Skip to content

Parse donet dependency trees#2143

Merged
wagoodman merged 6 commits intoanchore:mainfrom
noqcks:benji/dotnet-deps
Oct 11, 2023
Merged

Parse donet dependency trees#2143
wagoodman merged 6 commits intoanchore:mainfrom
noqcks:benji/dotnet-deps

Conversation

@noqcks
Copy link
Copy Markdown
Contributor

@noqcks noqcks commented Sep 17, 2023

Adds dependency information for the dotnet ecosystem

This allows one to see the relationships between packages such as with the dependencies field in CycloneDX https://cyclonedx.org/docs/1.5/json/#dependencies.

Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Benji Visser <benji@093b.org>
@tgerla
Copy link
Copy Markdown
Contributor

tgerla commented Sep 21, 2023

Hey @noqcks, thanks much! We will need a little time to review this but we'll do that as soon as we can, and we'll let you know if we need anything from you. Thanks again for the patch.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Copy link
Copy Markdown
Contributor

@wagoodman wagoodman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I only made a few adjustments:

  • add some comments to the test capturing the expectations
  • unexported the RelationshipLess function and added caveat doc comments for the SortRelationships function (it will most likely be replaced in the future since there are limitations with the current implementation, however, the current function is necessary).

overall, nice work! 🙌

@wagoodman wagoodman enabled auto-merge (squash) October 11, 2023 17:47
@wagoodman wagoodman merged commit fe7a417 into anchore:main Oct 11, 2023
@wagoodman wagoodman added the enhancement New feature or request label Oct 20, 2023
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
* add dependency information for .NET pkgs

Signed-off-by: Benji Visser <benji@093b.org>

* update pkg coverage directory test

Signed-off-by: Benji Visser <benji@093b.org>

* reverse dependsOn relationship

Signed-off-by: Benji Visser <benji@093b.org>

* update root pkg parsing

Signed-off-by: Benji Visser <benji@093b.org>

* add comments about the test relationships represented

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

* add docs around relationship sorting functions + update test helpers

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>

---------

Signed-off-by: Benji Visser <benji@093b.org>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

3 participants