Missing license information for some GO packages
- Dominant language
- Go
- Stars
- 9.6k
- Forks
- 954
- Avg merge
- 23h 27m
- Merged PRs (30d)
- 48
Description
**What happened**:
```
$ docker run --rm -v /var/run/docker.sock:/var/run/docker.sock -e SYFT_GOLANG_SEARCH_LOCAL_MOD_CACHE_LICENSES=true -e SYFT_GOLANG_SEARCH_REMOTE_LICENSES=true anchore/syft:v1.29.0 tykio/tyk-gateway:v5.8 -o cyclonedx-json --select-catalogers "-file" > bom.json
[0002] WARN no file catalogers selected but file selection is configured as "owned-by-package" (this may be unintentional)
$ jq '[.components[] | select( .licenses == null)]' bom.json
[
{
"bom-ref": "pkg:golang/github.com/tyktechnologies/drl@v0.0.0-20231218155806-88e4363884a2?package-id=e8adde444899b171",
"type": "library",
"name": "github.com/TykTechnologies/drl",
"version": "v0.0.0-20231218155806-88e4363884a2",
"cpe": "cpe:2.3:a:TykTechnologies:drl:v0.0.0-20231218155806-88e4363884a2:*:*:*:*:*:*:*",
"purl": "pkg:golang/github.com/TykTechnologies/drl@v0.0.0-20231218155806-88e4363884a2",
"properties": [
{
"name": "syft:package:foundBy",
"value": "go-module-binary-cataloger"
},
{
"name": "syft:package:language",
"value": "go"
},
{
"name": "syft:package:type",
"value": "go-module"
},
{
"name": "syft:package:metadataType",
"value": "go-module-buildinfo-entry"
},
{
"name": "syft:location:0:layerID",
"value": "sha256:9fb70a057f44482dd229de570660f40c1b5feae3caf1bf123934ceeb165a8043"
},
{
"name": "syft:location:0:path",
"value": "/opt/tyk-gateway/tyk"
},
{
"name": "syft:metadata:architecture",
"value": "amd64"
},
{
"name": "syft:metadata:goCompiledVersion",
"value": "go1.23.8"
},
{
"name": "syft:metadata:goCryptoSettings:0",
"value": "standard-crypto"
},
{
"name": "syft:metadata:h1Digest",
"value": "h1:jsQNOqSUq4nTzqTlZ7pCsn6g1H8ZYFbORhdmkprxx7M="
},
{
"name": "syft:metadata:mainModule",
"value": "github.com/TykTechnologies/tyk"
}
]
},
{
"bom-ref": "pkg:golang/github.com/tyktechnologies/tyk@v0.0.0-20250509162946-e65eff00608a?package-id=9a7d7ce612e51ec1",
"type": "library",
"name": "github.com/TykTechnologies/tyk",
"version": "v0.0.0-20250509162946-e65eff00608a",
"cpe": "cpe:2.3:a:TykTechnologies:tyk:v0.0.0-20250509162946-e65eff00608a:*:*:*:*:*:*:*",
"purl": "pkg:golang/github.com/TykTechnologies/tyk@v0.0.0-20250509162946-e65eff00608a",
"properties": [
{
"name": "syft:package:foundBy",
"value": "go-module-binary-cataloger"
},
{
"name": "syft:package:language",
"value": "go"
},
{
"name": "syft:package:type",
"value": "go-module"
},
{
"name": "syft:package:metadataType",
"value": "go-module-buildinfo-entry"
},
{
"name": "syft:location:0:layerID",
"value": "sha256:9fb70a057f44482dd229de570660f40c1b5feae3caf1bf123934ceeb165a8043"
},
{
"name": "syft:location:0:path",
"value": "/opt/tyk-gateway/tyk"
},
{
"name": "syft:metadata:architecture",
"value": "amd64"
},
{
"name": "syft:metadata:goCompiledVersion",
"value": "go1.23.8"
},
{
"name": "syft:metadata:goCryptoSettings:0",
"value": "standard-crypto"
},
{
"name": "syft:metadata:mainModule",
"value": "github.com/TykTechnologies/tyk"
}
]
},
{
"bom-ref": "pkg:golang/github.com/jensneuse/abstractlogger@v0.0.4?package-id=0ed7f8a27d2266de",
"type": "library",
"name": "github.com/jensneuse/abstractlogger",
"version": "v0.0.4",
"cpe": "cpe:2.3:a:jensneuse:abstractlogger:v0.0.4:*:*:*:*:*:*:*",
"purl": "pkg:golang/github.com/jensneuse/abstractlogger@v0.0.4",
"properties": [
{
"name": "syft:package:foundBy",
"value": "go-module-binary-cataloger"
},
{
"name": "syft:package:language",
"value": "go"
},
{
"name": "syft:package:type",
"value": "go-module"
},
{
"name": "syft:package:metadataType",
"value": "go-module-buildinfo-entry"
},
{
"name": "syft:location:0:layerID",
"value": "sha256:9fb70a057f44482dd229de570660f40c1b5feae3caf1bf123934ceeb165a8043"
},
{
"name": "syft:location:0:path",
"value": "/opt/tyk-gateway/tyk"
},
{
"name": "syft:metadata:architecture",
"value": "amd64"
},
{
"name": "syft:metadata:goCompiledVersion",
"value": "go1.23.8"
},
{
"name": "syft:metadata:goCryptoSettings:0",
"value": "standard-crypto"
},
{
"name": "syft:metadata:h1Digest",
"value": "h1:sa4EH8fhWk3zlTDbSncaWKfwxYM8tYSlQ054ETLyyQY="
},
{
"name": "syft:metadata:mainModule",
"value": "github.com/TykTechnologies/tyk"
}
]
},
{
"bom-ref": "pkg:golang/github.com/jensneuse/byte-template@v0.0.0-20200214152254-4f3cf06e5c68?package-id=338d2fcaf265f486",
"type": "library",
"name": "github.com/jensneuse/byte-template",
"version": "v0.0.0-20200214152254-4f3cf06e5c68",
"cpe": "cpe:2.3:a:jensneuse:byte-template:v0.0.0-20200214152254-4f3cf06e5c68:*:*:*:*:*:*:*",
"purl": "pkg:golang/github.com/jensneuse/byte-template@v0.0.0-20200214152254-4f3cf06e5c68",
"properties": [
{
"name": "syft:package:foundBy",
"value": "go-module-binary-cataloger"
},
{
"name": "syft:package:language",
"value": "go"
},
{
"name": "syft:package:type",
"value": "go-module"
},
{
"name": "syft:package:metadataType",
"value": "go-module-buildinfo-entry"
},
{
"name": "syft:cpe23",
"value": "cpe:2.3:a:jensneuse:byte_template:v0.0.0-20200214152254-4f3cf06e5c68:*:*:*:*:*:*:*"
},
{
"name": "syft:location:0:layerID",
"value": "sha256:9fb70a057f44482dd229de570660f40c1b5feae3caf1bf123934ceeb165a8043"
},
{
"name": "syft:location:0:path",
"value": "/opt/tyk-gateway/tyk"
},
{
"name": "syft:metadata:architecture",
"value": "amd64"
},
{
"name": "syft:metadata:goCompiledVersion",
"value": "go1.23.8"
},
{
"name": "syft:metadata:goCryptoSettings:0",
"value": "standard-crypto"
},
{
"name": "syft:metadata:h1Digest",
"value": "h1:E80wOd3IFQcoBxLkAUpUQ3BoGrZ4DxhQdP21+HH1s6A="
},
{
"name": "syft:metadata:mainModule",
"value": "github.com/TykTechnologies/tyk"
}
]
},
{
"bom-ref": "os:debian@12",
"type": "operating-system",
"name": "debian",
"version": "12",
"description": "Distroless",
"swid": {
"tagId": "debian",
"name": "debian",
"version": "12"
},
"externalReferences": [
{
"url": "https://github.com/GoogleContainerTools/distroless/issues/new",
"type": "issue-tracker"
},
{
"url": "https://github.com/GoogleContainerTools/distroless",
"type": "website"
},
{
"url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md",
"comment": "support",
"type": "other"
}
],
"properties": [
{
"name": "syft:distro:extendedSupport",
"value": "false"
},
{
"name": "syft:distro:id",
"value": "debian"
},
{
"name": "syft:distro:prettyName",
"value": "Distroless"
},
{
"name": "syft:distro:versionID",
"value": "12"
}
]
}
]
```
**What you expected to happen**:
License information is included, all of the packages have a LICENSE file in their repo and on https://pkg.go.dev
Contributor guide
Assessment
This issue has not been assessed yet.