go", + "version": "v0.3.2", + }, + "/usr/local/bin/grype:github.com/jmespath/go-jmespath@v0.3.0": { + "cpes": [ + "cpe:2.3:a:jmespath:go-jmespath:v0.3.0:*:*:*:*:*:*:*", + "cpe:2.3:a:jmespath:go_jmespath:v0.3.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:OS12ieG61fsCg5+qLJ+SsW9NicxNkg3b25OyT2yCeUc=", + }, + "name": "github.com/jmespath/go-jmespath", + "origin": "N/A", + "type": "go", + "version": "v0.3.0", + }, + "/usr/local/bin/grype:github.com/klauspost/compress@v1.13.6": { + "cpes": ["cpe:2.3:a:klauspost:compress:v1.13.6:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:P76CopJELS0TiO2mebmnzgWaajssP/EszplttgQxcgc=", + }, + "name": "github.com/klauspost/compress", + "origin": "N/A", + "type": "go", + "version": "v1.13.6", + }, + "/usr/local/bin/grype:github.com/klauspost/pgzip@v1.2.5": { + "cpes": ["cpe:2.3:a:klauspost:pgzip:v1.2.5:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qnWYvvKqedOF2ulHpMG72XQol4ILEJ8k2wwRl/Km8oE=", + }, + "name": "github.com/klauspost/pgzip", + "origin": "N/A", + "type": "go", + "version": "v1.2.5", + }, + "/usr/local/bin/grype:github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f": { + "cpes": [ + "cpe:2.3:a:knqyf263:go-apk-version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*", + "cpe:2.3:a:knqyf263:go_apk_version:v0.0.0-20200609155635-041fdbb8563f:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:GvCU5GXhHq+7LeOzx/haG7HSIZokl3/0GkoUFzsRJjg=", + }, + "name": "github.com/knqyf263/go-apk-version", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200609155635-041fdbb8563f", + }, + "/usr/local/bin/grype:github.com/knqyf263/go-deb-version@v0.0.0-20190517075300-09fca494f03d": { + "cpes": [ + "cpe:2.3:a:knqyf263:go-deb-version:v0.0.0-20190517075300-09fca494f03d:*:*:*:*:*:*:*", + "cpe:2.3:a:knqyf263:go_deb_version:v0.0.0-20190517075300-09fca494f03d:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:X4cedH4Kn3JPupAwwWuo4AzYp16P0OyLO9d7OnMZc/c=", + }, + "name": "github.com/knqyf263/go-deb-version", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20190517075300-09fca494f03d", + }, + "/usr/local/bin/grype:github.com/magiconair/properties@v1.8.5": { + "cpes": ["cpe:2.3:a:magiconair:properties:v1.8.5:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:b6kJs+EmPFMYGkow9GiUyCyOvIwYetYJ3fSaWak/Gls=", + }, + "name": "github.com/magiconair/properties", + "origin": "N/A", + "type": "go", + "version": "v1.8.5", + }, + "/usr/local/bin/grype:github.com/mattn/go-colorable@v0.1.6": { + "cpes": [ + "cpe:2.3:a:mattn:go-colorable:v0.1.6:*:*:*:*:*:*:*", + "cpe:2.3:a:mattn:go_colorable:v0.1.6:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:6Su7aK7lXmJ/U79bYtBjLNaha4Fs1Rg9plHpcH+vvnE=", + }, + "name": "github.com/mattn/go-colorable", + "origin": "N/A", + "type": "go", + "version": "v0.1.6", + }, + "/usr/local/bin/grype:github.com/mattn/go-isatty@v0.0.12": { + "cpes": [ + "cpe:2.3:a:mattn:go-isatty:v0.0.12:*:*:*:*:*:*:*", + "cpe:2.3:a:mattn:go_isatty:v0.0.12:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:wuysRhFDzyxgEmMf5xjvJ2M9dZoWAXNNr5LSBS7uHXY=", + }, + "name": "github.com/mattn/go-isatty", + "origin": "N/A", + "type": "go", + "version": "v0.0.12", + }, + "/usr/local/bin/grype:github.com/mattn/go-runewidth@v0.0.7": { + "cpes": [ + "cpe:2.3:a:mattn:go-runewidth:v0.0.7:*:*:*:*:*:*:*", + "cpe:2.3:a:mattn:go_runewidth:v0.0.7:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Ei8KR0497xHyKJPAv59M1dkC+rOZCMBJ+t3fZ+twI54=", + }, + "name": "github.com/mattn/go-runewidth", + "origin": "N/A", + "type": "go", + "version": "v0.0.7", + }, + "/usr/local/bin/grype:github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d": { + "cpes": [ + "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:5PJl274Y63IEHC+7izoQE9x6ikvDFZS2mDVS3drnohI=", + }, + "name": "github.com/mgutz/ansi", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200706080929-d51e80ef957d", + }, + "/usr/local/bin/grype:github.com/mholt/archiver/v3@v3.5.1": { + "cpes": ["cpe:2.3:a:mholt:archiver:v3.5.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:rDjOBX9JSF5BvoJGvjqK479aL70qh9DIpZCl+k7Clwo=", + }, + "name": "github.com/mholt/archiver/v3", + "origin": "N/A", + "type": "go", + "version": "v3.5.1", + }, + "/usr/local/bin/grype:github.com/mitchellh/go-homedir@v1.1.0": { + "cpes": [ + "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=", + }, + "name": "github.com/mitchellh/go-homedir", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/grype:github.com/mitchellh/go-testing-interface@v1.0.0": { + "cpes": [ + "cpe:2.3:a:mitchellh:go-testing-interface:v1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:mitchellh:go_testing_interface:v1.0.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:fzU/JVNcaqHQEcVFAKeR41fkiLdIPrefOvVG1VZ96U0=", + }, + "name": "github.com/mitchellh/go-testing-interface", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/grype:github.com/mitchellh/hashstructure/v2@v2.0.2": { + "cpes": ["cpe:2.3:a:mitchellh:hashstructure:v2.0.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vGKWl0YJqUNxE8d+h8f6NJLcCJrgbhC4NcD46KavDd4=", + }, + "name": "github.com/mitchellh/hashstructure/v2", + "origin": "N/A", + "type": "go", + "version": "v2.0.2", + }, + "/usr/local/bin/grype:github.com/mitchellh/mapstructure@v1.4.1": { + "cpes": ["cpe:2.3:a:mitchellh:mapstructure:v1.4.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:CpVNEelQCZBooIPDn+AR3NpivK/TIKU8bDxdASFVQag=", + }, + "name": "github.com/mitchellh/mapstructure", + "origin": "N/A", + "type": "go", + "version": "v1.4.1", + }, + "/usr/local/bin/grype:github.com/nwaples/rardecode@v1.1.0": { + "cpes": ["cpe:2.3:a:nwaples:rardecode:v1.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vSxaY8vQhOcVr4mm5e8XllHWTiM4JF507A0Katqw7MQ=", + }, + "name": "github.com/nwaples/rardecode", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/grype:github.com/olekukonko/tablewriter@v0.0.4": { + "cpes": ["cpe:2.3:a:olekukonko:tablewriter:v0.0.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vHD/YYe1Wolo78koG299f7V/VAS08c6IpCLn+Ejf/w8=", + }, + "name": "github.com/olekukonko/tablewriter", + "origin": "N/A", + "type": "go", + "version": "v0.0.4", + }, + "/usr/local/bin/grype:github.com/opencontainers/go-digest@v1.0.0": { + "cpes": [ + "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=", + }, + "name": "github.com/opencontainers/go-digest", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/grype:github.com/opencontainers/image-spec@v1.0.2": { + "cpes": [ + "cpe:2.3:a:opencontainers:image-spec:v1.0.2:*:*:*:*:*:*:*", + "cpe:2.3:a:opencontainers:image_spec:v1.0.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:9yCKha/T5XdGtO0q9Q9a6T5NUCsTn/DrBg0D7ufOcFM=", + }, + "name": "github.com/opencontainers/image-spec", + "origin": "N/A", + "type": "go", + "version": "v1.0.2", + }, + "/usr/local/bin/grype:github.com/pelletier/go-toml@v1.9.3": { + "cpes": [ + "cpe:2.3:a:pelletier:go-toml:v1.9.3:*:*:*:*:*:*:*", + "cpe:2.3:a:pelletier:go_toml:v1.9.3:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:zeC5b1GviRUyKYd6OJPvBU/mcVDVoL1OhT17FCt5dSQ=", + }, + "name": "github.com/pelletier/go-toml", + "origin": "N/A", + "type": "go", + "version": "v1.9.3", + }, + "/usr/local/bin/grype:github.com/pierrec/lz4/v4@v4.1.2": { + "cpes": ["cpe:2.3:a:pierrec:lz4:v4.1.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qvY3YFXRQE/XB8MlLzJH7mSzBs74eA2gg52YTk6jUPM=", + }, + "name": "github.com/pierrec/lz4/v4", + "origin": "N/A", + "type": "go", + "version": "v4.1.2", + }, + "/usr/local/bin/grype:github.com/pkg/errors@v0.9.1": { + "cpes": ["cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=", + }, + "name": "github.com/pkg/errors", + "origin": "N/A", + "type": "go", + "version": "v0.9.1", + }, + "/usr/local/bin/grype:github.com/pkg/profile@v1.6.0": { + "cpes": ["cpe:2.3:a:pkg:profile:v1.6.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:hUDfIISABYI59DyeB3OTay/HxSRwTQ8rB/H83k6r5dM=", + }, + "name": "github.com/pkg/profile", + "origin": "N/A", + "type": "go", + "version": "v1.6.0", + }, + "/usr/local/bin/grype:github.com/scylladb/go-set@v1.0.2": { + "cpes": [ + "cpe:2.3:a:scylladb:go-set:v1.0.2:*:*:*:*:*:*:*", + "cpe:2.3:a:scylladb:go_set:v1.0.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:SkvlMCKhP0wyyct6j+0IHJkBkSZL+TDzZ4E7f7BCcRE=", + }, + "name": "github.com/scylladb/go-set", + "origin": "N/A", + "type": "go", + "version": "v1.0.2", + }, + "/usr/local/bin/grype:github.com/sirupsen/logrus@v1.8.1": { + "cpes": ["cpe:2.3:a:sirupsen:logrus:v1.8.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE=", + }, + "name": "github.com/sirupsen/logrus", + "origin": "N/A", + "type": "go", + "version": "v1.8.1", + }, + "/usr/local/bin/grype:github.com/spdx/tools-golang@v0.1.0": { + "cpes": [ + "cpe:2.3:a:spdx:tools-golang:v0.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:spdx:tools_golang:v0.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:iDMNEPqQk6CdiDj6eWDIDw85j0wQ3IR3pH9p0X05TSQ=", + }, + "name": "github.com/spdx/tools-golang", + "origin": "N/A", + "type": "go", + "version": "v0.1.0", + }, + "/usr/local/bin/grype:github.com/spf13/afero@v1.6.0": { + "cpes": ["cpe:2.3:a:spf13:afero:v1.6.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:xoax2sJ2DT8S8xA2paPFjDCScCNeWsg75VG0DLRreiY=", + }, + "name": "github.com/spf13/afero", + "origin": "N/A", + "type": "go", + "version": "v1.6.0", + }, + "/usr/local/bin/grype:github.com/spf13/cast@v1.3.1": { + "cpes": ["cpe:2.3:a:spf13:cast:v1.3.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:nFm6S0SMdyzrzcmThSipiEubIDy8WEXKNZ0UOgiRpng=", + }, + "name": "github.com/spf13/cast", + "origin": "N/A", + "type": "go", + "version": "v1.3.1", + }, + "/usr/local/bin/grype:github.com/spf13/cobra@v1.2.1": { + "cpes": ["cpe:2.3:a:spf13:cobra:v1.2.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:+KmjbUw1hriSNMF55oPrkZcb27aECyrj8V2ytv7kWDw=", + }, + "name": "github.com/spf13/cobra", + "origin": "N/A", + "type": "go", + "version": "v1.2.1", + }, + "/usr/local/bin/grype:github.com/spf13/jwalterweatherman@v1.1.0": { + "cpes": ["cpe:2.3:a:spf13:jwalterweatherman:v1.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmqnqMYADFk=", + }, + "name": "github.com/spf13/jwalterweatherman", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/grype:github.com/spf13/pflag@v1.0.5": { + "cpes": ["cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=", + }, + "name": "github.com/spf13/pflag", + "origin": "N/A", + "type": "go", + "version": "v1.0.5", + }, + "/usr/local/bin/grype:github.com/spf13/viper@v1.8.1": { + "cpes": ["cpe:2.3:a:spf13:viper:v1.8.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Kq1fyeebqsBfbjZj4EL7gj2IO0mMaiyjYUWcUsl2O44=", + }, + "name": "github.com/spf13/viper", + "origin": "N/A", + "type": "go", + "version": "v1.8.1", + }, + "/usr/local/bin/grype:github.com/subosito/gotenv@v1.2.0": { + "cpes": ["cpe:2.3:a:subosito:gotenv:v1.2.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=", + }, + "name": "github.com/subosito/gotenv", + "origin": "N/A", + "type": "go", + "version": "v1.2.0", + }, + "/usr/local/bin/grype:github.com/ulikunitz/xz@v0.5.9": { + "cpes": ["cpe:2.3:a:ulikunitz:xz:v0.5.9:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:RsKRIA2MO8x56wkkcd3LbtcE/uMszhb6DpRf+3uwa3I=", + }, + "name": "github.com/ulikunitz/xz", + "origin": "N/A", + "type": "go", + "version": "v0.5.9", + }, + "/usr/local/bin/grype:github.com/vbatts/tar-split@v0.11.2": { + "cpes": [ + "cpe:2.3:a:vbatts:tar-split:v0.11.2:*:*:*:*:*:*:*", + "cpe:2.3:a:vbatts:tar_split:v0.11.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Via6XqJr0hceW4wff3QRzD5gAk/tatMw/4ZA7cTlIME=", + }, + "name": "github.com/vbatts/tar-split", + "origin": "N/A", + "type": "go", + "version": "v0.11.2", + }, + "/usr/local/bin/grype:github.com/vifraa/gopom@v0.1.0": { + "cpes": ["cpe:2.3:a:vifraa:gopom:v0.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:v897eVxf6lflkEXzPmKbo4YhX2oS/LGjz7cqjWnSmCU=", + }, + "name": "github.com/vifraa/gopom", + "origin": "N/A", + "type": "go", + "version": "v0.1.0", + }, + "/usr/local/bin/grype:github.com/wagoodman/go-partybus@v0.0.0-20210627031916-db1f5573bbc5": { + "cpes": [ + "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20210627031916-db1f5573bbc5:*:*:*:*:*:*:*", + "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20210627031916-db1f5573bbc5:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:phTLPgMRDYTizrBSKsNSOa2zthoC2KsJsaY/8sg3rD8=", + }, + "name": "github.com/wagoodman/go-partybus", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210627031916-db1f5573bbc5", + }, + "/usr/local/bin/grype:github.com/wagoodman/go-progress@v0.0.0-20200807221327-51d465df1451": { + "cpes": [ + "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20200807221327-51d465df1451:*:*:*:*:*:*:*", + "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20200807221327-51d465df1451:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:ULknorKcCigmaFEBfB99pzEQmYY2E0F5Yp/bIyaBdEI=", + }, + "name": "github.com/wagoodman/go-progress", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200807221327-51d465df1451", + }, + "/usr/local/bin/grype:github.com/wagoodman/jotframe@v0.0.0-20211129225309-56b0d0a4aebb": { + "cpes": [ + "cpe:2.3:a:wagoodman:jotframe:v0.0.0-20211129225309-56b0d0a4aebb:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Yz6VVOcLuWLAHYlJzTw7JKnWxdV/WXpug2X0quEzRnY=", + }, + "name": "github.com/wagoodman/jotframe", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211129225309-56b0d0a4aebb", + }, + "/usr/local/bin/grype:github.com/x-cray/logrus-prefixed-formatter@v0.5.2": { + "cpes": [ + "cpe:2.3:a:x-cray:logrus-prefixed-formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x-cray:logrus_prefixed_formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x_cray:logrus-prefixed-formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x_cray:logrus_prefixed_formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x:logrus-prefixed-formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x:logrus_prefixed_formatter:v0.5.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:00txxvfBM9muc0jiLIEAkAcIMJzfthRT6usrui8uGmg=", + }, + "name": "github.com/x-cray/logrus-prefixed-formatter", + "origin": "N/A", + "type": "go", + "version": "v0.5.2", + }, + "/usr/local/bin/grype:github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8": { + "cpes": ["cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo=", + }, + "name": "github.com/xi2/xz", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20171230120015-48954b6210f8", + }, + "/usr/local/bin/grype:github.com/xo/terminfo@v0.0.0-20210125001918-ca9a967f8778": { + "cpes": [ + "cpe:2.3:a:xo:terminfo:v0.0.0-20210125001918-ca9a967f8778:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:QldyIu/L63oPpyvQmHgvgickp1Yw510KJOqX7H24mg8=", + }, + "name": "github.com/xo/terminfo", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210125001918-ca9a967f8778", + }, + "/usr/local/bin/grype:go.opencensus.io@v0.23.0": { + "cpes": [], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:gqCw0LfLxScz8irSi8exQc7fyQ0fKQU/qnC/X8+V/1M=", + }, + "name": "go.opencensus.io", + "origin": "N/A", + "type": "go", + "version": "v0.23.0", + }, + "/usr/local/bin/grype:golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2": { + "cpes": [ + "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20210322153248-0c34fe9e7dc2:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:It14KIkyBFYkHkwZ7k45minvA9aorojkyjGk9KJ5B/w=", + }, + "name": "golang.org/x/crypto", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210322153248-0c34fe9e7dc2", + }, + "/usr/local/bin/grype:golang.org/x/exp@v0.0.0-20200224162631-6cc2880d07d6": { + "cpes": [ + "cpe:2.3:a:golang:x\\/exp:v0.0.0-20200224162631-6cc2880d07d6:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:QE6XYQK6naiK1EPAe1g/ILLxN5RBoH5xkJk3CqlMI/Y=", + }, + "name": "golang.org/x/exp", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200224162631-6cc2880d07d6", + }, + "/usr/local/bin/grype:golang.org/x/mod@v0.4.2": { + "cpes": ["cpe:2.3:a:golang:x\\/mod:v0.4.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Gz96sIWK3OalVv/I/qNygP42zyoKp3xptRVCWRFEBvo=", + }, + "name": "golang.org/x/mod", + "origin": "N/A", + "type": "go", + "version": "v0.4.2", + }, + "/usr/local/bin/grype:golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2": { + "cpes": [ + "cpe:2.3:a:golang:x\\/net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:CIJ76btIcR3eFI5EgSo6k1qKw9KJexJuRLI9G7Hp5wE=", + }, + "name": "golang.org/x/net", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211112202133-69e39bad7dc2", + }, + "/usr/local/bin/grype:golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8": { + "cpes": [ + "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20211104180415-d3ed0bb246c8:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:RerP+noqYHUQ8CMRcPlC2nvTa4dcBIjegkuWdcUDuqg=", + }, + "name": "golang.org/x/oauth2", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211104180415-d3ed0bb246c8", + }, + "/usr/local/bin/grype:golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c": { + "cpes": [ + "cpe:2.3:a:golang:x\\/sync:v0.0.0-20210220032951-036812b2e83c:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:5KslGYwFpkhGh+Q16bwMP3cOontH8FOep7tGV86Y7SQ=", + }, + "name": "golang.org/x/sync", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210220032951-036812b2e83c", + }, + "/usr/local/bin/grype:golang.org/x/sys@v0.0.0-20211110154304-99a53858aa08": { + "cpes": [ + "cpe:2.3:a:golang:x\\/sys:v0.0.0-20211110154304-99a53858aa08:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:WecRHqgE09JBkh/584XIE6PMz5KKE/vER4izNUi30AQ=", + }, + "name": "golang.org/x/sys", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211110154304-99a53858aa08", + }, + "/usr/local/bin/grype:golang.org/x/term@v0.0.0-20210927222741-03fcf44c2211": { + "cpes": [ + "cpe:2.3:a:golang:x\\/term:v0.0.0-20210927222741-03fcf44c2211:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:JGgROgKl9N8DuW20oFS5gxc+lE67/N3FcwmBPMe7ArY=", + }, + "name": "golang.org/x/term", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210927222741-03fcf44c2211", + }, + "/usr/local/bin/grype:golang.org/x/text@v0.3.6": { + "cpes": ["cpe:2.3:a:golang:x\\/text:v0.3.6:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:aRYxNxv6iGQlyVaZmk6ZgYEDa+Jg18DxebPSrd6bg1M=", + }, + "name": "golang.org/x/text", + "origin": "N/A", + "type": "go", + "version": "v0.3.6", + }, + "/usr/local/bin/grype:golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1": { + "cpes": [ + "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20200804184101-5ec99f83aff1:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=", + }, + "name": "golang.org/x/xerrors", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200804184101-5ec99f83aff1", + }, + "/usr/local/bin/grype:google.golang.org/api@v0.57.0": { + "cpes": ["cpe:2.3:a:google:api:v0.57.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:4t9zuDlHLcIx0ZEhmXEeFVCRsiOgpgn2QOH9N0MNjPI=", + }, + "name": "google.golang.org/api", + "origin": "N/A", + "type": "go", + "version": "v0.57.0", + }, + "/usr/local/bin/grype:google.golang.org/genproto@v0.0.0-20211111162719-482062a4217b": { + "cpes": [ + "cpe:2.3:a:google:genproto:v0.0.0-20211111162719-482062a4217b:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qvEQEwKjZRAg6rjY/jqfJ7T8/w/D7jTIFJGcaSka96k=", + }, + "name": "google.golang.org/genproto", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211111162719-482062a4217b", + }, + "/usr/local/bin/grype:google.golang.org/grpc@v1.42.0": { + "cpes": ["cpe:2.3:a:google:grpc:v1.42.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:XT2/MFpuPFsEX2fWh3YQtHkZ+WYZFQRfaUgLZYj/p6A=", + }, + "name": "google.golang.org/grpc", + "origin": "N/A", + "type": "go", + "version": "v1.42.0", + }, + "/usr/local/bin/grype:google.golang.org/protobuf@v1.27.1": { + "cpes": ["cpe:2.3:a:google:protobuf:v1.27.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:SnqbnDw1V7RiZcXPx5MEeqPv2s79L9i7BJUlG/+RurQ=", + }, + "name": "google.golang.org/protobuf", + "origin": "N/A", + "type": "go", + "version": "v1.27.1", + }, + "/usr/local/bin/grype:gopkg.in/ini.v1@v1.62.0": { + "cpes": [], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:duBzk771uxoUuOlyRLkHsygud9+5lrlGjdFBb4mSKDU=", + }, + "name": "gopkg.in/ini.v1", + "origin": "N/A", + "type": "go", + "version": "v1.62.0", + }, + "/usr/local/bin/grype:gopkg.in/yaml.v2@v2.4.0": { + "cpes": [], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/grype", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=", + }, + "name": "gopkg.in/yaml.v2", + "origin": "N/A", + "type": "go", + "version": "v2.4.0", + }, + "/usr/local/bin/syft:github.com/CycloneDX/cyclonedx-go@v0.4.0": { + "cpes": [ + "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.4.0:*:*:*:*:*:*:*", + "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.4.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Wz4QZ9B4RXGWIWTypVLEOVJgOdFfy5mcS5PGNzUkZxU=", + }, + "name": "github.com/CycloneDX/cyclonedx-go", + "origin": "N/A", + "type": "go", + "version": "v0.4.0", + }, + "/usr/local/bin/syft:github.com/acobaugh/osrelease@v0.1.0": { + "cpes": ["cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Yb59HQDGGNhCj4suHaFQQfBps5wyoKLSSX/J/+UifRE=", + }, + "name": "github.com/acobaugh/osrelease", + "origin": "N/A", + "type": "go", + "version": "v0.1.0", + }, + "/usr/local/bin/syft:github.com/adrg/xdg@v0.2.1": { + "cpes": ["cpe:2.3:a:adrg:xdg:v0.2.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:VSVdnH7cQ7V+B33qSJHTCRlNgra1607Q8PzEmnvb2Ic=", + }, + "name": "github.com/adrg/xdg", + "origin": "N/A", + "type": "go", + "version": "v0.2.1", + }, + "/usr/local/bin/syft:github.com/anchore/client-go@v0.0.0-20210222170800-9c70f9b80bcf": { + "cpes": [ + "cpe:2.3:a:anchore:client-go:v0.0.0-20210222170800-9c70f9b80bcf:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:client_go:v0.0.0-20210222170800-9c70f9b80bcf:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:DYssiUV1pBmKqzKsm4mqXx8artqC0Q8HgZsVI3lMsAg=", + }, + "name": "github.com/anchore/client-go", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210222170800-9c70f9b80bcf", + }, + "/usr/local/bin/syft:github.com/anchore/go-rpmdb@v0.0.0-20210914181456-a9c52348da63": { + "cpes": [ + "cpe:2.3:a:anchore:go-rpmdb:v0.0.0-20210914181456-a9c52348da63:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:go_rpmdb:v0.0.0-20210914181456-a9c52348da63:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:C9W/LAydEz/qdUhx1MdjO9l8NEcFKYknkxDVyo9LAoM=", + }, + "name": "github.com/anchore/go-rpmdb", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210914181456-a9c52348da63", + }, + "/usr/local/bin/syft:github.com/anchore/go-version@v1.2.2-0.20200701162849-18adb9c92b9b": { + "cpes": [ + "cpe:2.3:a:anchore:go-version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:go_version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:e1bmaoJfZVsCYMrIZBpFxwV26CbsuoEh5muXD5I1Ods=", + }, + "name": "github.com/anchore/go-version", + "origin": "N/A", + "type": "go", + "version": "v1.2.2-0.20200701162849-18adb9c92b9b", + }, + "/usr/local/bin/syft:github.com/anchore/packageurl-go@v0.0.0-20210922164639-b3fa992ebd29": { + "cpes": [ + "cpe:2.3:a:anchore:packageurl-go:v0.0.0-20210922164639-b3fa992ebd29:*:*:*:*:*:*:*", + "cpe:2.3:a:anchore:packageurl_go:v0.0.0-20210922164639-b3fa992ebd29:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:K9LfnxwhqvihqU0+MF325FNy7fsKV9EGaUxdfR4gnWk=", + }, + "name": "github.com/anchore/packageurl-go", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210922164639-b3fa992ebd29", + }, + "/usr/local/bin/syft:github.com/anchore/stereoscope@v0.0.0-20220110181730-c91cf94a3718": { + "cpes": [ + "cpe:2.3:a:anchore:stereoscope:v0.0.0-20220110181730-c91cf94a3718:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:46+DtmTaPlOCuY5KY3H6zazuz3+E/DSwc+ZpfPhyj50=", + }, + "name": "github.com/anchore/stereoscope", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20220110181730-c91cf94a3718", + }, + "/usr/local/bin/syft:github.com/andybalholm/brotli@v1.0.4": { + "cpes": ["cpe:2.3:a:andybalholm:brotli:v1.0.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:V7DdXeJtZscaqfNuAdSRuRFzuiKlHSC/Zh3zl9qY3JY=", + }, + "name": "github.com/andybalholm/brotli", + "origin": "N/A", + "type": "go", + "version": "v1.0.4", + }, + "/usr/local/bin/syft:github.com/antihax/optional@v1.0.0": { + "cpes": ["cpe:2.3:a:antihax:optional:v1.0.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:xK2lYat7ZLaVVcIuj82J8kIro4V6kDe0AUDFboUCwcg=", + }, + "name": "github.com/antihax/optional", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/syft:github.com/bmatcuk/doublestar/v4@v4.0.2": { + "cpes": ["cpe:2.3:a:bmatcuk:doublestar:v4.0.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:X0krlUVAVmtr2cRoTqR8aDMrDqnB36ht8wpWTiQ3jsA=", + }, + "name": "github.com/bmatcuk/doublestar/v4", + "origin": "N/A", + "type": "go", + "version": "v4.0.2", + }, + "/usr/local/bin/syft:github.com/containerd/containerd@v1.5.9": { + "cpes": ["cpe:2.3:a:containerd:containerd:v1.5.9:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:rs6Xg1gtIxaeyG+Smsb/0xaSDu1VgFhOCKBXxMxbsF4=", + }, + "name": "github.com/containerd/containerd", + "origin": "N/A", + "type": "go", + "version": "v1.5.9", + }, + "/usr/local/bin/syft:github.com/containerd/stargz-snapshotter/estargz@v0.10.0": { + "cpes": [ + "cpe:2.3:a:containerd:stargz-snapshotter:v0.10.0:*:*:*:*:*:*:*", + "cpe:2.3:a:containerd:stargz_snapshotter:v0.10.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:glqzafvxBBAMo+x2w2sdDjUDZeTqqLJmqZPY05qehCU=", + }, + "name": "github.com/containerd/stargz-snapshotter/estargz", + "origin": "N/A", + "type": "go", + "version": "v0.10.0", + }, + "/usr/local/bin/syft:github.com/docker/cli@v20.10.10+incompatible": { + "cpes": ["cpe:2.3:a:docker:cli:v20.10.10\\+incompatible:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:kcbwdgWbrBOH8QwQzaJmyriHwF7XIl4HT1qh0HTRys4=", + }, + "name": "github.com/docker/cli", + "origin": "N/A", + "type": "go", + "version": "v20.10.10+incompatible", + }, + "/usr/local/bin/syft:github.com/docker/distribution@v2.7.1+incompatible": { + "cpes": ["cpe:2.3:a:docker:distribution:v2.7.1\\+incompatible:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:a5mlkVzth6W5A4fOsS3D2EO5BUmsJpcB+cRlLU7cSug=", + }, + "name": "github.com/docker/distribution", + "origin": "N/A", + "type": "go", + "version": "v2.7.1+incompatible", + }, + "/usr/local/bin/syft:github.com/docker/docker-credential-helpers@v0.6.4": { + "cpes": [ + "cpe:2.3:a:docker:docker-credential-helpers:v0.6.4:*:*:*:*:*:*:*", + "cpe:2.3:a:docker:docker_credential_helpers:v0.6.4:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:axCks+yV+2MR3/kZhAmy07yC56WZ2Pwu/fKWtKuZB0o=", + }, + "name": "github.com/docker/docker-credential-helpers", + "origin": "N/A", + "type": "go", + "version": "v0.6.4", + }, + "/usr/local/bin/syft:github.com/docker/docker@v20.10.11+incompatible": { + "cpes": ["cpe:2.3:a:docker:docker:v20.10.11\\+incompatible:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:OqzI/g/W54LczvhnccGqniFoQghHx3pklbLuhfXpqGo=", + }, + "name": "github.com/docker/docker", + "origin": "N/A", + "type": "go", + "version": "v20.10.11+incompatible", + }, + "/usr/local/bin/syft:github.com/docker/go-connections@v0.4.0": { + "cpes": [ + "cpe:2.3:a:docker:go-connections:v0.4.0:*:*:*:*:*:*:*", + "cpe:2.3:a:docker:go_connections:v0.4.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:El9xVISelRB7BuFusrZozjnkIM5YnzCViNKohAFqRJQ=", + }, + "name": "github.com/docker/go-connections", + "origin": "N/A", + "type": "go", + "version": "v0.4.0", + }, + "/usr/local/bin/syft:github.com/docker/go-units@v0.4.0": { + "cpes": [ + "cpe:2.3:a:docker:go-units:v0.4.0:*:*:*:*:*:*:*", + "cpe:2.3:a:docker:go_units:v0.4.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:3uh0PgVws3nIA0Q+MwDC8yjEPf9zjRfZZWXZYDct3Tw=", + }, + "name": "github.com/docker/go-units", + "origin": "N/A", + "type": "go", + "version": "v0.4.0", + }, + "/usr/local/bin/syft:github.com/dsnet/compress@v0.0.2-0.20210315054119-f66993602bf5": { + "cpes": [ + "cpe:2.3:a:dsnet:compress:v0.0.2-0.20210315054119-f66993602bf5:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:iFaUwBSo5Svw6L7HYpRu/0lE3e0BaElwnNO1qkNQxBY=", + }, + "name": "github.com/dsnet/compress", + "origin": "N/A", + "type": "go", + "version": "v0.0.2-0.20210315054119-f66993602bf5", + }, + "/usr/local/bin/syft:github.com/dustin/go-humanize@v1.0.0": { + "cpes": [ + "cpe:2.3:a:dustin:go-humanize:v1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:dustin:go_humanize:v1.0.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=", + }, + "name": "github.com/dustin/go-humanize", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/syft:github.com/facebookincubator/nvdtools@v0.1.4": { + "cpes": ["cpe:2.3:a:facebookincubator:nvdtools:v0.1.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:x1Ucw9+bSkMd8DJJN4jNQ1Lk4PSFlJarGOxp9D6WUMo=", + }, + "name": "github.com/facebookincubator/nvdtools", + "origin": "N/A", + "type": "go", + "version": "v0.1.4", + }, + "/usr/local/bin/syft:github.com/fsnotify/fsnotify@v1.4.9": { + "cpes": ["cpe:2.3:a:fsnotify:fsnotify:v1.4.9:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=", + }, + "name": "github.com/fsnotify/fsnotify", + "origin": "N/A", + "type": "go", + "version": "v1.4.9", + }, + "/usr/local/bin/syft:github.com/gabriel-vasile/mimetype@v1.3.0": { + "cpes": [ + "cpe:2.3:a:gabriel-vasile:mimetype:v1.3.0:*:*:*:*:*:*:*", + "cpe:2.3:a:gabriel_vasile:mimetype:v1.3.0:*:*:*:*:*:*:*", + "cpe:2.3:a:gabriel:mimetype:v1.3.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:4YOHITFLyYwF+iqG0ybSLGArRItynpfwdlWRmJnd75E=", + }, + "name": "github.com/gabriel-vasile/mimetype", + "origin": "N/A", + "type": "go", + "version": "v1.3.0", + }, + "/usr/local/bin/syft:github.com/go-restruct/restruct@v1.2.0-alpha": { + "cpes": [ + "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*", + "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*", + "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:2Lp474S/9660+SJjpVxoKuWX09JsXHSrdV7Nv3/gkvc=", + }, + "name": "github.com/go-restruct/restruct", + "origin": "N/A", + "type": "go", + "version": "v1.2.0-alpha", + }, + "/usr/local/bin/syft:github.com/gogo/protobuf@v1.3.2": { + "cpes": ["cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=", + }, + "name": "github.com/gogo/protobuf", + "origin": "N/A", + "type": "go", + "version": "v1.3.2", + }, + "/usr/local/bin/syft:github.com/golang/protobuf@v1.5.2": { + "cpes": ["cpe:2.3:a:golang:protobuf:v1.5.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:ROPKBNFfQgOUMifHyP+KYbvpjbdoFNs+aK7DXlji0Tw=", + }, + "name": "github.com/golang/protobuf", + "origin": "N/A", + "type": "go", + "version": "v1.5.2", + }, + "/usr/local/bin/syft:github.com/golang/snappy@v0.0.3": { + "cpes": ["cpe:2.3:a:golang:snappy:v0.0.3:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:fHPg5GQYlCeLIPB9BZqMVR5nR9A+IM5zcgeTdjMYmLA=", + }, + "name": "github.com/golang/snappy", + "origin": "N/A", + "type": "go", + "version": "v0.0.3", + }, + "/usr/local/bin/syft:github.com/google/go-cmp@v0.5.6": { + "cpes": [ + "cpe:2.3:a:google:go-cmp:v0.5.6:*:*:*:*:*:*:*", + "cpe:2.3:a:google:go_cmp:v0.5.6:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:BKbKCqvP6I+rmFHt06ZmyQtvB8xAkWdhFyr0ZUNZcxQ=", + }, + "name": "github.com/google/go-cmp", + "origin": "N/A", + "type": "go", + "version": "v0.5.6", + }, + "/usr/local/bin/syft:github.com/google/go-containerregistry@v0.7.0": { + "cpes": [ + "cpe:2.3:a:google:go-containerregistry:v0.7.0:*:*:*:*:*:*:*", + "cpe:2.3:a:google:go_containerregistry:v0.7.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:u0onUUOcyoCDHEiJoyR1R1gx5er1+r06V5DBhUU5ndk=", + }, + "name": "github.com/google/go-containerregistry", + "origin": "N/A", + "type": "go", + "version": "v0.7.0", + }, + "/usr/local/bin/syft:github.com/google/uuid@v1.2.0": { + "cpes": ["cpe:2.3:a:google:uuid:v1.2.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qJYtXnJRWmpe7m/3XlyhrsLrEURqHRM2kxzoxXqyUDs=", + }, + "name": "github.com/google/uuid", + "origin": "N/A", + "type": "go", + "version": "v1.2.0", + }, + "/usr/local/bin/syft:github.com/gookit/color@v1.2.7": { + "cpes": ["cpe:2.3:a:gookit:color:v1.2.7:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:4qePMNWZhrmbfYJDix+J4V2l0iVW+6jQGjicELlN14E=", + }, + "name": "github.com/gookit/color", + "origin": "N/A", + "type": "go", + "version": "v1.2.7", + }, + "/usr/local/bin/syft:github.com/hashicorp/errwrap@v1.0.0": { + "cpes": ["cpe:2.3:a:hashicorp:errwrap:v1.0.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=", + }, + "name": "github.com/hashicorp/errwrap", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/syft:github.com/hashicorp/go-multierror@v1.1.0": { + "cpes": [ + "cpe:2.3:a:hashicorp:go-multierror:v1.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:hashicorp:go_multierror:v1.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:B9UzwGQJehnUY1yNrnwREHc3fGbC2xefo8g4TbElacI=", + }, + "name": "github.com/hashicorp/go-multierror", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/syft:github.com/hashicorp/hcl@v1.0.0": { + "cpes": ["cpe:2.3:a:hashicorp:hcl:v1.0.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=", + }, + "name": "github.com/hashicorp/hcl", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/syft:github.com/jinzhu/copier@v0.3.2": { + "cpes": ["cpe:2.3:a:jinzhu:copier:v0.3.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:QdBOCbaouLDYaIPFfi1bKv5F5tPpeTwXe4sD0jqtz5w=", + }, + "name": "github.com/jinzhu/copier", + "origin": "N/A", + "type": "go", + "version": "v0.3.2", + }, + "/usr/local/bin/syft:github.com/klauspost/compress@v1.13.6": { + "cpes": ["cpe:2.3:a:klauspost:compress:v1.13.6:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:P76CopJELS0TiO2mebmnzgWaajssP/EszplttgQxcgc=", + }, + "name": "github.com/klauspost/compress", + "origin": "N/A", + "type": "go", + "version": "v1.13.6", + }, + "/usr/local/bin/syft:github.com/klauspost/pgzip@v1.2.5": { + "cpes": ["cpe:2.3:a:klauspost:pgzip:v1.2.5:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qnWYvvKqedOF2ulHpMG72XQol4ILEJ8k2wwRl/Km8oE=", + }, + "name": "github.com/klauspost/pgzip", + "origin": "N/A", + "type": "go", + "version": "v1.2.5", + }, + "/usr/local/bin/syft:github.com/magiconair/properties@v1.8.5": { + "cpes": ["cpe:2.3:a:magiconair:properties:v1.8.5:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:b6kJs+EmPFMYGkow9GiUyCyOvIwYetYJ3fSaWak/Gls=", + }, + "name": "github.com/magiconair/properties", + "origin": "N/A", + "type": "go", + "version": "v1.8.5", + }, + "/usr/local/bin/syft:github.com/mattn/go-colorable@v0.0.9": { + "cpes": [ + "cpe:2.3:a:mattn:go-colorable:v0.0.9:*:*:*:*:*:*:*", + "cpe:2.3:a:mattn:go_colorable:v0.0.9:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:UVL0vNpWh04HeJXV0KLcaT7r06gOH2l4OW6ddYRUIY4=", + }, + "name": "github.com/mattn/go-colorable", + "origin": "N/A", + "type": "go", + "version": "v0.0.9", + }, + "/usr/local/bin/syft:github.com/mattn/go-isatty@v0.0.6": { + "cpes": [ + "cpe:2.3:a:mattn:go-isatty:v0.0.6:*:*:*:*:*:*:*", + "cpe:2.3:a:mattn:go_isatty:v0.0.6:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:SrwhHcpV4nWrMGdNcC2kXpMfcBVYGDuTArqyhocJgvA=", + }, + "name": "github.com/mattn/go-isatty", + "origin": "N/A", + "type": "go", + "version": "v0.0.6", + }, + "/usr/local/bin/syft:github.com/mattn/go-runewidth@v0.0.7": { + "cpes": [ + "cpe:2.3:a:mattn:go-runewidth:v0.0.7:*:*:*:*:*:*:*", + "cpe:2.3:a:mattn:go_runewidth:v0.0.7:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Ei8KR0497xHyKJPAv59M1dkC+rOZCMBJ+t3fZ+twI54=", + }, + "name": "github.com/mattn/go-runewidth", + "origin": "N/A", + "type": "go", + "version": "v0.0.7", + }, + "/usr/local/bin/syft:github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d": { + "cpes": [ + "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:5PJl274Y63IEHC+7izoQE9x6ikvDFZS2mDVS3drnohI=", + }, + "name": "github.com/mgutz/ansi", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200706080929-d51e80ef957d", + }, + "/usr/local/bin/syft:github.com/mholt/archiver/v3@v3.5.1": { + "cpes": ["cpe:2.3:a:mholt:archiver:v3.5.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:rDjOBX9JSF5BvoJGvjqK479aL70qh9DIpZCl+k7Clwo=", + }, + "name": "github.com/mholt/archiver/v3", + "origin": "N/A", + "type": "go", + "version": "v3.5.1", + }, + "/usr/local/bin/syft:github.com/mitchellh/go-homedir@v1.1.0": { + "cpes": [ + "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=", + }, + "name": "github.com/mitchellh/go-homedir", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/syft:github.com/mitchellh/hashstructure/v2@v2.0.2": { + "cpes": ["cpe:2.3:a:mitchellh:hashstructure:v2.0.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vGKWl0YJqUNxE8d+h8f6NJLcCJrgbhC4NcD46KavDd4=", + }, + "name": "github.com/mitchellh/hashstructure/v2", + "origin": "N/A", + "type": "go", + "version": "v2.0.2", + }, + "/usr/local/bin/syft:github.com/mitchellh/mapstructure@v1.4.1": { + "cpes": ["cpe:2.3:a:mitchellh:mapstructure:v1.4.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:CpVNEelQCZBooIPDn+AR3NpivK/TIKU8bDxdASFVQag=", + }, + "name": "github.com/mitchellh/mapstructure", + "origin": "N/A", + "type": "go", + "version": "v1.4.1", + }, + "/usr/local/bin/syft:github.com/nwaples/rardecode@v1.1.0": { + "cpes": ["cpe:2.3:a:nwaples:rardecode:v1.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vSxaY8vQhOcVr4mm5e8XllHWTiM4JF507A0Katqw7MQ=", + }, + "name": "github.com/nwaples/rardecode", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/syft:github.com/olekukonko/tablewriter@v0.0.4": { + "cpes": ["cpe:2.3:a:olekukonko:tablewriter:v0.0.4:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:vHD/YYe1Wolo78koG299f7V/VAS08c6IpCLn+Ejf/w8=", + }, + "name": "github.com/olekukonko/tablewriter", + "origin": "N/A", + "type": "go", + "version": "v0.0.4", + }, + "/usr/local/bin/syft:github.com/opencontainers/go-digest@v1.0.0": { + "cpes": [ + "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=", + }, + "name": "github.com/opencontainers/go-digest", + "origin": "N/A", + "type": "go", + "version": "v1.0.0", + }, + "/usr/local/bin/syft:github.com/opencontainers/image-spec@v1.0.2": { + "cpes": [ + "cpe:2.3:a:opencontainers:image-spec:v1.0.2:*:*:*:*:*:*:*", + "cpe:2.3:a:opencontainers:image_spec:v1.0.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:9yCKha/T5XdGtO0q9Q9a6T5NUCsTn/DrBg0D7ufOcFM=", + }, + "name": "github.com/opencontainers/image-spec", + "origin": "N/A", + "type": "go", + "version": "v1.0.2", + }, + "/usr/local/bin/syft:github.com/pelletier/go-toml@v1.9.3": { + "cpes": [ + "cpe:2.3:a:pelletier:go-toml:v1.9.3:*:*:*:*:*:*:*", + "cpe:2.3:a:pelletier:go_toml:v1.9.3:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:zeC5b1GviRUyKYd6OJPvBU/mcVDVoL1OhT17FCt5dSQ=", + }, + "name": "github.com/pelletier/go-toml", + "origin": "N/A", + "type": "go", + "version": "v1.9.3", + }, + "/usr/local/bin/syft:github.com/pierrec/lz4/v4@v4.1.2": { + "cpes": ["cpe:2.3:a:pierrec:lz4:v4.1.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qvY3YFXRQE/XB8MlLzJH7mSzBs74eA2gg52YTk6jUPM=", + }, + "name": "github.com/pierrec/lz4/v4", + "origin": "N/A", + "type": "go", + "version": "v4.1.2", + }, + "/usr/local/bin/syft:github.com/pkg/errors@v0.9.1": { + "cpes": ["cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=", + }, + "name": "github.com/pkg/errors", + "origin": "N/A", + "type": "go", + "version": "v0.9.1", + }, + "/usr/local/bin/syft:github.com/pkg/profile@v1.5.0": { + "cpes": ["cpe:2.3:a:pkg:profile:v1.5.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:042Buzk+NhDI+DeSAA62RwJL8VAuZUMQZUjCsRz1Mug=", + }, + "name": "github.com/pkg/profile", + "origin": "N/A", + "type": "go", + "version": "v1.5.0", + }, + "/usr/local/bin/syft:github.com/scylladb/go-set@v1.0.2": { + "cpes": [ + "cpe:2.3:a:scylladb:go-set:v1.0.2:*:*:*:*:*:*:*", + "cpe:2.3:a:scylladb:go_set:v1.0.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:SkvlMCKhP0wyyct6j+0IHJkBkSZL+TDzZ4E7f7BCcRE=", + }, + "name": "github.com/scylladb/go-set", + "origin": "N/A", + "type": "go", + "version": "v1.0.2", + }, + "/usr/local/bin/syft:github.com/sirupsen/logrus@v1.8.1": { + "cpes": ["cpe:2.3:a:sirupsen:logrus:v1.8.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE=", + }, + "name": "github.com/sirupsen/logrus", + "origin": "N/A", + "type": "go", + "version": "v1.8.1", + }, + "/usr/local/bin/syft:github.com/spdx/tools-golang@v0.1.0": { + "cpes": [ + "cpe:2.3:a:spdx:tools-golang:v0.1.0:*:*:*:*:*:*:*", + "cpe:2.3:a:spdx:tools_golang:v0.1.0:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:iDMNEPqQk6CdiDj6eWDIDw85j0wQ3IR3pH9p0X05TSQ=", + }, + "name": "github.com/spdx/tools-golang", + "origin": "N/A", + "type": "go", + "version": "v0.1.0", + }, + "/usr/local/bin/syft:github.com/spf13/afero@v1.6.0": { + "cpes": ["cpe:2.3:a:spf13:afero:v1.6.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:xoax2sJ2DT8S8xA2paPFjDCScCNeWsg75VG0DLRreiY=", + }, + "name": "github.com/spf13/afero", + "origin": "N/A", + "type": "go", + "version": "v1.6.0", + }, + "/usr/local/bin/syft:github.com/spf13/cast@v1.3.1": { + "cpes": ["cpe:2.3:a:spf13:cast:v1.3.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:nFm6S0SMdyzrzcmThSipiEubIDy8WEXKNZ0UOgiRpng=", + }, + "name": "github.com/spf13/cast", + "origin": "N/A", + "type": "go", + "version": "v1.3.1", + }, + "/usr/local/bin/syft:github.com/spf13/cobra@v1.2.1": { + "cpes": ["cpe:2.3:a:spf13:cobra:v1.2.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:+KmjbUw1hriSNMF55oPrkZcb27aECyrj8V2ytv7kWDw=", + }, + "name": "github.com/spf13/cobra", + "origin": "N/A", + "type": "go", + "version": "v1.2.1", + }, + "/usr/local/bin/syft:github.com/spf13/jwalterweatherman@v1.1.0": { + "cpes": ["cpe:2.3:a:spf13:jwalterweatherman:v1.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:ue6voC5bR5F8YxI5S67j9i582FU4Qvo2bmqnqMYADFk=", + }, + "name": "github.com/spf13/jwalterweatherman", + "origin": "N/A", + "type": "go", + "version": "v1.1.0", + }, + "/usr/local/bin/syft:github.com/spf13/pflag@v1.0.5": { + "cpes": ["cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=", + }, + "name": "github.com/spf13/pflag", + "origin": "N/A", + "type": "go", + "version": "v1.0.5", + }, + "/usr/local/bin/syft:github.com/spf13/viper@v1.8.1": { + "cpes": ["cpe:2.3:a:spf13:viper:v1.8.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Kq1fyeebqsBfbjZj4EL7gj2IO0mMaiyjYUWcUsl2O44=", + }, + "name": "github.com/spf13/viper", + "origin": "N/A", + "type": "go", + "version": "v1.8.1", + }, + "/usr/local/bin/syft:github.com/subosito/gotenv@v1.2.0": { + "cpes": ["cpe:2.3:a:subosito:gotenv:v1.2.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Slr1R9HxAlEKefgq5jn9U+DnETlIUa6HfgEzj0g5d7s=", + }, + "name": "github.com/subosito/gotenv", + "origin": "N/A", + "type": "go", + "version": "v1.2.0", + }, + "/usr/local/bin/syft:github.com/ulikunitz/xz@v0.5.9": { + "cpes": ["cpe:2.3:a:ulikunitz:xz:v0.5.9:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:RsKRIA2MO8x56wkkcd3LbtcE/uMszhb6DpRf+3uwa3I=", + }, + "name": "github.com/ulikunitz/xz", + "origin": "N/A", + "type": "go", + "version": "v0.5.9", + }, + "/usr/local/bin/syft:github.com/vbatts/tar-split@v0.11.2": { + "cpes": [ + "cpe:2.3:a:vbatts:tar-split:v0.11.2:*:*:*:*:*:*:*", + "cpe:2.3:a:vbatts:tar_split:v0.11.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Via6XqJr0hceW4wff3QRzD5gAk/tatMw/4ZA7cTlIME=", + }, + "name": "github.com/vbatts/tar-split", + "origin": "N/A", + "type": "go", + "version": "v0.11.2", + }, + "/usr/local/bin/syft:github.com/vifraa/gopom@v0.1.0": { + "cpes": ["cpe:2.3:a:vifraa:gopom:v0.1.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:v897eVxf6lflkEXzPmKbo4YhX2oS/LGjz7cqjWnSmCU=", + }, + "name": "github.com/vifraa/gopom", + "origin": "N/A", + "type": "go", + "version": "v0.1.0", + }, + "/usr/local/bin/syft:github.com/wagoodman/go-partybus@v0.0.0-20210627031916-db1f5573bbc5": { + "cpes": [ + "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20210627031916-db1f5573bbc5:*:*:*:*:*:*:*", + "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20210627031916-db1f5573bbc5:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:phTLPgMRDYTizrBSKsNSOa2zthoC2KsJsaY/8sg3rD8=", + }, + "name": "github.com/wagoodman/go-partybus", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210627031916-db1f5573bbc5", + }, + "/usr/local/bin/syft:github.com/wagoodman/go-progress@v0.0.0-20200731105512-1020f39e6240": { + "cpes": [ + "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20200731105512-1020f39e6240:*:*:*:*:*:*:*", + "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20200731105512-1020f39e6240:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:r6BlIP7CVZtMlxUQhT40h1IE1TzEgKVqwmsVGuscvdk=", + }, + "name": "github.com/wagoodman/go-progress", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200731105512-1020f39e6240", + }, + "/usr/local/bin/syft:github.com/wagoodman/jotframe@v0.0.0-20211129225309-56b0d0a4aebb": { + "cpes": [ + "cpe:2.3:a:wagoodman:jotframe:v0.0.0-20211129225309-56b0d0a4aebb:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Yz6VVOcLuWLAHYlJzTw7JKnWxdV/WXpug2X0quEzRnY=", + }, + "name": "github.com/wagoodman/jotframe", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211129225309-56b0d0a4aebb", + }, + "/usr/local/bin/syft:github.com/x-cray/logrus-prefixed-formatter@v0.5.2": { + "cpes": [ + "cpe:2.3:a:x-cray:logrus-prefixed-formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x-cray:logrus_prefixed_formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x_cray:logrus-prefixed-formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x_cray:logrus_prefixed_formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x:logrus-prefixed-formatter:v0.5.2:*:*:*:*:*:*:*", + "cpe:2.3:a:x:logrus_prefixed_formatter:v0.5.2:*:*:*:*:*:*:*", + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:00txxvfBM9muc0jiLIEAkAcIMJzfthRT6usrui8uGmg=", + }, + "name": "github.com/x-cray/logrus-prefixed-formatter", + "origin": "N/A", + "type": "go", + "version": "v0.5.2", + }, + "/usr/local/bin/syft:github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8": { + "cpes": ["cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:nIPpBwaJSVYIxUFsDv3M8ofmx9yWTog9BfvIu0q41lo=", + }, + "name": "github.com/xi2/xz", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20171230120015-48954b6210f8", + }, + "/usr/local/bin/syft:golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2": { + "cpes": [ + "cpe:2.3:a:golang:x\\/crypto:v0.0.0-20210322153248-0c34fe9e7dc2:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:It14KIkyBFYkHkwZ7k45minvA9aorojkyjGk9KJ5B/w=", + }, + "name": "golang.org/x/crypto", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210322153248-0c34fe9e7dc2", + }, + "/usr/local/bin/syft:golang.org/x/mod@v0.4.2": { + "cpes": ["cpe:2.3:a:golang:x\\/mod:v0.4.2:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:Gz96sIWK3OalVv/I/qNygP42zyoKp3xptRVCWRFEBvo=", + }, + "name": "golang.org/x/mod", + "origin": "N/A", + "type": "go", + "version": "v0.4.2", + }, + "/usr/local/bin/syft:golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2": { + "cpes": [ + "cpe:2.3:a:golang:x\\/net:v0.0.0-20211112202133-69e39bad7dc2:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:CIJ76btIcR3eFI5EgSo6k1qKw9KJexJuRLI9G7Hp5wE=", + }, + "name": "golang.org/x/net", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211112202133-69e39bad7dc2", + }, + "/usr/local/bin/syft:golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8": { + "cpes": [ + "cpe:2.3:a:golang:x\\/oauth2:v0.0.0-20211104180415-d3ed0bb246c8:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:RerP+noqYHUQ8CMRcPlC2nvTa4dcBIjegkuWdcUDuqg=", + }, + "name": "golang.org/x/oauth2", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211104180415-d3ed0bb246c8", + }, + "/usr/local/bin/syft:golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c": { + "cpes": [ + "cpe:2.3:a:golang:x\\/sync:v0.0.0-20210220032951-036812b2e83c:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:5KslGYwFpkhGh+Q16bwMP3cOontH8FOep7tGV86Y7SQ=", + }, + "name": "golang.org/x/sync", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210220032951-036812b2e83c", + }, + "/usr/local/bin/syft:golang.org/x/sys@v0.0.0-20211110154304-99a53858aa08": { + "cpes": [ + "cpe:2.3:a:golang:x\\/sys:v0.0.0-20211110154304-99a53858aa08:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:WecRHqgE09JBkh/584XIE6PMz5KKE/vER4izNUi30AQ=", + }, + "name": "golang.org/x/sys", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211110154304-99a53858aa08", + }, + "/usr/local/bin/syft:golang.org/x/term@v0.0.0-20210615171337-6886f2dfbf5b": { + "cpes": [ + "cpe:2.3:a:golang:x\\/term:v0.0.0-20210615171337-6886f2dfbf5b:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:9zKuko04nR4gjZ4+DNjHqRlAJqbJETHwiNKDqTfOjfE=", + }, + "name": "golang.org/x/term", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20210615171337-6886f2dfbf5b", + }, + "/usr/local/bin/syft:golang.org/x/text@v0.3.6": { + "cpes": ["cpe:2.3:a:golang:x\\/text:v0.3.6:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:aRYxNxv6iGQlyVaZmk6ZgYEDa+Jg18DxebPSrd6bg1M=", + }, + "name": "golang.org/x/text", + "origin": "N/A", + "type": "go", + "version": "v0.3.6", + }, + "/usr/local/bin/syft:golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1": { + "cpes": [ + "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20200804184101-5ec99f83aff1:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:go1bK/D/BFZV2I8cIQd1NKEZ+0owSTG1fDTci4IqFcE=", + }, + "name": "golang.org/x/xerrors", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20200804184101-5ec99f83aff1", + }, + "/usr/local/bin/syft:google.golang.org/genproto@v0.0.0-20211111162719-482062a4217b": { + "cpes": [ + "cpe:2.3:a:google:genproto:v0.0.0-20211111162719-482062a4217b:*:*:*:*:*:*:*" + ], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:qvEQEwKjZRAg6rjY/jqfJ7T8/w/D7jTIFJGcaSka96k=", + }, + "name": "google.golang.org/genproto", + "origin": "N/A", + "type": "go", + "version": "v0.0.0-20211111162719-482062a4217b", + }, + "/usr/local/bin/syft:google.golang.org/grpc@v1.42.0": { + "cpes": ["cpe:2.3:a:google:grpc:v1.42.0:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:XT2/MFpuPFsEX2fWh3YQtHkZ+WYZFQRfaUgLZYj/p6A=", + }, + "name": "google.golang.org/grpc", + "origin": "N/A", + "type": "go", + "version": "v1.42.0", + }, + "/usr/local/bin/syft:google.golang.org/protobuf@v1.27.1": { + "cpes": ["cpe:2.3:a:google:protobuf:v1.27.1:*:*:*:*:*:*:*"], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:SnqbnDw1V7RiZcXPx5MEeqPv2s79L9i7BJUlG/+RurQ=", + }, + "name": "google.golang.org/protobuf", + "origin": "N/A", + "type": "go", + "version": "v1.27.1", + }, + "/usr/local/bin/syft:gopkg.in/ini.v1@v1.62.0": { + "cpes": [], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:duBzk771uxoUuOlyRLkHsygud9+5lrlGjdFBb4mSKDU=", + }, + "name": "gopkg.in/ini.v1", + "origin": "N/A", + "type": "go", + "version": "v1.62.0", + }, + "/usr/local/bin/syft:gopkg.in/yaml.v2@v2.4.0": { + "cpes": [], + "files": [], + "license": "N/A", + "location": "/usr/local/bin/syft", + "metadata": { + "architecture": "x86_64", + "goCompiledVersion": "go1.16.13", + "h1Digest": "h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=", + }, + "name": "gopkg.in/yaml.v2", + "origin": "N/A", + "type": "go", + "version": "v2.4.0", + }, +} diff --git a/tests/functional/clients/standalone/package_list/test_golang.py b/tests/functional/clients/standalone/package_list/test_golang.py new file mode 100644 index 000000000..457719d68 --- /dev/null +++ b/tests/functional/clients/standalone/package_list/test_golang.py @@ -0,0 +1,62 @@ +import pytest + +from . import metadata_params, path_params +from .fixtures import golang + + +class TestGoPaths: + @pytest.mark.parametrize("path", path_params(golang.pkgs)) + def test_all_packages_exist(self, analyzed_data, path): + result = analyzed_data("go") + pkgs = result["image"]["imagedata"]["analysis_report"]["package_list"][ + "pkgs.go" + ]["base"] + print(path) + assert pkgs.get(path) + + +class TestGoMetadata: + @pytest.mark.parametrize("path,metadata", metadata_params(golang.pkgs)) + def test_name(self, analyzed_data, path, metadata): + result = analyzed_data("go") + pkgs = result["image"]["imagedata"]["analysis_report"]["package_list"][ + "pkgs.go" + ]["base"] + loaded = pkgs.get(path, {}) + assert loaded["name"] == metadata["name"] + + @pytest.mark.parametrize("path,metadata", metadata_params(golang.pkgs)) + def test_type(self, analyzed_data, path, metadata): + result = analyzed_data("go") + pkgs = result["image"]["imagedata"]["analysis_report"]["package_list"][ + "pkgs.go" + ]["base"] + loaded = pkgs.get(path, {}) + assert loaded["type"] == metadata["type"] + + @pytest.mark.parametrize("path,metadata", metadata_params(golang.pkgs)) + def test_location(self, analyzed_data, path, metadata): + result = analyzed_data("go") + pkgs = result["image"]["imagedata"]["analysis_report"]["package_list"][ + "pkgs.go" + ]["base"] + loaded = pkgs.get(path, {}) + assert loaded["location"] == metadata["location"] + + @pytest.mark.parametrize("path,metadata", metadata_params(golang.pkgs)) + def test_version(self, analyzed_data, path, metadata): + result = analyzed_data("go") + pkgs = result["image"]["imagedata"]["analysis_report"]["package_list"][ + "pkgs.go" + ]["base"] + loaded = pkgs.get(path, {}) + assert loaded["version"] == metadata["version"] + + @pytest.mark.parametrize("path,metadata", metadata_params(golang.pkgs)) + def test_license(self, analyzed_data, path, metadata): + result = analyzed_data("go") + pkgs = result["image"]["imagedata"]["analysis_report"]["package_list"][ + "pkgs.go" + ]["base"] + loaded = pkgs.get(path, {}) + assert loaded["license"] == metadata["license"] diff --git a/tests/unit/anchore_engine/analyzers/syft/test_syft.py b/tests/unit/anchore_engine/analyzers/syft/test_syft.py index d5c957949..5fb9dadf7 100644 --- a/tests/unit/anchore_engine/analyzers/syft/test_syft.py +++ b/tests/unit/anchore_engine/analyzers/syft/test_syft.py @@ -119,6 +119,9 @@ def test_filter_artifact_missing_id(self): "deb", "jenkins-plugin", "java-archive", + "gem", + "python", + "go-module", ], ) def test_does_not_filter_artifact_by_type(self, pkg_type):