anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Apache License 2.0
5.98k stars 551 forks source link

fix: include CPEs with Maven groupId as vendor #3045

Closed kzantow closed 1 month ago

kzantow commented 1 month ago

This PR adds Maven groupId as an explicit vendor to include when creating CPEs.

Fixes #3042