# macOS Homebrew Package Analyzer ## Module Scanner ## Status VERIFIED ## Description OS-level analyzer that discovers Homebrew-installed packages by parsing Cellar receipts, producing SBOM components with version, tap source, and installed-on-request metadata. ## Implementation Details - **Homebrew Analyzer**: - `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/HomebrewPackageAnalyzer.cs` - `HomebrewPackageAnalyzer` discovers Homebrew-installed packages by parsing Cellar receipts, producing SBOM components with version, tap source, and installed-on-request metadata - `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/HomebrewAnalyzerPlugin.cs` - Plugin registration for the Homebrew analyzer ## E2E Test Plan - [ ] Scan a macOS container image with Homebrew-installed packages and verify packages are discovered from Cellar receipts - [ ] Verify each discovered package includes version, tap source (e.g., homebrew/core), and installed-on-request status - [ ] Verify SBOM components are produced with correct PURL format for Homebrew packages - [ ] Verify packages installed as dependencies (not on-request) are correctly distinguished from explicitly installed packages - [ ] Verify custom tap packages are correctly attributed to their source tap --- ## Verification | Check | Result | |-------|--------| | Tier 0 - Source files exist | PASS | | Tier 1 - Build + code review | PASS | | Tier 2 - Integration tests | PASS | | Verified | 2026-02-13T18:10:00Z |