Skip to content

Conversation

@octocolby
Copy link

@octocolby octocolby commented Oct 8, 2025

Description

This PR introduces the functionality to parse self-contained dotnet projects. When dotnet projects are published as self-contained there are libraries added to the output folder that the dotnet runtime would normally supply. These local libraries are used instead of the hosts runtime libraries when run so they should be included in the SBOM.

Related issues

Related PRs

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@CLAassistant
Copy link

CLAassistant commented Oct 8, 2025

CLA assistant check
All committers have signed the CLA.

@github-actions github-actions bot added the apidiff Indicates Go API changes relevant to library consumers (CLI compatibility may be unaffected) label Oct 8, 2025
@github-actions
Copy link

github-actions bot commented Oct 8, 2025

📊 API Changes Detected

Semver impact: major

github.com/aquasecurity/trivy/rpc/common
  Incompatible changes:
  - BuildInfo: removed

github.com/aquasecurity/trivy/rpc/cache
  Incompatible changes:
  - (*BlobInfo).GetBuildInfo: removed
  - BlobInfo.BuildInfo: removed

github.com/aquasecurity/trivy/pkg/rpc
  Incompatible changes:
  - ConvertFromRPCBuildInfo: removed
  - ConvertToRPCBuildInfo: removed

github.com/aquasecurity/trivy/pkg/sbom/io
  Incompatible changes:
  - EncoderOption: removed
  - ForceRegenerate: removed
  - NewEncoder: changed from func(...EncoderOption) *Encoder to func(github.com/aquasecurity/trivy/pkg/sbom/core.Options) *Encoder
  - WithBOMRef: removed
  - WithParents: removed

github.com/aquasecurity/trivy/pkg/dependency/parser/dotnet/core_deps
  Incompatible changes:
  - TargetLib.Runtime: changed from any to map[string]Runtime
  - TargetLib: old is comparable, new is not
  Compatible changes:
  - Runtime: added

@aqua-bot aqua-bot requested a review from a team October 8, 2025 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

apidiff Indicates Go API changes relevant to library consumers (CLI compatibility may be unaffected)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants