Skip to content

PE cataloger shows asp.net core ref assemblies using fileversion build stamp instead of productversion #4813

@rezmoss

Description

@rezmoss

What happened:

scanning asp net core 10.0.7 img with app refs dll using preservecompilationcontext true shows all Microsoft aspnetcore ref dlls as 10.0.726.21808 , this is the PE fileversion ci build stamp & is the same for the whole release, the real version 10.0.7 plus sha

What you expected to happen:

version = "10.0.7"
Steps to reproduce the issue:

build a minimal web api with true

Inspect Microsoft.AspNetCore.DataProtection.Extensions:

{
  "version": "10.0.726.21808",
  "metadata": {
    "productVersion": "10.0.7+b16286c2284fecf303dbc12a0bb152476d662e44",
    "assemblyVersion": "10.0.0.0"
  }
}

Anything else we need to know?:

Environment:

  • Output of syft version: latest
  • OS (e.g: cat /etc/os-release or similar):

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions