purl: add non-nil Source field to all PURL parse functions

BradLugo · BradLugo · commit 96738351721e · 2026-01-26T15:22:06.000-08:00
The matching logic requires that a claircore.Package contain a non-nil
Source field value.

Signed-off-by: Brad Lugo &lt;blugo@redhat.com&gt;
diff --git a/alpine/purl.go b/alpine/purl.go
@@ -48,6 +48,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Version: purl.Version,
 				Kind:    claircore.BINARY,
 				Arch:    purl.Qualifiers.Map()["arch"],
+				Source:  &claircore.Package{},
 			},
 			Distribution: d,
 		},
diff --git a/alpine/purl_test.go b/alpine/purl_test.go
@@ -28,6 +28,7 @@ func TestRoundTripIndexRecordAlpine(t *testing.T) {
 					Kind:      claircore.BINARY,
 					PackageDB: "apk:/busybox",
 					Filepath:  "/bin/busybox",
+					Source:    &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:       "Alpine Linux",
@@ -47,6 +48,7 @@ func TestRoundTripIndexRecordAlpine(t *testing.T) {
 					Kind:      claircore.BINARY,
 					PackageDB: "apk:/busybox",
 					Filepath:  "/bin/busybox",
+					Source:    &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:       "Alpine Linux",
diff --git a/aws/purl.go b/aws/purl.go
@@ -55,6 +55,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 			Version: purl.Version,
 			Arch:    purl.Qualifiers.Map()["arch"],
 			Kind:    claircore.BINARY,
+			Source:  &claircore.Package{},
 		},
 		Distribution: &claircore.Distribution{},
 	}
diff --git a/aws/purl_test.go b/aws/purl_test.go
@@ -27,6 +27,7 @@ func TestRoundTripIndexRecordAWS(t *testing.T) {
 					Version: "7.79.1-2.amzn2.0.2",
 					Arch:    "x86_64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:       "Amazon Linux AMI",
@@ -46,6 +47,7 @@ func TestRoundTripIndexRecordAWS(t *testing.T) {
 					Version: "5.1.16-6.amzn2023.0.4",
 					Arch:    "aarch64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:       "Amazon Linux",
diff --git a/debian/purl.go b/debian/purl.go
@@ -58,6 +58,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Version: purl.Version,
 				Arch:    purl.Qualifiers.Map()["arch"],
 				Kind:    claircore.BINARY,
+				Source:  &claircore.Package{},
 			},
 			Distribution: &claircore.Distribution{
 				Name:      "Debian GNU/Linux",
diff --git a/debian/purl_test.go b/debian/purl_test.go
@@ -27,6 +27,7 @@ func TestRoundTripIndexRecordDebian(t *testing.T) {
 					Arch:      "x86_64",
 					Kind:      claircore.BINARY,
 					PackageDB: "deb:/var/lib/dpkg/status",
+					Source:    &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:            "Debian GNU/Linux",
diff --git a/gobin/purl.go b/gobin/purl.go
@@ -53,6 +53,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Kind:              claircore.BINARY,
 				NormalizedVersion: pVersion,
 				Arch:              purl.Qualifiers.Map()["arch"],
+				Source:            &claircore.Package{},
 			},
 			Repository: &Repository,
 		},
diff --git a/gobin/purl_test.go b/gobin/purl_test.go
@@ -27,6 +27,7 @@ func TestRoundTripIndexRecordGobin(t *testing.T) {
 					Arch:      "x86_64",
 					Kind:      claircore.BINARY,
 					PackageDB: "go:/usr/local/bin/app",
+					Source:    &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -40,6 +41,7 @@ func TestRoundTripIndexRecordGobin(t *testing.T) {
 					Arch:      "aarch64",
 					Kind:      claircore.BINARY,
 					PackageDB: "go:/opt/agent/agent",
+					Source:    &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -53,6 +55,7 @@ func TestRoundTripIndexRecordGobin(t *testing.T) {
 					Arch:      "x86_64",
 					Kind:      claircore.BINARY,
 					PackageDB: "go:/usr/local/bin/go",
+					Source:    &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -67,6 +70,7 @@ func TestRoundTripIndexRecordGobin(t *testing.T) {
 					Arch:      "x86_64",
 					Kind:      claircore.BINARY,
 					PackageDB: "go:/usr/local/bin/app",
+					Source:    &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
diff --git a/java/purl.go b/java/purl.go
@@ -40,6 +40,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Name:    purl.Namespace + ":" + purl.Name,
 				Version: purl.Version,
 				Kind:    claircore.BINARY,
+				Source:  &claircore.Package{},
 			},
 			Repository: &Repository,
 		},
diff --git a/java/purl_test.go b/java/purl_test.go
@@ -26,6 +26,7 @@ func TestRoundTripIndexRecordJava(t *testing.T) {
 					Name:    "org.apache.commons:commons-lang3",
 					Version: "3.12.0",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -37,6 +38,7 @@ func TestRoundTripIndexRecordJava(t *testing.T) {
 					Name:    "com.fasterxml.jackson.core:jackson-databind",
 					Version: "2.17.1",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
diff --git a/nodejs/purl.go b/nodejs/purl.go
@@ -39,6 +39,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Kind:              claircore.BINARY,
 				Version:           v.String(),
 				NormalizedVersion: claircore.FromSemver(v),
+				Source:            &claircore.Package{},
 			},
 			Repository: &Repository,
 		},
diff --git a/nodejs/purl_test.go b/nodejs/purl_test.go
@@ -28,6 +28,7 @@ func TestRoundTripIndexRecordNodeJS(t *testing.T) {
 					Name:    "express",
 					Version: "4.18.2",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -39,6 +40,7 @@ func TestRoundTripIndexRecordNodeJS(t *testing.T) {
 					Name:    "lodash",
 					Version: "4.17.21",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -50,6 +52,7 @@ func TestRoundTripIndexRecordNodeJS(t *testing.T) {
 					Name:    "left-pad",
 					Version: "not-a-version",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
diff --git a/oracle/purl.go b/oracle/purl.go
@@ -46,6 +46,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 			Version: purl.Version,
 			Arch:    purl.Qualifiers.Map()["arch"],
 			Kind:    claircore.BINARY,
+			Source:  &claircore.Package{},
 		},
 		Distribution: &claircore.Distribution{},
 	}
diff --git a/oracle/purl_test.go b/oracle/purl_test.go
@@ -26,6 +26,7 @@ func TestRoundTripIndexRecordOracle(t *testing.T) {
 					Version: "5.1.8-6.el9",
 					Arch:    "x86_64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: nineDist,
 			},
@@ -38,6 +39,7 @@ func TestRoundTripIndexRecordOracle(t *testing.T) {
 					Version: "8.22-24.oe1",
 					Arch:    "aarch64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: sevenDist,
 			},
diff --git a/photon/purl.go b/photon/purl.go
@@ -46,6 +46,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 			Version: purl.Version,
 			Arch:    purl.Qualifiers.Map()["arch"],
 			Kind:    claircore.BINARY,
+			Source:  &claircore.Package{},
 		},
 		Distribution: &claircore.Distribution{},
 	}
diff --git a/photon/purl_test.go b/photon/purl_test.go
@@ -26,6 +26,7 @@ func TestRoundTripIndexRecordPhoton(t *testing.T) {
 					Version: "5.1.8-6.el9",
 					Arch:    "x86_64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: photon1Dist,
 			},
@@ -38,6 +39,7 @@ func TestRoundTripIndexRecordPhoton(t *testing.T) {
 					Version: "8.22-24.oe1",
 					Arch:    "aarch64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: photon2Dist,
 			},
diff --git a/purl/registry_test.go b/purl/registry_test.go
@@ -163,6 +163,7 @@ func TestRegistryParse(t *testing.T) {
 					Package: &claircore.Package{
 						Name:    "bash",
 						Version: "4.4.20-5.el8",
+						Source:  &claircore.Package{},
 					},
 					Repository: &claircore.Repository{
 						CPE:  cpe.MustUnbind("cpe:/o:redhat:enterprise_linux:9::baseos"),
@@ -191,6 +192,7 @@ func TestRegistryParse(t *testing.T) {
 					Package: &claircore.Package{
 						Name:    "bash",
 						Version: "4.4.20-5.el8",
+						Source:  &claircore.Package{},
 					},
 					Repository: &claircore.Repository{
 						CPE:  cpe.MustUnbind("cpe:/o:redhat:enterprise_linux:9::baseos"),
@@ -202,6 +204,7 @@ func TestRegistryParse(t *testing.T) {
 					Package: &claircore.Package{
 						Name:    "bash",
 						Version: "4.4.20-5.el8",
+						Source:  &claircore.Package{},
 					},
 					Repository: &claircore.Repository{
 						CPE:  cpe.MustUnbind("cpe:/a:redhat:enterprise_linux:9::appstream"),
diff --git a/python/purl.go b/python/purl.go
@@ -39,6 +39,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Version:           v.String(),
 				NormalizedVersion: v.Version(),
 				Kind:              claircore.BINARY,
+				Source:            &claircore.Package{},
 			},
 			Repository: &Repository,
 		},
diff --git a/python/purl_test.go b/python/purl_test.go
@@ -28,6 +28,7 @@ func TestRoundTripIndexRecordPython(t *testing.T) {
 					Name:    "urllib3",
 					Version: "2.2.1",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -39,6 +40,7 @@ func TestRoundTripIndexRecordPython(t *testing.T) {
 					Name:    "django",
 					Version: "1.11.1",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -50,6 +52,7 @@ func TestRoundTripIndexRecordPython(t *testing.T) {
 					Name:    "django",
 					Version: "something-invalid",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
diff --git a/rhel/purl.go b/rhel/purl.go
@@ -84,6 +84,7 @@ func ParseRPMPURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore
 			Package: &claircore.Package{
 				Name:    purl.Name,
 				Version: v.EVR(),
+				Source:  &claircore.Package{},
 				Module:  purl.Qualifiers.Map()["rpmmod"],
 				Arch:    purl.Qualifiers.Map()["arch"],
 			},
diff --git a/rhel/purl_test.go b/rhel/purl_test.go
@@ -28,6 +28,7 @@ func TestRoundTripIndexRecordRPM(t *testing.T) {
 					Version: "5.1.8-6",
 					Arch:    "x86_64",
 					Module:  "bash:5.1",
+					Source:  &claircore.Package{},
 				},
 				Repository: &claircore.Repository{
 					CPE:  cpe.MustUnbind("cpe:/a:redhat:enterprise_linux:8"),
@@ -46,6 +47,7 @@ func TestRoundTripIndexRecordRPM(t *testing.T) {
 					Name:    "coreutils",
 					Version: "1:9.1-3",
 					Arch:    "x86_64",
+					Source:  &claircore.Package{},
 				},
 				Repository: &claircore.Repository{
 					CPE:  cpe.MustUnbind("cpe:/a:redhat:enterprise_linux:9::baseos"),
@@ -61,6 +63,7 @@ func TestRoundTripIndexRecordRPM(t *testing.T) {
 					Name:    "openssl",
 					Version: "3.0.7-16",
 					Arch:    "aarch64",
+					Source:  &claircore.Package{},
 				},
 				Repository: &claircore.Repository{
 					CPE:  cpe.MustUnbind("cpe:/a:redhat:enterprise_linux:9::appstream"),
diff --git a/rhel/rhcc/purl.go b/rhel/rhcc/purl.go
@@ -49,6 +49,7 @@ func ParseOCIPURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore
 			Version:        purl.Version,
 			Arch:           purl.Qualifiers.Map()["arch"],
 			RepositoryHint: "rhcc",
+			Source:         &claircore.Package{},
 		},
 	}
 
diff --git a/rhel/rhcc/purl_test.go b/rhel/rhcc/purl_test.go
@@ -30,6 +30,7 @@ func TestRoundTripIndexRecordOCI(t *testing.T) {
 					NormalizedVersion: claircore.FromSemver(semver.MustParse("v9.3.1")),
 					Arch:              "x86_64",
 					RepositoryHint:    "rhcc",
+					Source:            &claircore.Package{},
 				},
 				Repository: &GoldRepo,
 			},
@@ -43,6 +44,7 @@ func TestRoundTripIndexRecordOCI(t *testing.T) {
 					NormalizedVersion: claircore.FromSemver(semver.MustParse("v9.3.1")),
 					Arch:              "x86_64",
 					RepositoryHint:    "rhcc",
+					Source:            &claircore.Package{},
 				},
 				Repository: &claircore.Repository{
 					CPE:  cpe.MustUnbind("cpe:/o:redhat:enterprise_linux:9::baseos"),
diff --git a/ruby/purl.go b/ruby/purl.go
@@ -32,6 +32,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Name:    purl.Name,
 				Version: purl.Version,
 				Kind:    claircore.BINARY,
+				Source:  &claircore.Package{},
 			},
 			Repository: &Repository,
 		},
diff --git a/ruby/purl_test.go b/ruby/purl_test.go
@@ -26,6 +26,7 @@ func TestRoundTripIndexRecordRuby(t *testing.T) {
 					Name:    "rails",
 					Version: "6.1.0",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
@@ -37,6 +38,7 @@ func TestRoundTripIndexRecordRuby(t *testing.T) {
 					Name:    "rack",
 					Version: "2.2.8",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Repository: &Repository,
 			},
diff --git a/suse/purl.go b/suse/purl.go
@@ -86,6 +86,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Version: purl.Version,
 				Arch:    purl.Qualifiers.Map()["arch"],
 				Kind:    claircore.BINARY,
+				Source:  &claircore.Package{},
 			},
 			Distribution: dist,
 		},
diff --git a/suse/purl_test.go b/suse/purl_test.go
@@ -28,6 +28,7 @@ func TestRoundTripIndexRecord(t *testing.T) {
 					Version: "1.2.11-150500.59.68.1",
 					Arch:    "x86_64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					CPE:        cpe.MustUnbind("cpe:2.3:o:opensuse:leap:15.5"),
@@ -47,6 +48,7 @@ func TestRoundTripIndexRecord(t *testing.T) {
 					Version: "5.1-150300.51.1",
 					Arch:    "aarch64",
 					Kind:    claircore.BINARY,
+					Source:  &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:       "SLES",
diff --git a/ubuntu/purl.go b/ubuntu/purl.go
@@ -53,6 +53,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In
 				Version: purl.Version,
 				Arch:    purl.Qualifiers.Map()["arch"],
 				Kind:    claircore.BINARY,
+				Source:  &claircore.Package{},
 			},
 			Distribution: &claircore.Distribution{
 				Name:       "Ubuntu",
diff --git a/ubuntu/purl_test.go b/ubuntu/purl_test.go
@@ -27,6 +27,7 @@ func TestRoundTripIndexRecordDebian(t *testing.T) {
 					Arch:      "x86_64",
 					Kind:      claircore.BINARY,
 					PackageDB: "deb:/var/lib/dpkg/status",
+					Source:    &claircore.Package{},
 				},
 				Distribution: &claircore.Distribution{
 					Name:            "Ubuntu",

Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,7 @@ func ParsePURL(ctx context.Context, purl packageurl.PackageURL) ([]*claircore.In`
`55`	`55`	`Version: purl.Version,`
`56`	`56`	`Arch: purl.Qualifiers.Map()["arch"],`
`57`	`57`	`Kind: claircore.BINARY,`
	`58`	`+ Source: &claircore.Package{},`
`58`	`59`	`},`
`59`	`60`	`Distribution: &claircore.Distribution{},`
`60`	`61`	`}`