Support for scanning manifest files (#36)

* feat: add extractor logic for manifest files * feat: add manifest-based package installation detection * feat: add osv-scanner for extracting lockfiles * refactor: add comment for cmd parse * refactor: add Ecosystem() method to PackageManager interface * refactor: implement package-manager-specific extractors & replace osv-scanner with scalibr * Update extractor/extractor.go Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> --------- Signed-off-by: Sahil Bansal <bansalsahil315@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-08-03 07:24:09 +02:00 · 2025-06-12 18:58:58 +05:30
parent 302e17fe48
commit 5e9f2af972
13 changed files with 690 additions and 16 deletions
@@ -111,6 +111,93 @@ func TestPipParsePackageInfo(t *testing.T) {
 	}
 }

+func TestPipParseCommand_ManifestInstallation(t *testing.T) {
+	pm, err := NewPipPackageManager(DefaultPipPackageManagerConfig())
+	assert.NoError(t, err)
+
+	cases := []struct {
+		name              string
+		args              []string
+		expectedManifest  bool
+		expectedFiles     []string
+		expectedTargets   int
+	}{
+		{
+			name:              "pip install with -r flag",
+			args:              []string{"install", "-r", "requirements.txt"},
+			expectedManifest:  true,
+			expectedFiles:     []string{"requirements.txt"},
+			expectedTargets:   0,
+		},
+		{
+			name:              "pip install with --requirement flag",
+			args:              []string{"install", "--requirement", "requirements.txt"},
+			expectedManifest:  true,
+			expectedFiles:     []string{"requirements.txt"},
+			expectedTargets:   0,
+		},
+		{
+			name:              "pip install with combined -r flag",
+			args:              []string{"install", "-rrequirements.txt"},
+			expectedManifest:  true,
+			expectedFiles:     []string{"requirements.txt"},
+			expectedTargets:   0,
+		},
+		{
+			name:              "pip install without args (bare install)",
+			args:              []string{"install"},
+			expectedManifest:  true,
+			expectedFiles:     []string{"requirements.txt"},
+			expectedTargets:   0,
+		},
+		{
+			name:              "pip install with explicit package",
+			args:              []string{"install", "django"},
+			expectedManifest:  false,
+			expectedFiles:     nil,
+			expectedTargets:   1,
+		},
+		{
+			name:              "pip install with mixed args",
+			args:              []string{"install", "django", "-r", "requirements.txt"},
+			expectedManifest:  true,
+			expectedFiles:     []string{"requirements.txt"},
+			expectedTargets:   1,
+		},
+		{
+			name:              "pip install with multiple -r flags",
+			args:              []string{"install", "-r", "requirements.txt", "-r", "dev-requirements.txt"},
+			expectedManifest:  true,
+			expectedFiles:     []string{"requirements.txt", "dev-requirements.txt"},
+			expectedTargets:   0,
+		},
+		{
+			name:              "non-install command",
+			args:              []string{"list"},
+			expectedManifest:  false,
+			expectedFiles:     nil,
+			expectedTargets:   0,
+		},
+	}
+
+	for _, tc := range cases {
+		t.Run(tc.name, func(t *testing.T) {
+			parsed, err := pm.ParseCommand(tc.args)
+			assert.NoError(t, err)
+			
+			assert.Equal(t, tc.expectedManifest, parsed.IsManifestInstall, "IsManifestInstall mismatch")
+			assert.Equal(t, tc.expectedFiles, parsed.ManifestFiles, "ManifestFiles mismatch")
+			assert.Equal(t, tc.expectedTargets, len(parsed.InstallTargets), "InstallTargets count mismatch")
+			
+			// Test helper methods
+			assert.Equal(t, tc.expectedManifest, parsed.HasManifestInstall(), "HasManifestInstall mismatch")
+			
+			expectedShouldExtract := tc.expectedManifest && tc.expectedTargets == 0
+			assert.Equal(t, expectedShouldExtract, parsed.ShouldExtractFromManifest(), "ShouldExtractFromManifest mismatch")
+		})
+	}
+}
+
 func TestPipConvertCompatibleRelease(t *testing.T) {
 	cases := []struct {
 		name     string