Skip to content

Add scalibr flow for windows - #1037

Draft
bromivipo wants to merge 3 commits into
GoogleCloudPlatform:masterfrom
bromivipo:windows_extractors
Draft

Add scalibr flow for windows#1037
bromivipo wants to merge 3 commits into
GoogleCloudPlatform:masterfrom
bromivipo:windows_extractors

Conversation

@bromivipo

@bromivipo bromivipo commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

This PR integrates Scalibr scanning flow for Windows and adds OS-specific package extractors.

Changes Included:

  • Scalibr Integration: Implemented the execution flow for Scalibr on Windows platforms.
  • Extractors: Added three OS-specific package extractors (Chocolatey, WinGet, GooGet handling).
  • Testing: Added unit tests for new extractors

@google-oss-prow

Copy link
Copy Markdown

Hi @bromivipo. Thanks for your PR.

I'm waiting for a GoogleCloudPlatform member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Comment thread packages/scalibr.go
packages.Chocolatey = append(packages.Chocolatey, pkgInfoFromGenericExtractorPackage(pkg, purl.TypeChocolatey))
} else if _, ok := pkg.Metadata.(*scalibrwinget.Metadata); ok {
packages.WinGet = append(packages.WinGet, pkgInfoFromGenericExtractorPackage(pkg, purl.TypeWinget))
} else if pkg.PURLType == purl.TypeGooget || (pkg.PURL() != nil && pkg.PURL().Type == purl.TypeGooget) {

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As I understand it, Scalibr doesn't have a specific metadata type for GooGet packages, so we can't reuse the standard metadata conversion logic. Is this alternative approach ok?

if projectSettings.ExtendedInventoryCollectionInterval != nil {
if val, err := projectSettings.ExtendedInventoryCollectionInterval.Int64(); err == nil {
c.extendedInventoryCollectionInterval = int(val)
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suppose we should raise an error if err != nil. Consider to create parseInt64

@google-oss-prow

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: bromivipo, iliatsuprik
Once this PR has been reviewed and has the lgtm label, please assign paulinakania for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@google-oss-prow

Copy link
Copy Markdown

New changes are detected. LGTM label has been removed.

@google-oss-prow google-oss-prow Bot removed the lgtm label Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants