stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
822a92faeebbceea6fa005b7eddb7572a8b29b41
git.stella-ops.org/docs/features/checked/scanner/macos-homebrew-package-analyzer.md
master e9aeadc040 save checkpoint
2026-02-14 09:11:48 +02:00

1.5 KiB
Raw Blame History

macOS Homebrew Package Analyzer

Module

Scanner

Status

VERIFIED

Description

OS-level analyzer that discovers Homebrew-installed packages by parsing Cellar receipts, producing SBOM components with version, tap source, and installed-on-request metadata.

Implementation Details

  • Homebrew Analyzer:
    • src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/HomebrewPackageAnalyzer.cs - HomebrewPackageAnalyzer discovers Homebrew-installed packages by parsing Cellar receipts, producing SBOM components with version, tap source, and installed-on-request metadata
    • src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.OS.Homebrew/HomebrewAnalyzerPlugin.cs - Plugin registration for the Homebrew analyzer

E2E Test Plan

  • Scan a macOS container image with Homebrew-installed packages and verify packages are discovered from Cellar receipts
  • Verify each discovered package includes version, tap source (e.g., homebrew/core), and installed-on-request status
  • Verify SBOM components are produced with correct PURL format for Homebrew packages
  • Verify packages installed as dependencies (not on-request) are correctly distinguished from explicitly installed packages
  • Verify custom tap packages are correctly attributed to their source tap

Verification

Check Result
Tier 0 - Source files exist PASS
Tier 1 - Build + code review PASS
Tier 2 - Integration tests PASS
Verified 2026-02-13T18:10:00Z