anchore / anchore/grant

feat: Add layerID to package struct in report

Open
#52 3 comments 2 reactions 0 assignees View on GitHub
blocked feat
Dominant language
Go
Stars
183
Forks
18
Avg merge
3d 7h
Merged PRs (30d)
7

Description

Hello,

When I want to check the licenses of a given images, it is important to me to understand in which layer the package exists.
This information is already provided by syft, is it possible to display it in grant as well?

Thanks for your time!

Contributor guide

Open the contributing guide

Research direction

Start by locating the package struct used in grant's report and trace how Syft package metadata is read. Carry the layerID into the report output, then verify that a package's layer is displayed and update the relevant coverage if the project has tests for report generation.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.