8000 Dotnet PE binary cataloger is detecting false positives · Issue #3469 · anchore/syft · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Dotnet PE binary cataloger is detecting false positives #3469
Closed
@wagoodman

Description

@wagoodman

What happened:
Originally reported https://github.com/anchore/vulnerability-match-exclusion-database/issues/240#issuecomment-2489341204

syft -q ~/Downloads/jruby-exec.zip 
NAME   VERSION  TYPE     
JRuby  1.0      dotnet  

What you expected to happen:
Jruby is not a .NET application, thus should not be detected as so (should find no packages)

Steps to reproduce the issue:
Download jruby binary and scan it with syft.

Anything else we need to know?:
Proposed fix: scan the PE binary for indications of the .NET framework.
Partial fix implemented: https://github.com/anchore/syft/compare/filter-dotnet-pe

Metadata

Metadata

Assignees

Type

No type

Projects

Status

Done

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

    0