Skip to content

feat(purl): Add more PURL-to-ecosystem mappings#2415

Merged
another-rex merged 4 commits into
google:mainfrom
cuixq:fix
Dec 12, 2025
Merged

feat(purl): Add more PURL-to-ecosystem mappings#2415
another-rex merged 4 commits into
google:mainfrom
cuixq:fix

Conversation

@cuixq
Copy link
Copy Markdown
Contributor

@cuixq cuixq commented Dec 12, 2025

Fixes #2411

This PR adds more mappings for the following PURL types to their corresponding OSV ecosystems:

  • composer
  • conan
  • cran
  • github
  • hackage
  • k8s
  • swift

The purlEcosystems map also has been sorted alphabetically by PURL type.

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Dec 12, 2025

Codecov Report

❌ Patch coverage is 0% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 67.78%. Comparing base (474b051) to head (8184a30).
⚠️ Report is 9 commits behind head on main.

Files with missing lines Patch % Lines
internal/utility/purl/purl_to_package.go 0.00% 5 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2415      +/-   ##
==========================================
- Coverage   67.79%   67.78%   -0.02%     
==========================================
  Files         172      172              
  Lines       13286    13291       +5     
==========================================
+ Hits         9007     9009       +2     
- Misses       3572     3576       +4     
+ Partials      707      706       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@cuixq cuixq marked this pull request as ready for review December 12, 2025 02:32
@cuixq cuixq requested a review from another-rex December 12, 2025 02:32
@cuixq cuixq changed the title feat(purl): Add more purl-to-ecosystem mappings feat(purl): Add more PURL-to-Ecosystem mappings Dec 12, 2025
@cuixq cuixq changed the title feat(purl): Add more PURL-to-Ecosystem mappings feat(purl): Add more PURL-to-ecosystem mappings Dec 12, 2025
"pypi": {"*": osvconstants.EcosystemPyPI},
"gem": {"*": osvconstants.EcosystemRubyGems},
"gem": {"*": osvconstants.EcosystemRubyGems},
"generic": {"*": osvconstants.EcosystemOSSFuzz},
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use the GIT ecosystem here is probably better.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we don't yet have a GIT ecosystem - I have commented this out and we can add it back once we have the ecosystem added.

@another-rex another-rex enabled auto-merge (squash) December 12, 2025 05:34
@another-rex another-rex merged commit f40aae6 into google:main Dec 12, 2025
16 checks passed
@cuixq cuixq deleted the fix branch January 1, 2026 21:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

OSV-Scanner 2.x is not able to scan Pub packages used in flutter application from SBOM

3 participants