Skip to content

fix: validation logic of cocoapods purls #111

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Aug 29, 2023

Conversation

mcombuechen
Copy link
Contributor

  • Ready for review
  • Follows CONTRIBUTING rules
  • Reviewed by Snyk internal team

What does this PR do?

This adds another case for the validation of cocoapods purls. CocoaPods purls encode the spec name as package name, and put the optional sub-spec on the subpath component; as opposed to the DepGraph which will encode spec name and subspec in a single, slash-divided string.

E.g.

// Snyk PkgInfo
{
  "name": "Adjust/Core",
  "version": "4.17.1"
}

// PackageURL
"pkg:cocoapods/[email protected]#Core"

See specification for cocoapods purls here: https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst#cocoapods.

Where should the reviewer start?

How should this be manually tested?

Any background context you want to provide?

What are the relevant tickets?

Screenshots

Additional questions

@mcombuechen mcombuechen requested a review from a team as a code owner August 2, 2023 08:14
@mcombuechen mcombuechen force-pushed the fix/validate-cocoapods-purl branch from 45464c3 to 87159ad Compare August 29, 2023 09:54
@mcombuechen mcombuechen merged commit e53cac0 into master Aug 29, 2023
@mcombuechen mcombuechen deleted the fix/validate-cocoapods-purl branch August 29, 2023 10:04
@snyksec
Copy link

snyksec commented Aug 29, 2023

🎉 This PR is included in version 2.7.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants