Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Identify executable native code files/libraries under node_modules #3192

Open
kzantow opened this issue Sep 4, 2024 · 0 comments
Open

Identify executable native code files/libraries under node_modules #3192

kzantow opened this issue Sep 4, 2024 · 0 comments
Labels
enhancement New feature or request unknowns things syft does not detect

Comments

@kzantow
Copy link
Contributor

kzantow commented Sep 4, 2024

What would you like to be added:
Identify executables found within node_modules providing native code to node runtime.

Why is this needed:
In the official Docker images, there are approximately 80 unidentified executable files found in node_modules paths, which presumably are native executable code for the node runtime. Syft should be able to identify from the package.json, ideally, that these native modules are expected and associate them with the surfaced Node packages.

@kzantow kzantow added enhancement New feature or request unknowns things syft does not detect labels Sep 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request unknowns things syft does not detect
Projects
Status: No status
Development

No branches or pull requests

1 participant