Skip to content

feat: detect Debian version from /etc/debian_version#4569

Merged
kzantow merged 4 commits intoanchore:mainfrom
kzantow-anchore:feat/distroless-debian-detection
Jan 23, 2026
Merged

feat: detect Debian version from /etc/debian_version#4569
kzantow merged 4 commits intoanchore:mainfrom
kzantow-anchore:feat/distroless-debian-detection

Conversation

@kzantow
Copy link
Contributor

@kzantow kzantow commented Jan 23, 2026

Description

Some Debian containers such as Debian distroless (e.g.. docker.bintray.io/jfrog/artifactory-oss:6.23.13) do not contain a verison in the /etc/os-release but do have a version in /etc/debian_version.

This PR looks for a debian_version in the event that the release is identified as debian with no version information.

Type of change

  • Bug fix (non-breaking change which fixes an issue)

Checklist

  • I have added unit tests that cover changed behavior
  • I have tested my code in common scenarios and confirmed there are no regressions
  • I have added comments to my code, particularly in hard-to-understand sections

… in /etc/os-release

Signed-off-by: Keith Zantow <kzantow@gmail.com>
Signed-off-by: Keith Zantow <kzantow@gmail.com>
@kzantow kzantow changed the title feat: detect Debian version from /etc/debian_version when not in os-release feat: detect Debian version from /etc/debian_version Jan 23, 2026
Signed-off-by: Keith Zantow <kzantow@gmail.com>
Signed-off-by: Keith Zantow <kzantow@gmail.com>
@kzantow kzantow merged commit c65d023 into anchore:main Jan 23, 2026
10 checks passed
@kzantow kzantow deleted the feat/distroless-debian-detection branch January 23, 2026 22:52
kzantow added a commit that referenced this pull request Jan 26, 2026
Signed-off-by: Keith Zantow <kzantow@gmail.com>
@willmurphyscode willmurphyscode added the enhancement New feature or request label Jan 27, 2026
spiffcs added a commit to patrickpichler/syft that referenced this pull request Jan 30, 2026
* main: (114 commits)
  fix: lookup alternate scheme on url->licenseID (anchore#4588)
  chore(deps): bump the go-minor-patch group with 2 updates (anchore#4583)
  feat: add Qt6 binary detection (anchore#4550)
  chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (anchore#4584)
  fix: snap cataloger incorrectly identifies snap container as deb package (anchore#4500)
  chore(deps): update tools to latest versions (anchore#4577)
  fix: update mixed case dependencies in python to be normalized (anchore#4573)
  chore(deps): update anchore dependencies (anchore#4575)
  chore(deps): update tools to latest versions (anchore#4570)
  feat: detect Debian version from /etc/debian_version (anchore#4569)
  fix: correctly report supporting evidence for binary packages (anchore#4558)
  chore(deps): bump the actions-minor-patch group across 2 directories with 3 updates (anchore#4568)
  chore(deps): bump the go-minor-patch group with 6 updates (anchore#4567)
  chore(deps): update tools to latest versions (anchore#4565)
  chore(deps): bump github.com/spdx/tools-golang (anchore#4557)
  ci: enable zizmor to fail PRs (anchore#4556)
  Chore new slack action (anchore#4553)
  chore(deps): update anchore dependencies (anchore#4552)
  chore(deps): update tools to latest versions (anchore#4551)
  chore(deps): update tools to latest versions (anchore#4545)
  ...

Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants