Add bun to GH ecosystem to PURL type

Author: shino

models/github.go

@@ -51,6 +51,8 @@ func (m DependencyGraphManifest) Ecosystem() string {
 		return "yarn" // JavaScript
 	case strings.HasSuffix(m.Filename, "pnpm-lock.yaml"):
 		return "pnpm" // JavaScript
+	case strings.HasSuffix(m.Filename, "bun.lock"):
+		return "bun" // JavaScript
 	case strings.HasSuffix(m.Filename, "requirements.txt"),
 		strings.HasSuffix(m.Filename, "requirements-dev.txt"),
 		strings.HasSuffix(m.Filename, "setup.py"):

reporter/sbom/purl.go

@@ -126,7 +126,7 @@ func ghEcosystemToPurlType(t string) string {
 		return packageurl.TypeGolang
 	case "pom", "gradle":
 		return packageurl.TypeMaven
-	case "npm", "yarn", "pnpm":
+	case "npm", "yarn", "pnpm", "bun":
 		return packageurl.TypeNPM
 	case "nuget":
 		return packageurl.TypeNuget

scanner/base_test.go

@@ -9,6 +9,7 @@ import (
 	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/golang/binary"
 	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/golang/mod"
 	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/java/pom"
+	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/nodejs/bun"
 	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/nodejs/npm"
 	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/nodejs/pnpm"
 	_ "github.com/aquasecurity/trivy/pkg/fanal/analyzer/language/nodejs/yarn"