syft icon indicating copy to clipboard operation
syft copied to clipboard

binary detection: openbsd OpenSSH and portable OpenSSH

Open krysgor opened this issue 5 months ago • 3 comments

Hi,

(Not sure if i'm right here, because it's a contributor question and i'm not so familiar with go)

I would like to implement openbsd OpenSSH and portable OpenSSH binary detection with correct cpe's in one classifier.

So openbsd have two OpenSSH products with different cpe's:

  • normal cpe:2.3:a:openbsd:openssh:9.6:-:*:*:*:*:*:*
  • portable cpe:2.3:a:openbsd:openssh:9.6:p1:*:*:*:*:*:*

I alrady have the regex to match the version \x00OpenSSH_(?P<version>[0-9]+\.[0-9]+)(p[0-9])?\x00 (is also match the optional portable p1 information).

The question ist: how can I build this two different cpe in one classifier? Is it possible to implement this with one classifier? If not I will make simply two classifyers: openssh-binary and openssh-portable-binary.

Thanks

krysgor avatar Sep 10 '24 11:09 krysgor