anchore / anchore/syft

Support traefik binary various versions

Open
#4,980 0 comments 1 reaction 0 assignees View on GitHub
bug good-first-issue
Dominant language
Go
Stars
9.6k
Forks
954
Avg merge
23h 27m
Merged PRs (30d)
48

Description

**What happened**:

Current matcher can not detect some pattern
- 2.11.30 - 2.11.35
- arm/v6
- v2.11.1 - v2.11.3
- v3.0.1
- v3.1.1 - v3.1.7
- v3.4.0
- v3.5.6
- v3.6.0 - v3.6.6
- s390x
- 2.x
- 3.x
- ppc64le
- v2.11.10 - v2.11.28

**Steps to reproduce the issue**:

2.11.30
```
$ syft -q traefik:2.11.30 | grep traefik
github.com/traefik/paerser v0.2.2 go-module
github.com/traefik/traefik/v2 v0.0.0-20251028084404-998868450f09 go-module
github.com/traefik/yaegi v0.16.1 go-module
```

arm/v6
```
$ syft -q --platform linux/arm/v6 traefik:v2.11.1 | grep traefik
github.com/traefik/paerser v0.2.0 go-module
github.com/traefik/traefik/v2 v0.0.0-20240410095203-d53f5f01a0fe go-module
github.com/traefik/yaegi v0.16.1 go-module

$ syft -q --platform linux/arm/v6 traefik:v3.0.1 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/paerser v0.2.0 go-module
github.com/traefik/traefik/v3 v0.0.0-20240522130804-736f37cb5835 go-module
github.com/traefik/yaegi v0.16.1 go-module

$ syft -q --platform linux/arm/v6 traefik:v3.1.1 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/http-wasm-host-go v0.0.0-20240618100324-3c53dcaa1a70 go-module
github.com/traefik/paerser v0.2.0 go-module
github.com/traefik/traefik/v3 v0.0.0-20240730135203-f52a36ba120d go-module
github.com/traefik/yaegi v0.16.1 go-module

$ syft -q --platform linux/arm/v6 traefik:v3.4.0 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/paerser v0.2.2 go-module
github.com/traefik/traefik/v3 v0.0.0-20250505133404-ce42e8501eec go-module
github.com/traefik/yaegi v0.16.1 go-module

$ syft -q --platform linux/arm/v6 traefik:v3.5.6 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/paerser v0.2.2 go-module
github.com/traefik/traefik/v3 v0.0.0-20251107134005-bb10b9df9172 go-module
github.com/traefik/yaegi v0.16.1 go-module

$ syft -q --platform linux/arm/v6 traefik:v3.6.0 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/paerser v0.2.2 go-module
github.com/traefik/traefik/v3 v0.0.0-20251107151604-06db5168c0d9 go-module
github.com/traefik/yaegi v0.16.1 go-module
```

s390x
```
$ syft -q --platform linux/s390x traefik:2.6.2 | grep traefik
github.com/traefik/paerser v0.1.5 go-module
github.com/traefik/traefik/v2 UNKNOWN go-module
github.com/traefik/yaegi v0.11.2 go-module
traefik 0.0.0 binary

$ syft -q --platform linux/s390x traefik:2.10.5 | grep traefik
github.com/traefik/paerser v0.2.0 go-module
github.com/traefik/traefik/v2 v0.0.0-20231011135005-6a34f238ceb1 go-module
github.com/traefik/yaegi v0.15.1 go-module
traefik 2.7.0 binary

$ syft -q --platform linux/s390x traefik:2.11.36 | grep traefik
github.com/traefik/paerser v0.2.2 go-module
github.com/traefik/traefik/v2 v2.11.36 go-module
github.com/traefik/yaegi v0.16.1 go-module
traefik 2.7.0 binary

$ syft -q --platform linux/s390x traefik:3.0.0 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/paerser v0.2.0 go-module
github.com/traefik/traefik/v3 v0.0.0-20240429140604-d99d2f95e66a go-module
github.com/traefik/yaegi v0.16.1 go-module
traefik 2.7.0 binary

$ syft -q --platform linux/s390x traefik:3.6.8 | grep traefik
github.com/traefik/grpc-web v0.16.0 go-module
github.com/traefik/paerser v0.2.2 go-module
github.com/traefik/traefik/v3 v3.6.8 go-module
github.com/traefik/yaegi v0.16.1 go-module
traefik 2.7.0 binary
```

ppc64le
```
$ syft -q --platform linux/ppc64le traefik:v2.11.10 | grep traefik
github.com/traefik/paerser v0.2.1 go-module
github.com/traefik/traefik/v2 v0.0.0-20240919100804-b00f640d7262 go-module
github.com/traefik/yaegi v0.16.1 go-module
```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the listed syft commands for the affected Traefik image versions and platforms, then locate the matcher responsible for identifying Traefik binaries. Done means the reported version and architecture combinations are detected consistently, including arm/v6, s390x, and ppc64le.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, go
Domain
cli, tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.