Skip to content

wrong traefik rc versions at binary detection #3535

@witchcraze

Description

@witchcraze

What happened:

Some traefik rc versions are not shown correctlly at binary

What you expected to happen:

Proper versions are shown
(or only proper go-module versions are shown)

Steps to reproduce the issue:

$ syft -q traefik:v2.5.0-rc2 | grep traefik
github.com/traefik/gziphandler                       v1.1.2-0.20210212101304-175e0fad6888                        go-module
github.com/traefik/paerser                           v0.1.4                                                      go-module
github.com/traefik/traefik/v2                        v2.5.0-rc2                                                  go-module
github.com/traefik/yaegi                             v0.9.19                                                     go-module
traefik                                              2.5.0-rc2                                                   binary

$ syft -q traefik:v2.6.0-rc1 | grep traefik
github.com/traefik/paerser                           v0.1.4                                       go-module
github.com/traefik/traefik/v2                        v2.6.0-rc1                                   go-module
github.com/traefik/yaegi                             v0.11.1                                      go-module
traefik                                              1.17.5                                       binary

$ syft -q traefik:v2.7.0-rc1 | grep traefik
github.com/traefik/paerser                                       v0.1.5                                       go-module
github.com/traefik/traefik/v2                                    v2.7.0-rc1                                   go-module
github.com/traefik/yaegi                                         v0.11.2                                      go-module
traefik                                                          1.17.6                                       binary

$ syft -q traefik:v2.8.0-rc1 | grep traefik
github.com/traefik/paerser                                       v0.1.5                                       go-module
github.com/traefik/traefik/v2                                    v2.8.0-rc1                                   go-module
github.com/traefik/yaegi                                         v0.12.0                                      go-module
traefik                                                          2.8.0-rc1                                    binary

$ syft -q traefik:v2.9.0-rc2 | grep traefik
github.com/traefik/paerser                                       v0.1.9                                       go-module
github.com/traefik/traefik/v2                                    v2.9.0-rc2                                   go-module
github.com/traefik/yaegi                                         v0.14.2                                      go-module
traefik                                                          1.19.1                                       binary

$ syft -q traefik:v3.0.0-rc1 | grep traefik
github.com/traefik/grpc-web                                                     v0.16.0                                go-module
github.com/traefik/paerser                                                      v0.2.0                                 go-module
github.com/traefik/traefik/v3                                                   v3.0.0-rc1                             go-module
github.com/traefik/yaegi                                                        v0.15.1                                go-module
traefik                                                                         1.22.0                                 binary

$ syft -q traefik:v3.1.0-rc2 | grep traefik
github.com/traefik/grpc-web                                                           v0.16.0                                go-module
github.com/traefik/http-wasm-host-go                                                  v0.0.0-20240618100324-3c53dcaa1a70     go-module
github.com/traefik/paerser                                                            v0.2.0                                 go-module
github.com/traefik/traefik/v3                                                         v3.1.0-rc2                             go-module
github.com/traefik/yaegi                                                              v0.16.1                                go-module
traefik                                                                               1.22.4                                 binary

$ syft -q traefik:v3.2.0-rc1 | grep traefik
github.com/traefik/grpc-web                                                           v0.16.0                                 go-module
github.com/traefik/http-wasm-host-go                                                  v0.0.0-20240618100324-3c53dcaa1a70      go-module
github.com/traefik/paerser                                                            v0.2.1                                  go-module
github.com/traefik/traefik/v3                                                         v3.2.0-rc1                              go-module
github.com/traefik/yaegi                                                              v0.16.1                                 go-module
traefik                                                                               1.23.2                                  binary

$ syft -q traefik:v3.3.0-rc1 | grep traefik
github.com/traefik/grpc-web                                                           v0.16.0                                 go-module
github.com/traefik/paerser                                                            v0.2.1                                  go-module
github.com/traefik/traefik/v3                                                         v3.3.0-rc1                              go-module
github.com/traefik/yaegi                                                              v0.16.1                                 go-module
traefik                                                                               1.23.4                                  binary

Anything else we need to know?:

I think go-module detection was improved, and proper versions seem shown.
Maybe, deleteing traefik binary clasiffier is ok.
// Sorry, I do not understand improvement of go-module detection, I can not judge this.

Environment:

  • Output of syft version:
$ syft version
Application: syft
Version:    1.18.1
BuildDate:  2024-12-13T18:41:10Z
GitCommit:  5e16e5031a13f8a11057feb8544decebfc43b4ed
GitDescription: v1.18.1
Platform:   linux/amd64
GoVersion:  go1.23.4
Compiler:   gc
  • OS (e.g: cat /etc/os-release or similar):
$ cat /etc/os-release
PRETTY_NAME="Ubuntu 24.04.1 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04.1 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions