Tags: microsoft/component-detection
Tags
Theztefan/uv detector improvements (#1844) * uv detector improvements - multi group, git, transitive dev dep, git source * Update src/Microsoft.ComponentDetection.Detectors/uv/UvLockComponentDetector.cs Co-authored-by: Copilot <[email protected]> * Clean up after merge * Handle multiple versions of the same package * Add test for cyclic dependency * Handle dependencies more correctly * Handle pyton casing * PR feedback * PR feedback * Fix build * PR feedback --------- Co-authored-by: Stefan Petrushevski <[email protected]> Co-authored-by: Copilot <[email protected]>
Pauldorsch/reduce linux scan time (#1826) * initial attempts at speeding up linux detection * allow multiple pulls at once * clarity and sorting binds * add debug logging * add some tests * pr feedback * pr feedback: clear caches once tasks finish * null check * Apply suggestions from code review Co-authored-by: Copilot Autofix powered by AI <[email protected]> --------- Co-authored-by: Copilot Autofix powered by AI <[email protected]>
feat: defensive identity overrides for MavenComponent and GitComponent ( #1822) * feat: defensive identity overrides for MavenComponent and GitComponent MavenComponent - Override GetExtendedIdProperties() to suppress DownloadUrl/SourceUrl from Id. GAV is the canonical Maven identity; the Maven Central download URL is deterministic from GAV and SourceUrl is surfaced server-side from the POM - neither should affect identity. GitComponent - Add PackageUrl override returning pkg:github/{owner}/{repo}@{commit} for repositories hosted on github.com (case-insensitive host match, .git suffix stripped, trailing slash normalised, path must resolve cleanly to owner/repo). Returns null for any other host (gitlab, bitbucket, ADO, GitHub Enterprise) and for malformed paths; consumers should fall back to RepositoryUrl in that case. - Override GetExtendedIdProperties() defensively for the same reason as MavenComponent. Tests - PurlGenerationTests: explicit Maven coverage plus 7 GitHub PURL cases (canonical, .git suffix, trailing slash, case-insensitive host, non-github hosts, malformed paths, missing commit hash). - TypedComponentSerializationTests: Id-stability tests proving both overrides exclude DownloadUrl/SourceUrl from Id even when set. No production behaviour change today (no detector currently sets DownloadUrl/SourceUrl on MavenComponent/GitComponent), but locks identity stability ahead of upcoming SBOM enrichment work that will populate DownloadUrl in the CD-Internal converter. * test: harden Maven verification fixture for PackageUrl coverage Update verification Maven resource test/Microsoft.ComponentDetection.VerificationTests/resources/maven/lib/pom.xml to make PackageUrl-producing coordinates explicit: - add module-level <groupId>com.microsoft</groupId> - add literal dependency org.apache.commons:commons-lang3:3.12.0 This keeps existing semantics intact while ensuring at least one stable, non-property-indirected Maven coordinate is present in the fixture for verification comparisons that key on Component.PackageUrl. * fix: guard Git PackageUrl against whitespace commit hash * test(verification): avoid maven fixture dependency-graph drift
Enhance DockerReferenceUtility to handle invalid characters (#1821) * Enhance DockerReferenceUtility to handle invalid characters and update tests for unresolved variables * Apply suggestions from code review Co-authored-by: Copilot Autofix powered by AI <[email protected]> --------- Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Promote the Dockerfile, Docker Compose, and Helm Detectors to Experim… …ental Status (#1803) * Promote the Dockerfile, Docker Compose, and Helm Detectors to Experimental status Co-authored-by: Copilot <[email protected]> * docs: document opt-in mechanism for experimental detectors in dockerfile, dockercompose, and helm docs Agent-Logs-Url: https://github.com/microsoft/component-detection/sessions/c1b52ac3-7a11-4689-b324-b61c26014208 Co-authored-by: jpinz <[email protected]> * Add DockerfileComponentDetectorTests Co-authored-by: Copilot <[email protected]> * Update the dockerfile.md docs Co-authored-by: Copilot <[email protected]> --------- Co-authored-by: Copilot <[email protected]> Co-authored-by: copilot-swe-agent[bot] <[email protected]> Co-authored-by: jpinz <[email protected]>
PreviousNext