Closed
Description
What happened:
Originally reported https://github.com/anchore/vulnerability-match-exclusion-database/issues/240#issuecomment-2489341204
syft -q ~/Downloads/jruby-exec.zip
NAME VERSION TYPE
JRuby 1.0 dotnet
What you expected to happen:
Jruby is not a .NET application, thus should not be detected as so (should find no packages)
Steps to reproduce the issue:
Download jruby binary and scan it with syft.
Anything else we need to know?:
Proposed fix: scan the PE binary for indications of the .NET framework.
Partial fix implemented: https://github.com/anchore/syft/compare/filter-dotnet-pe
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Done