-
Notifications
You must be signed in to change notification settings - Fork 581
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve Python binary scanning #1643
Labels
bug
Something isn't working
Comments
Maybe, that will also useful fot ruby Docker official image ruby:latest
related PR |
@witchcraze I think you're right:
Do you mind opening a separate ticket for similarly improving ruby scanning? |
Closed
kzantow
added
bug
Something isn't working
and removed
enhancement
New feature or request
labels
Mar 9, 2023
This was referenced Mar 9, 2023
Closed
Closed
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
What would you like to be added:
Use shared libraries to determine python binary versions and remove
patchlevel.h
scanning.Why is this needed:
Python binary files are not currently being detected when they reference shared libraries, because there is nothing in the binary bytes that contains the version.
Additional context:
Python binary scanning today is split up into 3 separate classifiers:
Often the python binary library classifier finds appropriate python binary information, but this does not have any reference to the actual python executable because the binary itself is just loading the shared library. Additionally, Syft sometimes surfaces the
patchlevel.h
files from the cpython source, without any location of the actual binary. We need to examine the shared libraries referenced in python binaries and look up the contents of the shared library to determine the version of python installed.This is related to: #661
The text was updated successfully, but these errors were encountered: