feat: add support of purl repository_url (#123)

Signed-off-by: Damian Sniezek <[email protected]>

Author: snieguu

lib/ecosystems/package.go

@@ -20,6 +20,7 @@ import (
 	"context"
 	"fmt"
 	"net/http"
+	"net/url"
 
 	"github.com/package-url/packageurl-go"
 
@@ -75,7 +76,23 @@ func GetPackageVersionData(purl packageurl.PackageURL) (*packages.GetRegistryPac
 	return resp, nil
 }
 
+func repositoryURLfromPurl(purl packageurl.PackageURL) *url.URL {
+	if len(purl.Qualifiers) > 0 {
+		qualifiersMap := purl.Qualifiers.Map()
+		if repoURL, ok := qualifiersMap["repository_url"]; ok && repoURL != "" {
+			parsedURL, err := url.Parse(repoURL)
+			if err == nil && parsedURL.Host != "" {
+				return parsedURL
+			}
+		}
+	}
+	return nil
+}
+
 func purlToEcosystemsRegistry(purl packageurl.PackageURL) string {
+	if repoURL := repositoryURLfromPurl(purl); repoURL != nil {
+		return repoURL.Host
+	}
 	return map[string]string{
 		packageurl.TypeApk:       "alpine-edge",
 		packageurl.TypeBower:     "bower.io",

lib/ecosystems/package_test.go

@@ -109,6 +109,7 @@ func TestPurlToEcosystemsRegistry(t *testing.T) {
 		{"pkg:nuget/[email protected]", "nuget.org"},
 		{"pkg:hex/[email protected]", "hex.pm"},
 		{"pkg:maven/com.google.guava/[email protected]", "repo1.maven.org"},
+		{"pkg:maven/org.opensaml/[email protected]?repository_url=https%3A%2F%2Fbuild.shibboleth.net%2Fnexus%2Fcontent%2Frepositories%2Freleases%2F", "build.shibboleth.net"},
 		{"pkg:pypi/[email protected]", "pypi.org"},
 		{"pkg:composer/symfony/[email protected]", "packagist.org"},
 		{"pkg:gem/[email protected]", "rubygems.org"},