aquasecurity / aquasecurity/trivy-java-db

bug: we don't need to stop parsing nested dirs if `maven-metadata.xml` file is found

Open
#30 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
41
Forks
26
PR merge metrics
No merged PRs in 30d

Description

## Description
There are times when a directory uses different GroupIDs.
In these cases first dir with `maven-metadata.xml` file will contain not only version dirs, but also dirs for other artifacts.

e.g.:
- https://repo1.maven.org/maven2/org/eclipse/jdt/core/maven-metadata.xml
- https://repo1.maven.org/maven2/org/eclipse/jdt/core/compiler/ecj/maven-metadata.xml
- https://repo1.maven.org/maven2/org/eclipse/jdt/core/manipulation/maven-metadata.xml

Contributor guide

Open the contributing guide

Research direction

Start by tracing the nested-directory parser using the Maven repository examples in the issue, especially the org/eclipse/jdt/core path and its child paths. Verify how discovering maven-metadata.xml affects traversal, then confirm that version directories and other artifact directories are both examined without prematurely stopping.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
databases
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.