100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Alex Goodman	bd131d78f1	[wip] add elf note dependencies ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-01-17 22:16:32 -05:00
Alex Goodman	cbce129bb9	Use reader when scanning for package versions over reading entire binary into memory (#3558) ... * use streaming readers Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * replace redis search patterns Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address PR feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-01-02 22:12:37 +00:00
Alex Goodman	d77e78ea9d	Make pre-release integration PRs (#3370) ... * use reusable dep update action Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use workflow that takes multiple repo Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix mispelling Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove taskfile update Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * bump action to main branch Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename action Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove gh make var Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-12-10 17:14:11 +00:00
Alex Goodman	d38efb0b7f	chore(deps): update anchore dependencies (#3510) ... * integrate anchore deps Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * upgrade to released versions Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-12-09 15:51:16 -05:00
Alex Goodman	340b5e17f0	Add relationships for rust audit binary packages (#3500) ... * add rust audit binary pkg relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix linting Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-12-06 09:23:18 -05:00
Alex Goodman	b0bffef1a2	restore log on ui teardown (#3427) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-11-08 12:31:38 -05:00
Alex Goodman	e4e985b9b0	Create single license scanner for all catalogers (#3348) ... * add single license scanner instance Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename testing license scanner Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-10-21 16:17:12 +00:00
Alex Goodman	56dbb342ef	update to latest packageurl-go (#3347) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-10-18 14:47:02 -04:00
Alex Goodman	fbff87fc6d	shorten release docs (#3318) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-10-11 05:17:01 -04:00
Alex Goodman	13c6876906	Track supporting DPKG evidence (#3228) ... * add dpkg evidence support Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use path over filepath Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-10-04 11:07:29 -04:00
Alex Goodman	d7005d7d8c	add awaiting response management (#3272) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-25 08:56:21 -04:00
Alex Goodman	01de99b253	Add JVM cataloger (#3217) ... * add jvm cataloger Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * simplify version selection Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * CPEs from JVM cataloger should be declared Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * ensure package overlap is enabled for sensitive use cases Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * more permissive glob Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-23 17:21:38 -04:00
Alex Goodman	963ea594c8	Add compliance policy for empty name and version (#3257) ... * add policy for empty name and version Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * default stub version Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * modifying ids requires augmenting relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-20 12:50:47 -04:00
Alex Goodman	ba7bf6b85e	dont cleanup cache in forks (#3214) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-09 20:27:21 +00:00
Alex Goodman	b153b1d594	less verbose java logging when non-fatal issues arise (#3208) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-09 15:27:59 +00:00
Alex Goodman	0a3f513f92	Slim down docker cache size (#3190) ... * slim down docker cache size Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove old centos images Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * troubleshoot test failure Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix wget version ref Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor caching mechanisms Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add cache cleanup steps Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * simplify deleting cache Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix first clone issue Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tool dep Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-09 11:15:13 -04:00
Alex Goodman	e9a8c27be1	respond to authoratative CPEs from catalogers (#3166) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-08-27 10:26:35 -04:00
Alex Goodman	4ee6c179f8	set cataloger names within package cataloger task (#3165) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-08-27 09:23:43 -04:00
Alex Goodman	b6b5c8e308	fix ELF package correlations (#3151)	2024-08-26 08:44:39 -04:00
Alex Goodman	9573f557d1	better go mod detection from partial package builds (#3060) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-07-24 09:34:40 -04:00
Alex Goodman	573440b7cf	Infer the package type from ELF package notes (#3008) ... * fix ELF package types to be honored Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * prefer OS packages over binary packages when there are duplicates Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-07-02 16:07:08 -04:00
Alex Goodman	0956753409	Consider Author field for wordpress plugins when generating CPEs (#2946) ... * enhance wordpress vendor candidates for CPEs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * encode wordpress plugin target software Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-10 14:12:20 -04:00
Alex Goodman	f966bcfd03	trim whitespace from wordpress values (#2945) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-10 13:35:01 -04:00
Alex Goodman	c43f4fb416	add signature verification to install.sh (#2941) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-10 11:29:53 -04:00
Alex Goodman	db0c33481e	pin golang image (#2944) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-10 09:59:33 -04:00
Alex Goodman	254a562b4e	Add support for reading ELF package notes with section header (#2939) ... * add support for reading ELF package notes with section header Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add systemd elf package fields to json schema Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-07 14:38:54 -04:00
Alex Goodman	6e16396d18	remove dco workflow (#2936) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-06 14:29:55 +00:00
Alex Goodman	3472b48177	Add relationships for python poetry packages (#2906) ... * [wip] add initial poetry.lock relationship support Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * provide generic set for basic types Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * dependency resolver should allow for conditional deps Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests for poetry lock relationship additions Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update schema with python poetry dependency refs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * dep specification data structure should not be recursive in nature Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-04 20:00:05 +00:00
Alex Goodman	4bdbd1aa2a	remove unused test fixtures and empty dirs (#2924) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-04 15:22:49 -04:00
Alex Goodman	cb09dd9e19	match existing DCO GH check name ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-04 13:34:29 -04:00
Alex Goodman	2f39322f81	use dco tool during gh app outage (#2926) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-06-04 17:31:29 +00:00
Alex Goodman	f4a69e6d35	add relationships for go binary packages (#2912) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-30 11:37:17 -04:00
Alex Goodman	05e8ba948d	Add python wheel egg relationships (#2903) ... * add python package relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * nil for empty relationships collections Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * new json schema for optional python requiremenets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update format snapshots for python packages Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * decompose python parsers more + add tests around plural fields Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update JSON schema with python dep refs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-25 20:11:38 +00:00
Alex Goodman	048df17e3d	Use values in relationship To/From fields (#2871) ... * use pkg values in relationship fields Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add linter rule for using values in relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use new cmptest package for comparing relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * create cmptest for common cmp.Diff options in test Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * condense matches for relationship ruleguard Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove relationship type from rules Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * restore build tag Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * suggest using values Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * nil check pkgs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-14 13:48:33 -04:00
Alex Goodman	7ad7627d5d	add support for RPM DB package relationships (#2872) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-14 13:48:19 -04:00
Alex Goodman	4a18895545	Add abstraction for adding relationships from package cataloger results (#2853) ... * add internal dependency resolver Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor dependency relationship resolution to common object Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * replace cataloger decorator with generic processor Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor resolver to be a single function Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use common dependency specifier for debian Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use common dependency specifier for arch Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use common dependency specifier for alpine Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * allow for generic pkg and rel assertions in testpkg helper Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * do not allow for empty results Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * move stable deduplicate comment Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove relationship resolver type Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-14 13:27:36 +00:00
Alex Goodman	c200896a96	fix pruning binary packages when considering ELF packages (#2862) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-09 19:35:22 +00:00
Alex Goodman	ada8f009d2	Add relationships for ALPM packages (arch linux) (#2851) ... * add alpm relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * tweak reader linter rule to check for reader impl Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update JSON schema with alpm dependency information Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-07 13:29:46 -04:00
Alex Goodman	430c55a5b0	remove homebrew update workflow (#2846) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-06 15:38:12 -04:00
Alex Goodman	49e93646eb	Restore version file update on release (#2844) ... * restore version file update on release Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * allow for shallower fetch depth Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-06 15:14:43 -04:00
Alex Goodman	a56eff90d6	fix ui race for package count (#2839) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-06 11:45:52 -04:00
Alex Goodman	34ca9a8412	add security policy (#2835) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-05-02 14:45:17 +00:00
Alex Goodman	5b03788300	Fill in SPDX originator for all supported package types (#2822) ... * add failing test + beef up doc comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * cover more metadata types in spdx originator processing Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-04-29 16:33:00 -04:00
Alex Goodman	87cd6c8c48	update spdx license list to 3.23 (#2818) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-04-26 14:50:55 +00:00
Alex Goodman	0d5ebed74a	dont include labels for dependabot ecosystems (#2720) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-03-21 12:16:01 -04:00
Alex Goodman	47fc909700	Show binary exports, entrypoint, and imports (#2626) ... show binary exports, entrypoint, and imports for macho, elf, and pe formats Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-03-12 22:04:02 +00:00
Alex Goodman	6377465440	Mark duplicated rows in table output (#2679) ... * mark duplicated rows in table output Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix unit test Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-29 09:33:00 -05:00
Alex Goodman	06ff1a353a	enforce breaking change bump major version (#2635) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-28 15:48:20 -05:00
Alex Goodman	48e5672a87	Consider filesystem types for mount points when ignoring system paths (#2675) ... * consider fs types for mount points when ignoring system paths Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-28 15:37:17 -05:00
Alex Goodman	0c3b8ca4ed	rename binary classifier cataloger name (#2643) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-20 13:52:11 -05:00
Alex Goodman	434b6ad506	add cataloger selection example (#2646) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-20 11:44:42 -05:00
Alex Goodman	a1b23bd57d	add syft version used to SBOM tool info by default (#2647) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-14 16:57:31 -05:00
Alex Goodman	65cadda486	Survive indexing dead symlinks (#2645) ... * survive indexing branches that start with a bad symlink Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add log statement Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-14 21:06:22 +00:00
Alex Goodman	a909e3cec9	fix considering base path when ignoring known bad unix paths (#2644) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-14 15:57:38 -05:00
Alex Goodman	8e62ff9831	test for field conventions in json schema (#2642) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-14 11:11:53 -05:00
Alex Goodman	98b700e83c	rename binary cataloger to be more unique (#2633) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-14 11:01:55 -05:00
Alex Goodman	25ae7bf55f	fix getting union reader for sif images (#2631) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-13 15:12:31 +00:00
Alex Goodman	84576b93e1	Guess go main module version based on binary contents (#2608) ... * guess go main module version based on binary contents Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add configuration options for golang main module version heuristics Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix test setup for go bin cataloger Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix unit test Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix incorrect test assert ordering Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * handle error from seek Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-09 19:52:42 +00:00
Alex Goodman	7444a9f976	fix readme around templating options (#2612) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-09 13:44:41 -05:00
Alex Goodman	8683cba081	suppress executable parsing issues (#2614) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-09 17:13:58 +00:00
Alex Goodmanandmikey strauss	c61f59e7b7	Finalize Conan v2 support (#2587) ... * Add support for conan lock v2 (#2461) * conan lock 2.x requires field support Signed-off-by: houdini91 <mdstrauss91@gmail.com> * PR review, struct renaming Signed-off-by: houdini91 <mdstrauss91@gmail.com> --------- Signed-off-by: houdini91 <mdstrauss91@gmail.com> * decompose conanlock parser + add tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: houdini91 <mdstrauss91@gmail.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: mikey strauss <mdstrauss91@gmail.com>	2024-02-07 08:24:02 -05:00
Alex Goodman	fd3844853a	labeler should ignore latest version (#2588) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-02 18:08:15 -05:00
Alex Goodman	3023a5a7bc	Detect ELF security features (#2443) ... * add detection of ELF security features Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix linting Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update json schema with file executable data Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update expected fixure when no tty present Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * more detailed differ Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * use json differ Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove json schema addition Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * regenerate json schema Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix mimtype set ref Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-02 16:51:18 +00:00
Alex Goodman	3da679066e	Add API examples (#2517) ... * [wip] initial syft api examples Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * smooth over some rough edges in the API Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * embed example file Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * change name of builder function Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-02 16:26:44 +00:00
Alex Goodman	5a9b664fef	swap format readseekers for readers (#2581) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-01 14:18:13 -05:00
Alex Goodman	6107e5e2ad	translate maps to sequences in pkg metadata (#2553) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-02-01 11:58:10 -05:00
Alex Goodman	6ae5b2904d	re-add cosign signing checksums file (#2572) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-31 13:19:41 -05:00
Alex Goodman	377538e4a6	revert cosign signing of release checksums file (#2571) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-31 16:58:24 +00:00
Alex Goodman	bbe7fa180a	bump archiver and stereoscope (#2570) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-31 11:24:33 -05:00
Alex Goodman	aa702a72b4	Sign checksums file and add SBOMs on release (#2548) ... * with release signature of checksums file * attach SBOMs to the release * update acceptance tests --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-30 13:16:40 -05:00
Alex Goodman	f893933336	internalize format helpers (#2543) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-26 12:16:26 -05:00
Alex Goodman	b6cbf82389	Internalize CPE generation logic (#2541) ... * migrate CPE generation logic to internal Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove create function Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-26 12:16:05 -05:00
Alex Goodman	414fb2f8ad	fix migration of integration test (#2546) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-25 15:18:36 +00:00
Alex Goodman	a32b8d7fc6	Use the json schema as input for templating (#2542) ... * use the json schema as input for templating Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix cli tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-25 14:00:35 +00:00
Alex Goodman	11c0b1c234	Unexport types and functions cataloger packages (#2530) ... * unexport as many types and functions from cataloger packages as possible Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * capture type and signature information in convention test Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * check that we return pkg.Cataloger from constructors Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-24 16:12:46 -05:00
Alex Goodman	e0e1c4ba0a	Internalize majority of cmd package (#2533) ... * internalize majority of cmd package and migrate integration tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add internal api encoder Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * create internal representation of all formats Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * export capability to get default encoders Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * restore test fixtures Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-24 13:29:51 -05:00
Alex Goodman	bf3cd9ed3b	allow for RPM modularity to be optional (#2540) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-24 13:21:59 -05:00
Alex Goodman	0fe13888d5	swap format readseekers for readers (#2515) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-23 16:44:57 -05:00
Alex Goodman	cdad5e767a	plumb context through catalogers (#2528) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-22 15:54:51 -05:00
Alex Goodman	c5d15d1d6c	Remove CLI and API deprecations (#2508) ... * remove api deprecations Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove deprecated NAME cli flag Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-22 12:55:30 -05:00
Alex Goodman	03b7938fbf	Turn off the SBOM cataloger by default (#2527) ... * turn off the SBOM cataloger by default Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix integration tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-22 12:32:45 -05:00
Alex Goodman	4c77783461	Re-introduce linux kernel cataloger (#2526) ... * re-add linux kernel cataloger Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * ensure there is at least a directory or image tag on each task Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix CLI tests to account for kernel finding (+2) Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-22 16:31:41 +00:00
Alex Goodman	3eab5932e5	Deduplicate digests from user configuration (#2522) ... * deduplicate digests from user configuration Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * backout pointer reciever change on imageSource Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-19 21:51:55 +00:00
Alex Goodman	0bc31f4e27	update readme and help output to be accurate to syft api (#2520) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-19 16:18:47 -05:00
Alex Goodman	297ece6904	include binary cataloger configuration defaults (#2504) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-17 17:06:37 +00:00
3 people	313d9212b6	Add cataloger list command (#2366) ... * add cataloger list command Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * chore: tidy go mod Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> Co-authored-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>	2024-01-16 09:41:58 -05:00
Alex Goodman	fb2b54a6dc	condense binary cataloger config in JSON output (#2499)	2024-01-16 09:18:18 -05:00
Alex Goodman	b0ab75fd89	Replace core SBOM-creation API with builder pattern (#1383) ... * remove existing cataloging API Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add file cataloging config Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add package cataloging config Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add configs for cross-cutting concerns Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename CLI option configs to not require import aliases later Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update all nested structs for the Catalog struct Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update Catalog cli options - add new cataloger selection options (selection and default) - remove the excludeBinaryOverlapByOwnership - deprecate "catalogers" flag - add new javascript configuration Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * migrate relationship capabilities to separate internal package Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor golang cataloger to use configuration options when creating packages Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * create internal object to facilitate reading from and writing to an SBOM Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * create a command-like object (task) to facilitate partial SBOM creation Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add cataloger selection capability - be able to parse string expressions into a set of resolved actions against sets - be able to use expressions to select/add/remove tasks to/from the final set of tasks to run Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add package, file, and environment related tasks Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update existing file catalogers to use nested UI elements Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add CreateSBOMConfig that drives the SBOM creation process Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * capture SBOM creation info as a struct Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add CreateSBOM() function Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update docs with SBOM selection help + breaking changes Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix multiple override default inputs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix deprecation flag printing to stdout Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor cataloger selection description to separate object Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * keep expression errors and show specific suggestions only Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address additional review feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address more review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * addressed additional PR review feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix file selection references Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove guess language data generation option Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests for coordinatesForSelection Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename relationship attributes Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add descriptions to relationships config fields Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * improve documentation around configuration options Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add explicit errors around legacy config entries Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-12 17:39:13 -05:00
Alex Goodman	4c20a74d2f	Replace packages command with scan (#2446) ... * replace packages command with scan Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests for packages alias Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update comments with referenes to the packages command Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename valiadte args function Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-04 16:56:57 +00:00
Alex Goodman	f4dd36ca9d	fix syft-json test to use pretty json for snapshot testing (#2441) ... without this fix, capturing fixtures will result in hard-to-read failures in testing. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-12-15 17:23:21 -05:00
Alex Goodman	17c605822e	refactor pkg.Collection (#2439) ... - remove "catalog" references - add a separate add() function for readability Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-12-15 17:11:11 -05:00
Alex Goodman	4eace4b141	refactor javascript cataloger to use configuration options when creating packages (#2438) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-12-15 17:11:02 -05:00
Alex Goodman	05660da8d7	use single source of truth for archive options (#2437) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-12-15 17:07:55 -05:00
Alex Goodman	2f378d806e	fix file digest cataloger when passed coordinates (#2436) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-12-15 14:43:09 -05:00
Alex Goodman	4adfbeb5f0	Generalize UI events for cataloging tasks (#2369) ... * generalize ui events for cataloging tasks Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * moderate review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * incorporate review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename cataloger task progress object Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * migrate cataloger task fn to bus helper Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-30 16:25:50 +00:00
Alex Goodman	5c8dd4c3a7	fix file metadata cataloger to use resolved locations (#2370) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-29 09:42:34 -05:00
Alex Goodman	c379d21e9a	only remove breaking-change label when there are schema changes (#2371) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-28 17:59:04 -05:00
Alex Goodman	1cfc4c7387	Normalize cataloger configuration patterns (#2365) ... * normalize cataloger patterns Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove central reference for maven configurable Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-28 17:02:43 +00:00
Alex Goodman	4d0da703bf	normalize enums to lowercase with hyphens (#2363) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-28 11:02:20 -05:00
Alex Goodman	8ee209a5ae	use read lock in pkg collection (#2341) ... Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-21 13:48:25 -05:00