github.com/anchore/syft@v1.4.2-0.20240516191711-1bec1fc5d397/syft/pkg/cataloger/java/test-fixtures/jar-metadata/README.md (about)

     1  # Jar-Metadata test fixtures
     2  
     3  Each directory is the name of a jar to be created (simply a zip) based on the contents of the directory.
     4  This prevents us from having to create real jars by hand or keep binaries in the repo. This also means we dont need the
     5  entire jar, only the necessary metadata for testing.
     6  
     7  ### api-all-2.0.0-sources
     8  This fixture is built to simulate the case where we have a jar with multiple pom files discovered when trying to determine the parent.
     9  This is a valid case, but not one that we covered before [PR 2231](https://github.com/anchore/syft/pull/2231)
    10  
    11  ### jackson-core-2.15.2
    12  These two fixtures are built to simulate the case where we would have a duplicate jar 
    13  regression as seen in [issue #2130](https://github.com/anchore/syft/issues/2130)