Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Binary executables identified as "library" type in CycloneDX #1402

Closed
kzantow opened this issue Dec 14, 2022 · 0 comments · Fixed by #1406
Closed

Binary executables identified as "library" type in CycloneDX #1402

kzantow opened this issue Dec 14, 2022 · 0 comments · Fixed by #1406
Labels
bug Something isn't working

Comments

@kzantow
Copy link
Contributor

kzantow commented Dec 14, 2022

A community member, Fabien Kerbouci, reported this on Slack.

Please provide a set of steps on how to reproduce the issue
syft node:latest -o cyclonedx-json, find the node binary, note the type is library.

What happened:
CycloneDX output using type library for node binary (this is probably also true for other binaries and things that should be labeled as application or differently)

      "bom-ref": "pkg:generic/node@19.2.0?package-id=41eb49f5d9e9da36",
      "type": "library",
      "name": "node",
      "version": "19.2.0",

What you expected to happen:
This is labeled as application

Environment:

  • Output of syft version: 0.63.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant