Add SendFileHashes

Author: cdupuis

sbom/lsp.go

@@ -17,8 +17,15 @@
 package sbom
 
 import (
+	"crypto/sha256"
+	"fmt"
+	"io"
+
+	"github.com/anchore/syft/syft/source"
 	"github.com/docker/cli/cli/command"
 	cliflags "github.com/docker/cli/cli/flags"
+	"github.com/docker/index-cli-plugin/registry"
+	"github.com/docker/index-cli-plugin/sbom/util"
 	"github.com/pkg/errors"
 )
 
@@ -41,3 +48,39 @@ func Send(image string, tx chan<- string) error {
 	close(tx)
 	return nil
 }
+
+func SendFileHashes(image string, tx chan<- string) error {
+	cmd, err := command.NewDockerCli()
+	if err != nil {
+		return errors.Wrap(err, "failed to create docker cli")
+	}
+	if err := cmd.Initialize(cliflags.NewClientOptions()); err != nil {
+		return errors.Wrap(err, "failed to initialize docker cli")
+	}
+	cache, err := registry.SaveImage(image, cmd)
+	if err != nil {
+		return errors.Wrap(err, "failed to copy image")
+	}
+	err = cache.StoreImage()
+	if err != nil {
+		return errors.Wrap(err, "failed to save image")
+	}
+	for _, layer := range cache.Source.Image.Layers {
+		res := util.NewSingleLayerResolver(layer)
+		refs := layer.Tree.AllFiles()
+		for _, ref := range refs {
+			content, err := res.FileContentsByLocation(source.NewLocation(string(ref.RealPath)))
+			if err == nil {
+				b, _ := io.ReadAll(content)
+				content.Close()
+				h := sha256.New()
+				h.Write(b)
+				hash := fmt.Sprintf("sha256:%x", h.Sum(nil))
+				msg := fmt.Sprintf(`{:path "%s" :hash "%s"}`, ref.RealPath, hash)
+				tx <- msg
+			}
+		}
+	}
+	close(tx)
+	return nil
+}

sbom/lsp_test.go

@@ -35,3 +35,19 @@ func TestSend(t *testing.T) {
 		t.Errorf("expected 3 transactions, instead got %d", len(transactions))
 	}
 }
+
+func TestSendFileHashes(t *testing.T) {
+	tx := make(chan string, 100)
+	transactions := make([]string, 0)
+
+	err := SendFileHashes("alpine@sha256:c0d488a800e4127c334ad20d61d7bc21b4097540327217dfab52262adc02380c", tx)
+	if err != nil {
+		t.Fail()
+	}
+	for elem := range tx {
+		transactions = append(transactions, elem)
+	}
+	if len(transactions) != 88 {
+		t.Errorf("expected 88 transactions, instead got %d", len(transactions))
+	}
+}