xeol-io / xeol

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs
https://www.xeol.io/
Apache License 2.0
332 stars 18 forks source link

exclude dotnet executable cataloger #232

Closed noqcks closed 7 months ago

noqcks commented 7 months ago

the dotnet-executable-parser has myriad issues with naming as well as returning the correct ProductVersion, excluding it for now until the quality is better.

By setting a hardcoded cataloger list, we also prevent future catalogers with questionable quality from being included in our scans.

ref: https://github.com/anchore/syft/issues/2029