Skip to content

Support Java resource adapter extension .far as a Java archive #4183

@david-gherghita

Description

@david-gherghita

What would you like to be added:
Syft should recognize and catalog .far (Feature Archive) files as Java archives, in the same way it already supports .ear, .war, and .jar.

Why is this needed:
When scanning Java Sling applications, libraries packaged inside .far files are not currently detected. This results in incomplete scans and SBOMs that miss dependencies contained in these archives.

Additional context:

By default, a feature archive gets the type far.

Reference: https://github.com/apache/sling-slingfeature-maven-plugin

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Status

Ready

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions