Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

purl is not deterministic in java-archive cataloger #3521

Open
TimBrown1611 opened this issue Dec 11, 2024 · 1 comment
Open

purl is not deterministic in java-archive cataloger #3521

TimBrown1611 opened this issue Dec 11, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@TimBrown1611
Copy link

What happened:
when i scan a file (.war) I get different results each scan.
please find below:
pkg:maven/org.glassfish.jaxb/[email protected]
pkg:maven/com.sun.xml.bind/[email protected]
What you expected to happen:
same result each time
Steps to reproduce the issue:
the file is too big to share here, however please let me know what other details i can provide to help and investigate it.
Anything else we need to know?:
it impacts the number of results I get from syft.
Environment:

  • Output of syft version: 1.17.0
  • OS (e.g: cat /etc/os-release or similar): mac
@TimBrown1611 TimBrown1611 added the bug Something isn't working label Dec 11, 2024
@willmurphyscode
Copy link
Contributor

@TimBrown1611 can you confirm that this is still happening? There has been some work in Syft to make the JAR/WAR cataloging more deterministic. If it is still happening, can you share some links to public Maven packages that we should install to reproduce it, or give us some more details?

I think what you mean above is that sometimes the group ID for jaxb-core is org.glassfish.jaxb and sometimes it is com.sun.xml.bind?

If you find that this is still happening, please let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: No status
Development

No branches or pull requests

2 participants