syft
syft copied to clipboard
Catalog deb archives directly
(1) real deb files in folder "/test/aaa*.deb ; /test/bbb*.deb".
(2) run cmd "syft scan dir:/test -o cyclonedx-xml=aaa.xml"
(3) result: no deb name listed in the result file aaa.xml
(4) expected result: syft scan dir could list all deb file 's name as result in the aaa.xml .
(5) rpm packages in redhat env is ok.
(6) but in debian os system, after user login the os system ,in real filesystem env,run this command , no respected result show.
Today syft does not support scanning .deb files directly like we do with RPM files, however, we'd love to add support for that!
I'm going to repurpose this issue to represent adding that feature.