anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

TUI package count does not match package count in default table output

tk103331 opened this issue · comments

commented

What happened:

I scanned a project and found 859 packages, like the following:
image

But the table below shows that there are only about 630.
This is often confusing.
I found that the package is deduplicated before printing to the table.

rows = removeDuplicateRows(rows)

What you expected to happen:
Should there be an obvious hint?

Steps to reproduce the issue:

Anything else we need to know?:

Environment:

  • Output of syft version: master
  • OS (e.g: cat /etc/os-release or similar): mac

There is a similar issue against grype, and the suggestion made there is to mark the rows where there are duplicates with the number of instances found. Why not go the other way around (report the de-duplicated number in the TUI output)? Because in other output formats, such as the JSON output, the de-duplicated count is what will be used.

Screenshot 2024-02-28 at 4 02 58 PM

How does an output similar to this sound?