fix: CPE generation for django (#2068)

Signed-off-by: witchcraze <[email protected]>
anchore · Aug 28, 2023 · cedfa05 · cedfa05
1 parent dd09e03
commit cedfa05
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/syft/pkg/cataloger/common/cpe/candidate_by_package_type.go b/syft/pkg/cataloger/common/cpe/candidate_by_package_type.go
@@ -183,6 +183,11 @@ var defaultCandidateAdditions = buildCandidateLookup(
 			candidateKey{PkgName: "pip"},
 			candidateAddition{AdditionalVendors: []string{"pypa"}},
 		},
+		{
+			pkg.PythonPkg,
+			candidateKey{PkgName: "Django"},
+			candidateAddition{AdditionalVendors: []string{"djangoproject"}},
+		},
 		// Alpine packages
 		{
 			pkg.ApkPkg,

diff --git a/syft/pkg/cataloger/common/cpe/generate_test.go b/syft/pkg/cataloger/common/cpe/generate_test.go
@@ -896,6 +896,14 @@ func TestCandidateVendor(t *testing.T) {
 			},
 			expected: []string{"apache"},
 		},
+		{
+			name: "Django",
+			p: pkg.Package{
+				Name: "Django",
+				Type: pkg.PythonPkg,
+			},
+			expected: []string{"djangoproject" /* <-- known good names | default guess --> */, "Django"},
+		},
 	}
 
 	for _, test := range tests {