save checkpoint
This commit is contained in:
@@ -0,0 +1,33 @@
|
||||
# macOS Homebrew Package Analyzer
|
||||
|
||||
## Module
|
||||
Scanner
|
||||
|
||||
## Status
|
||||
VERIFIED
|
||||
|
||||
## Description
|
||||
OS-level analyzer that discovers Homebrew-installed packages by parsing Cellar receipts, producing SBOM components with version, tap source, and installed-on-request metadata.
|
||||
|
||||
## Implementation Details
|
||||
- **Homebrew Analyzer**:
|
||||
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/HomebrewPackageAnalyzer.cs` - `HomebrewPackageAnalyzer` discovers Homebrew-installed packages by parsing Cellar receipts, producing SBOM components with version, tap source, and installed-on-request metadata
|
||||
- `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/HomebrewAnalyzerPlugin.cs` - Plugin registration for the Homebrew analyzer
|
||||
|
||||
## E2E Test Plan
|
||||
- [ ] Scan a macOS container image with Homebrew-installed packages and verify packages are discovered from Cellar receipts
|
||||
- [ ] Verify each discovered package includes version, tap source (e.g., homebrew/core), and installed-on-request status
|
||||
- [ ] Verify SBOM components are produced with correct PURL format for Homebrew packages
|
||||
- [ ] Verify packages installed as dependencies (not on-request) are correctly distinguished from explicitly installed packages
|
||||
- [ ] Verify custom tap packages are correctly attributed to their source tap
|
||||
|
||||
---
|
||||
|
||||
## Verification
|
||||
|
||||
| Check | Result |
|
||||
|-------|--------|
|
||||
| Tier 0 - Source files exist | PASS |
|
||||
| Tier 1 - Build + code review | PASS |
|
||||
| Tier 2 - Integration tests | PASS |
|
||||
| Verified | 2026-02-13T18:10:00Z |
|
||||
Reference in New Issue
Block a user