search

snyk / parlay

Enrich SBOMs with data from third party services
Apache License 2.0
123 stars 19 forks source link

feat: add ecosystems support for docker, swift #38

Closed mcombuechen closed 1 year ago

mcombuechen commented 1 year ago

This adds support for purl types docker and swift when enriching via ecosyste.ms.

It also fixes an issue with the package name mapping logic, where the maven logic was applied to most purl types.

It also resolves apk purls to repository alpine-edge, since alpine on its own is not complete.

image
garethr commented 1 year ago

I've merged in the Go change from the other PR, and it's clashing with this. It looks like several discrete changes made in a single commit, so was harder to rebase out.

If you could resubmit, with separate logical changes in separate commits it would make it easier in general to integrate.

mcombuechen commented 1 year ago

@garethr yes this was a bit more than just a feature addition. I split all changes up into 4 commits, should be easier to review now. Let me know what you think.