feat(nuget): Implement nuget analyzer

Author: elldritch

Makefile

@@ -35,11 +35,9 @@ docker-base: ./docker/base/Dockerfile
 docker-test-base: docker-base ./docker/test-base/Dockerfile
 	sudo docker build -t quay.io/fossa/fossa-cli-test-base -f ./docker/test-base/Dockerfile .
 
-.PHONY: docker
 docker: docker-base ./docker/cli/Dockerfile
 	sudo docker build -t quay.io/fossa/fossa-cli -f ./docker/cli/Dockerfile .
 
-.PHONY: docker-test
 docker-test: docker-test-base ./docker/test/Dockerfile
 	sudo docker build -t quay.io/fossa/fossa-cli-test -f ./docker/test/Dockerfile .
 

analyzers/analyzer.go

@@ -9,6 +9,7 @@ import (
 	"github.com/fossas/fossa-cli/analyzers/gradle"
 	"github.com/fossas/fossa-cli/analyzers/maven"
 	"github.com/fossas/fossa-cli/analyzers/nodejs"
+	"github.com/fossas/fossa-cli/analyzers/nuget"
 	"github.com/fossas/fossa-cli/analyzers/php"
 	"github.com/fossas/fossa-cli/analyzers/python"
 	"github.com/fossas/fossa-cli/analyzers/ruby"
@@ -60,15 +61,13 @@ func New(key pkg.Type, options map[string]interface{}) (Analyzer, error) {
 	case pkg.NodeJS:
 		return nodejs.New(options)
 	case pkg.NuGet:
-		return nil, ErrAnalyzerNotImplemented
+		return nuget.New(options)
 	case pkg.Python:
 		return python.New(options)
 	case pkg.Ruby:
 		return ruby.New(options)
 	case pkg.Scala:
 		return nil, ErrAnalyzerNotImplemented
-	case pkg.VendoredArchives:
-		return nil, ErrAnalyzerNotImplemented
 	}
 	return nil, ErrUnknownPackageType
 }

analyzers/maven/maven.go

@@ -108,6 +108,7 @@ func (a *Analyzer) Discover(dir string) ([]module.Module, error) {
 			// subproject.
 			return filepath.SkipDir
 		}
+
 		return nil
 	})
 

analyzers/nuget/analyze.go

@@ -0,0 +1,130 @@
+package nuget
+
+import (
+	"path/filepath"
+
+	"github.com/fossas/fossa-cli/buildtools/dotnet"
+	"github.com/fossas/fossa-cli/files"
+	"github.com/fossas/fossa-cli/log"
+	"github.com/fossas/fossa-cli/module"
+	"github.com/fossas/fossa-cli/pkg"
+)
+
+func (a *Analyzer) Analyze(m module.Module) (module.Module, error) {
+	log.Logger.Debugf("%#v", m)
+	// Parse lockfile.
+	lockfile, err := dotnet.ReadLockfile(filepath.Join(Dir(m), "obj", "project.assets.json"))
+	if err != nil {
+		return m, err
+	}
+
+	// Compute project graph.
+	projects := make(map[string]dotnet.Manifest)
+	err = Projects(projects, m.BuildTarget)
+	if err != nil {
+		return m, err
+	}
+	root := projects[m.BuildTarget]
+	id := pkg.ID{
+		Type:     pkg.NuGet,
+		Name:     root.Name(),
+		Revision: root.Version(),
+		Location: m.BuildTarget,
+	}
+
+	// Compute package graph.
+	deps := make(map[pkg.ID]pkg.Package)
+	Packages(projects, lockfile, deps, m.BuildTarget)
+
+	m.Imports = deps[id].Imports
+	delete(deps, id)
+	m.Deps = deps
+
+	return m, nil
+}
+
+func Projects(projects map[string]dotnet.Manifest, projectFile string) error {
+	// Break out of cycles.
+	if _, ok := projects[projectFile]; ok {
+		return nil
+	}
+
+	// Read manifest.
+	var manifest dotnet.Manifest
+	err := files.ReadXML(&manifest, projectFile)
+	if err != nil {
+		return err
+	}
+	projects[projectFile] = manifest
+
+	// Get all project references and recurse.
+	for _, reference := range manifest.Projects() {
+		err = Projects(projects, filepath.Join(filepath.Dir(projectFile), dotnet.Path(reference.Include)))
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+func Packages(projects map[string]dotnet.Manifest, lockfile dotnet.Lockfile, deps map[pkg.ID]pkg.Package, dep string) pkg.ID {
+	log.Logger.Debugf("%#v", dep)
+	if project, ok := projects[dotnet.Path(dep)]; ok {
+		log.Logger.Debugf("%#v", project)
+		name := project.Name()
+		version := project.Version()
+
+		id := pkg.ID{
+			Type:     pkg.NuGet,
+			Name:     name,
+			Revision: version,
+			Location: dep,
+		}
+
+		var imports []pkg.Import
+		for _, ref := range project.Packages() {
+			imports = append(imports, pkg.Import{
+				Target:   ref.Include + "@" + ref.Version,
+				Resolved: Packages(projects, lockfile, deps, ref.Include),
+			})
+		}
+		for _, ref := range project.Projects() {
+			imports = append(imports, pkg.Import{
+				Target:   ref.Include + "@" + ref.Version,
+				Resolved: Packages(projects, lockfile, deps, filepath.Join(filepath.Dir(dep), dotnet.Path(ref.Include))),
+			})
+		}
+
+		deps[id] = pkg.Package{
+			ID:      id,
+			Imports: imports,
+		}
+
+		return id
+	} else {
+		name := dep
+		version := lockfile.Resolve(name)
+
+		id := pkg.ID{
+			Type:     pkg.NuGet,
+			Name:     name,
+			Revision: version,
+		}
+
+		var imports []pkg.Import
+		for p, version := range lockfile.Imports(dep) {
+			imports = append(imports, pkg.Import{
+				Target:   p + "@" + version,
+				Resolved: Packages(projects, lockfile, deps, p),
+			})
+		}
+
+		deps[id] = pkg.Package{
+			ID:      id,
+			Imports: imports,
+		}
+
+		return id
+	}
+}