Resolve #1511 by disabling strict mode with node-tar so warnings …

…do not prematurely end expansion.

Signed-off-by: Robert Ross <robross0606@gmail.com>

lib/helpers/utils.js

@@ -1322,6 +1322,9 @@ export async function parsePkgLock(pkgLockFile, options = {}) {
   try {
     tree = await arb.loadVirtual();
   } catch (e) {
+    if (DEBUG_MODE) {
+      console.error(e);
+    }
     console.log(
       `Unable to parse ${pkgLockFile} without legacy peer dependencies. Retrying ...`,
     );
@@ -1332,6 +1335,9 @@ export async function parsePkgLock(pkgLockFile, options = {}) {
       });
       tree = await arb.loadVirtual();
     } catch (e) {
+      if (DEBUG_MODE) {
+        console.error(e);
+      }
       console.log(
         `Unable to parse ${pkgLockFile} in legacy and non-legacy mode. The resulting SBOM would be incomplete.`,
       );

lib/managers/docker.js

@@ -754,11 +754,14 @@ export const extractTar = async (fullImageName, dir) => {
         preserveOwner: false,
         noMtime: true,
         noChmod: true,
-        strict: true,
+        strict: false,
         C: dir,
         portable: true,
-        onwarn: () => {
+        onwarn: (code, message) => {
           // ignore
+          if (code !== "TAR_ENTRY_INFO" || DEBUG_MODE) {
+            console.log(`  WARNING: ${message}`);
+          }
         },
         filter: (path, entry) => {
           // Some files are known to cause issues with extract
@@ -804,36 +807,19 @@ export const extractTar = async (fullImageName, dir) => {
         "Please run cdxgen from a powershell terminal with admin privileges to create symlinks.",
       );
       console.log(err);
-    } else if (
-      ![
-        "TAR_BAD_ARCHIVE",
-        "TAR_ENTRY_INFO",
-        "TAR_ENTRY_INVALID",
-        "TAR_ENTRY_ERROR",
-        "TAR_ENTRY_UNSUPPORTED",
-        "TAR_ABORT",
-        "EACCES",
-      ].includes(err.code)
-    ) {
-      console.log(
-        `Error while extracting image ${fullImageName} to ${dir}. Please file this bug to the cdxgen repo. https://github.com/CycloneDX/cdxgen/issues`,
-      );
-      console.log("------------");
-      console.log(err);
-      console.log("------------");
     } else if (err.code === "TAR_BAD_ARCHIVE") {
       if (DEBUG_MODE) {
         console.log(`Archive ${fullImageName} is empty. Skipping.`);
       }
-    } else if (["EACCES"].includes(err.code)) {
+    } else if (err.code === "EACCES") {
       console.log(err);
-      /*
-       * We do not display errors messages for errors:
-       * 1) TAR_ENTRY_INFO is an informative error indicating that an entry is being modified.
-       * 2) TAR_ENTRY_INVALID indicates that a given entry is not valid tar archive entry and will be skipped.
-       */
-    } else if (!["TAR_ENTRY_INFO", "TAR_ENTRY_INVALID"].includes(err.code)) {
+    } else {
+      console.log(
+        `Error while extracting image ${fullImageName} to ${dir}. Please file this bug to the cdxgen repo. https://github.com/CycloneDX/cdxgen/issues`
+      );
+      console.log("------------");
       console.log(err);
+      console.log("------------");
     }
     return false;
   }