Skip to content

feat: add support for detecting packages in JARs #4199

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat: add support for detecting packages in JARs #4199

wants to merge 1 commit into from
+268 −4

Conversation

@patrickpichler
Copy link

Description

Support for detection of packages present in a JAR has been added. It can be enabeld via the DetectContainedPackages config flag.

Type of change

  • New feature (non-breaking change which adds functionality)
  • Documentation (updates the documentation)

Checklist:

  • I have added unit tests that cover changed behavior
  • I have tested my code in common scenarios and confirmed there are no regressions
  • I have added comments to my code, particularly in hard-to-understand sections

@wagoodman wagoodman mentioned this pull request Oct 2, 2025
Open
@patrickpichler
Copy link
Author

@wagoodman regarding the opt-in cataloger configuration, is there anything required besides
https://github.com/anchore/syft/pull/4199/files#diff-88a14afdc0253cb83b54f7ebb8960a48aecc90a2c9288be359c15f599c38ea1fR267
https://github.com/anchore/syft/pull/4199/files
?

@patrickpichler patrickpichler force-pushed the report-java-archive-metadata branch from 62df370 to 8d725e9 Compare October 3, 2025 13:22
@patrickpichler patrickpichler marked this pull request as ready for review October 3, 2025 13:22
@spiffcs
Copy link
Contributor

spiffcs commented Oct 14, 2025

Ahh Looks like this one got hit with some conflicts from some other Java work we had in flight. Let me see if I can help fix these up this week to get this across the line.

@patrickpichler patrickpichler force-pushed the report-java-archive-metadata branch 2 times, most recently from 30af6ce to 1125c0f Compare October 28, 2025 10:58
@patrickpichler
feat: add support for detecting packages in JARs
fda79c8 
Support for detection of packages present in a JAR has been added. It
can be enabeld via the `DetectContainedPackages` config flag.

Signed-off-by: Patrick Pichler <[email protected]>
@patrickpichler patrickpichler force-pushed the report-java-archive-metadata branch from 1125c0f to fda79c8 Compare October 28, 2025 10:59
@patrickpichler
Copy link
Author

@spiffcs all merge conflicts should have been resolved 🙂

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@patrickpichler @spiffcs