Support for Conan lockfiles

[kzantow]

Hi syft community,

conanfile.txt is a primary/declarative use of conan to only install dependencies.
Most conan users use conanfile.py, the imperative way to define dependencies, build and packaging.
Do you plan to support conanfile.py? For example using lock files (https://docs.conan.io/en/latest/versioning/lockfiles.html)?

Regards.

Originally posted by @EstebanDugueperoux2 in #1083 (comment)

[kzantow]

Hi @EstebanDugueperoux2, I created this issue to from your comment on #1083. When looking at this feature, it states:

This is an experimental feature subject to breaking changes in future releases.

Maybe it would be wise to wait until the feature has stabilized? I do not think we will prioritize this at least until the feature is stable, but do welcome PRs!

[spiffcs]

@EstebanDugueperoux2 with conan.lock support committed I believe we are now cataloging a superset of the packages that would be located in conan.py. Do you still see any value in parsing conan.py and including that info?

[tgerla]

We'll go ahead and close this ticket but please feel free to re-open if conan.py support is still important now that we have support for the lockfiles. Thanks!