test: updated sbom-fixtures

Signed-off-by: Christian Kotzbauer <[email protected]>
ckotzbauer · Feb 19, 2022 · f09877d · f09877d
1 parent 25b3df4
commit f09877d
Show file tree

Hide file tree

Showing 10 changed files with 1,708 additions and 1,247 deletions.
diff --git a/internal/syft/fixtures/alpine.cyclonedx b/internal/syft/fixtures/alpine.cyclonedx
@@ -1,15 +1,15 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:c46639e6-77cb-4900-8334-8d810aa0e308" version="1">
+<bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:35c60fd6-bb89-423f-a442-b0a5e689c0db" version="1">
   <metadata>
-    <timestamp>2022-01-29T12:45:49+01:00</timestamp>
+    <timestamp>2022-02-19T09:25:05+01:00</timestamp>
     <tools>
       <tool>
         <vendor>anchore</vendor>
         <name>syft</name>
-        <version>0.36.0</version>
+        <version>0.38.0</version>
       </tool>
     </tools>
-    <component type="container">
+    <component bom-ref="27f24e002ab47c1b" type="container">
       <name>alpine@sha256:21a3deaa0d32a8057914f36584b5288d2e5ecc984380bc0118285c70fa8c9300</name>
       <version>sha256:e7d88de73db3d3fd9b2d63aa7f447a10fd0220b7cbf39803c803f2af9ba256b3</version>
     </component>
@@ -26,7 +26,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:alpine-baselayout:alpine-baselayout:3.2.0-r18:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=alpine-baselayout&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://git.alpinelinux.org/cgit/aports/tree/main/alpine-baselayout</url>
@@ -57,7 +57,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:alpine-keys:alpine-keys:2.4-r1:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=alpine-keys&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://alpinelinux.org</url>
@@ -87,7 +87,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:apk-tools:apk-tools:2.12.7-r3:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=apk-tools&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://gitlab.alpinelinux.org/alpine/apk-tools</url>
@@ -118,7 +118,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:busybox:busybox:1.34.1-r3:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=busybox&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://busybox.net/</url>
@@ -152,7 +152,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:ca-certificates-bundle:ca-certificates-bundle:20191127-r7:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/ca-certificates-bundle@20191127-r7?arch=x86_64</purl>
+      <purl>pkg:alpine/ca-certificates-bundle@20191127-r7?arch=x86_64&amp;upstream=ca-certificates&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/</url>
@@ -185,7 +185,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:libc-utils:libc-utils:0.7.2-r3:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=libc-dev&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://alpinelinux.org</url>
@@ -216,7 +216,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1l-r7:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=openssl&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://www.openssl.org/</url>
@@ -247,7 +247,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:libretls:libretls:3.3.4-r2:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=libretls&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://git.causal.agency/libretls/</url>
@@ -278,7 +278,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:libssl1.1:libssl1.1:1.1.1l-r7:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=openssl&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://www.openssl.org/</url>
@@ -309,7 +309,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:musl:musl:1.2.2-r7:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=musl&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://musl.libc.org/</url>
@@ -339,7 +339,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:musl-utils:musl-utils:1.2.2-r7:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=musl&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://musl.libc.org/</url>
@@ -370,7 +370,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:scanelf:scanelf:1.3.3-r0:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=pax-utils&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://wiki.gentoo.org/wiki/Hardened/PaX_Utilities</url>
@@ -401,7 +401,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:ssl-client:ssl-client:1.34.1-r3:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=busybox&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://busybox.net/</url>
@@ -432,7 +432,7 @@
         </license>
       </licenses>
       <cpe>cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*</cpe>
-      <purl>pkg:alpine/[email protected]?arch=x86_64</purl>
+      <purl>pkg:alpine/[email protected]?arch=x86_64&amp;upstream=zlib&amp;distro=alpine-3.15.0</purl>
       <externalReferences>
         <reference type="distribution">
           <url>https://zlib.net/</url>

diff --git a/internal/syft/fixtures/alpine.json b/internal/syft/fixtures/alpine.json
@@ -24,7 +24,7 @@
     "cpe:2.3:a:alpine:alpine-baselayout:3.2.0-r18:*:*:*:*:*:*:*",
     "cpe:2.3:a:alpine:alpine_baselayout:3.2.0-r18:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=alpine-baselayout&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "alpine-baselayout",
@@ -504,7 +504,7 @@
     "cpe:2.3:a:alpine:alpine-keys:2.4-r1:*:*:*:*:*:*:*",
     "cpe:2.3:a:alpine:alpine_keys:2.4-r1:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=alpine-keys&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "alpine-keys",
@@ -940,7 +940,7 @@
     "cpe:2.3:a:apk:apk-tools:2.12.7-r3:*:*:*:*:*:*:*",
     "cpe:2.3:a:apk:apk_tools:2.12.7-r3:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=apk-tools&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "apk-tools",
@@ -1032,7 +1032,7 @@
    "cpes": [
     "cpe:2.3:a:busybox:busybox:1.34.1-r3:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=busybox&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "busybox",
@@ -1209,7 +1209,7 @@
     "cpe:2.3:a:ca:ca-certificates-bundle:20191127-r7:*:*:*:*:*:*:*",
     "cpe:2.3:a:ca:ca_certificates_bundle:20191127-r7:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/ca-certificates-bundle@20191127-r7?arch=x86_64",
+   "purl": "pkg:alpine/ca-certificates-bundle@20191127-r7?arch=x86_64&upstream=ca-certificates&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "ca-certificates-bundle",
@@ -1281,7 +1281,7 @@
     "cpe:2.3:a:libc:libc-utils:0.7.2-r3:*:*:*:*:*:*:*",
     "cpe:2.3:a:libc:libc_utils:0.7.2-r3:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=libc-dev&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "libc-utils",
@@ -1319,7 +1319,7 @@
    "cpes": [
     "cpe:2.3:a:libcrypto1.1:libcrypto1.1:1.1.1l-r7:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=openssl&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "libcrypto1.1",
@@ -1484,7 +1484,7 @@
    "cpes": [
     "cpe:2.3:a:libretls:libretls:3.3.4-r2:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=libretls&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "libretls",
@@ -1549,7 +1549,7 @@
    "cpes": [
     "cpe:2.3:a:libssl1.1:libssl1.1:1.1.1l-r7:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=openssl&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "libssl1.1",
@@ -1617,7 +1617,7 @@
    "cpes": [
     "cpe:2.3:a:musl:musl:1.2.2-r7:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=musl&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "musl",
@@ -1686,7 +1686,7 @@
     "cpe:2.3:a:musl:musl-utils:1.2.2-r7:*:*:*:*:*:*:*",
     "cpe:2.3:a:musl:musl_utils:1.2.2-r7:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=musl&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "musl-utils",
@@ -1784,7 +1784,7 @@
    "cpes": [
     "cpe:2.3:a:scanelf:scanelf:1.3.3-r0:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=pax-utils&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "scanelf",
@@ -1844,7 +1844,7 @@
     "cpe:2.3:a:ssl:ssl-client:1.34.1-r3:*:*:*:*:*:*:*",
     "cpe:2.3:a:ssl:ssl_client:1.34.1-r3:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=busybox&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "ssl_client",
@@ -1899,7 +1899,7 @@
    "cpes": [
     "cpe:2.3:a:zlib:zlib:1.2.11-r3:*:*:*:*:*:*:*"
    ],
-   "purl": "pkg:alpine/[email protected]?arch=x86_64",
+   "purl": "pkg:alpine/[email protected]?arch=x86_64&upstream=zlib&distro=alpine-3.15.0",
    "metadataType": "ApkMetadata",
    "metadata": {
     "package": "zlib",
@@ -2991,7 +2991,7 @@
  },
  "descriptor": {
   "name": "syft",
-  "version": "0.36.0",
+  "version": "0.38.0",
   "configuration": {
    "configPath": "",
    "output": [