fix: supporting .egg-info/METADATA in python.Packaging analyzer (#9151)

Co-authored-by: Amit <amit.bhardwaj@aquasec.com>
This commit is contained in:
amitbhardwaj
2025-07-11 16:47:47 +05:30
committed by GitHub
parent 85a156c995
commit e306e2dc52
3 changed files with 8 additions and 1 deletions

View File

@@ -145,7 +145,7 @@ Trivy parses the manifest files of installed packages in container image scannin
See [here](https://packaging.python.org/en/latest/discussions/package-formats/) for the detail.
### Egg
Trivy looks for `*.egg-info`, `*.egg-info/PKG-INFO`, `*.egg` and `EGG-INFO/PKG-INFO` to identify Python packages.
Trivy looks for `*.egg-info`, `*.egg-info/METADATA`, `*.egg-info/PKG-INFO`, `*.egg` and `EGG-INFO/PKG-INFO` to identify Python packages.
### Wheel
Trivy looks for `.dist-info/METADATA` to identify Python packages.