fix: use official CPE for linux kernel

Signed-off-by: Weston Steimel <commits@weston.slmail.me>
anchore · Oct 17, 2024 · 833bc94 · 833bc94
1 parent 80c8bc1
commit 833bc94
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/syft/pkg/cataloger/kernel/cataloger_test.go b/syft/pkg/cataloger/kernel/cataloger_test.go
@@ -4,6 +4,7 @@ import (
 	"testing"
 
 	"github.com/anchore/syft/syft/artifact"
+	"github.com/anchore/syft/syft/cpe"
 	"github.com/anchore/syft/syft/file"
 	"github.com/anchore/syft/syft/pkg"
 	"github.com/anchore/syft/syft/pkg/cataloger/internal/pkgtest"
@@ -22,6 +23,7 @@ func Test_KernelCataloger(t *testing.T) {
 		),
 		Type: pkg.LinuxKernelPkg,
 		PURL: "pkg:generic/linux-kernel@6.0.7-301.fc37.x86_64",
+		CPEs: []cpe.CPE{cpe.Must("cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource)},
 		Metadata: pkg.LinuxKernel{
 			Name:            "",
 			Architecture:    "x86",

diff --git a/syft/pkg/cataloger/kernel/package.go b/syft/pkg/cataloger/kernel/package.go
@@ -4,6 +4,7 @@ import (
 	"strings"
 
 	"github.com/anchore/packageurl-go"
+	"github.com/anchore/syft/syft/cpe"
 	"github.com/anchore/syft/syft/file"
 	"github.com/anchore/syft/syft/pkg"
 )
@@ -18,6 +19,7 @@ func newLinuxKernelPackage(metadata pkg.LinuxKernel, archiveLocation file.Locati
 		PURL:      packageURL(linuxKernelPackageName, metadata.Version),
 		Type:      pkg.LinuxKernelPkg,
 		Metadata:  metadata,
+		CPEs:      []cpe.CPE{cpe.Must("cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", cpe.NVDDictionaryLookupSource)},
 	}
 
 	p.SetID()