Skip to content

Commit

Permalink
fix(scan): enable pseudoversion comparison
Browse files Browse the repository at this point in the history
After my Grype PR (anchore/grype#1797), Anchore added a follow-up PR that makes this behavior cnofigurable. It is on by default for the Grype CLI but not for the Grype library. This commit enables it for the Grype library so we can see this kind of match from wolfictl scans.

Signed-off-by: Dan Luhring <dluhring@chainguard.dev>
  • Loading branch information
luhring committed Apr 23, 2024
1 parent cc79643 commit 86ffdf9
Showing 1 changed file with 5 additions and 1 deletion.
6 changes: 5 additions & 1 deletion pkg/scan/apk.go
Original file line number Diff line number Diff line change
Expand Up @@ -212,7 +212,11 @@ func createMatchers(useCPEs bool) []matcher.Matcher {
return matcher.NewDefaultMatchers(
matcher.Config{
Dotnet: dotnet.MatcherConfig{UseCPEs: useCPEs},
Golang: golang.MatcherConfig{UseCPEs: useCPEs, AlwaysUseCPEForStdlib: true},
Golang: golang.MatcherConfig{
UseCPEs: useCPEs,
AlwaysUseCPEForStdlib: true,
AllowMainModulePseudoVersionComparison: true,
},
Java: java.MatcherConfig{
ExternalSearchConfig: java.ExternalSearchConfig{
SearchMavenUpstream: true,
Expand Down

0 comments on commit 86ffdf9

Please sign in to comment.