refactor(template): change source_location
in github
template for aggregated packages
#6008
Labels
scan/sbom
Issues relating to SBOM
Description
We use
target
field forsource_location
ingithub
template.But we aggregate some packages:
trivy/pkg/fanal/applier/docker.go
Lines 263 to 291 in fb36c4e
For these packages target is
Python
,Java
, etc.This is problem for GitHub UI - #5998.
We need to use
Results.Packages.FilePath
for these packages.But filePath for image scans can be large (e.g.
"FilePath": "usr/local/lib/python3.12/site-packages/pip-23.2.1.dist-info/METADATA"
).It might make sense to use image name for
image
mode.Discussed in #5998
The text was updated successfully, but these errors were encountered: