anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Apache License 2.0

6.29k stars 578 forks source link

fix: separate dependency trees #3457

Open dervoeti opened 4 days ago

dervoeti commented 4 days ago

Description

Dummy fix for #3456, just to demonstrate a solution, this is not a proper implementation.

Fixes #3456

Type of change

[x] Bug fix (non-breaking change which fixes an issue)
[ ] Breaking change (please discuss with the team first; Syft is 1.0 software and we won't accept breaking changes without going to 2.0)

Checklist:

[ ] I have added unit tests that cover changed behavior
[ ] I have tested my code in common scenarios and confirmed there are no regressions
[ ] I have added comments to my code, particularly in hard-to-understand sections