anchore / anchore/syft

Support for syfting CPIO archives

Open
#4,649 4 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
9.6k
Forks
962
Avg merge
23h 27m
Merged PRs (30d)
48

Description

**What would you like to be added**:

Support to recurse into (compressed) CPIO archives.

**Why is this needed**:

Linux kernel allows userspace to be imported in CPIO format, possibly even compressed eg. 'initrd.cpio.zst'
We often work with systems packaged in such format... It would be handy if we could just syft them in place...

**Additional context**:

Contributor guide

Open the contributing guide

Research direction

Start by locating Syft's archive-recursion entry point and existing compressed-archive tests. Use Linux-style initrd.cpio and initrd.cpio.zst examples to define the behavior; done means Syft can recurse into both CPIO archives and compressed CPIO archives.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.