syft icon indicating copy to clipboard operation
syft copied to clipboard

dotnet-deps-cataloger cannot handler aspnet:6.0

Open kaiorafael opened this issue 6 months ago • 4 comments

What happened: Error: WARN cataloger failed cataloger=dotnet-deps-cataloger for a generic .Net6 image.

error=unable to determine root package from deps.json file: /usr/share/dotnet/shared/Microsoft.AspNetCore.App/6.0.33/Microsoft.AspNetCore.App.deps.json
error=unable to determine root package from deps.json file: /usr/share/dotnet/shared/Microsoft.NETCore.App/6.0.33/Microsoft.NETCore.App.deps.json

What you expected to happen: I expected a cyclonedx SBOM to be generated.

Steps to reproduce the issue:

  • Pulling
docker pull mcr.microsoft.com/dotnet/aspnet:6.0
  • Scanning
syft scan mcr.microsoft.com/dotnet/aspnet:6.0 --override-default-catalogers "dotnet-deps-cataloger"

Anything else we need to know?:

Similar to

  • https://github.com/anchore/syft/issues/2264
  • https://github.com/anchore/syft/issues/2555

Environment:

  • Output of syft version:
 syft --version
syft 1.11.1
  • OS (e.g: cat /etc/os-release or similar):
cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 11 (bullseye)"
NAME="Debian GNU/Linux"
VERSION_ID="11"
VERSION="11 (bullseye)"
VERSION_CODENAME=bullseye
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

kaiorafael avatar Aug 29 '24 21:08 kaiorafael