oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-12 06:07:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
3,581 Commits 63 Branches 272 Tags
add-file-based-toolchain-detector
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alfredo Deza 360eb74cc7 Merge pull request #410 from anchore/readme-grype 
update readme to point to grype
 2021-05-06 15:09:09 -04:00
Alfredo Deza 92c20c885e update readme to point to grype 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-05-06 14:03:38 -04:00
Alfredo Deza 284b0c20b0 Merge pull request #389 from anchore/issue-381 
Support msrc types
 2021-04-29 14:59:04 -04:00
Alfredo Deza 4cce32f5c9 tests: remove KbPkg from defined pkgs since it isn't parsed 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-04-23 10:17:16 -04:00
Alfredo Deza 26007db650 manually add msrc as an observed distro 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-04-23 10:17:16 -04:00
Alfredo Deza 5af2687022 support msrc types 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-04-23 10:17:16 -04:00
Alfredo Deza c5e3b631ac Merge pull request #328 from anchore/issue-327 
Be lenient on invalid fields in PKG-INFO
 2021-02-17 08:14:18 -05:00
Alfredo Deza 05b9d35ee6 python: log a warning when invalid fields in PKG-INFO are found 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-02-16 15:27:08 -05:00
Alfredo Deza 555376e250 python: test leniency with invalid fields in PKG-INFO 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-02-16 14:20:07 -05:00
Alfredo Deza 8d838b18a8 Merge pull request #320 from anchore/pin-cache-action 
Pin actions/cache to v2.1.3
 2021-02-05 11:26:40 -05:00
Alfredo Deza a350e5889b Merge pull request #319 from anchore/bust-ci-cache 
make: add a bootstrap cache buster
 2021-02-05 10:47:54 -05:00
Alfredo Deza e4393e7a3d make: add a bootstrap cache buster 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-02-05 10:17:09 -05:00
Alfredo Deza 8dbb095fc6 Merge pull request #301 from anchore/issue-300 
catalogers: Python runtime is not a Python package itself, ignore it
 2020-12-22 15:18:56 -05:00
Alfredo Deza d0d7e849c9 catalogers: Python runtime is not a Python package itself, ignore it 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-12-22 10:59:43 -05:00
Alfredo Deza 29d464c38a Merge pull request #258 from anchore/distro-like 
Report the ID_LIKE value in the JSON presenter
 2020-11-11 11:11:13 -05:00
Alfredo Deza 6ae3b47959 tests: update all tests to pass the IDLike value 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-10 12:40:50 -05:00
Alfredo Deza 10b55311df presenter: provide ID_LIKE information in json 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-10 12:40:17 -05:00
Alfredo Deza 64d5554144 include ID_LIKE in distro detection 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-10 12:37:35 -05:00
Alfredo Deza b3098f3423 Merge pull request #250 from anchore/issue-169 
Add distro information to JSON presenter
 2020-11-09 14:18:48 -05:00
Alfredo Deza c2cf4eb7b0 update tests for the new distro information 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-09 12:16:00 -05:00
Alfredo Deza 1e79986188 json: update the document to include distro information 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-09 12:16:00 -05:00
Alfredo Deza 4ff330e396 Merge pull request #208 from anchore/non-prerelase 
docs: update the readme to remove pre-release note
 2020-10-08 15:34:06 -04:00
Alfredo Deza 949bf7bc91 docs: update the readme to remove pre-release note 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-10-08 15:30:50 -04:00
Alfredo Deza ae1d99b5a1 Merge pull request #150 from anchore/issue-59 
Add a `setup.py` cataloger
 2020-08-17 17:23:13 -04:00
Alfredo Deza 861806f1dd test: add setup.py integration cases 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 16:00:49 -04:00
Alfredo Deza 9c4024d6fa cataloger: add setup.py support for Python 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 16:00:49 -04:00
Alfredo Deza 27c207bbca pkg: add a new type to identify setup.py packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 10:12:27 -04:00
Alfredo Deza 691e26d3a3 Merge pull request #142 from anchore/args-fix 
cmd: allow no args passed, don't error
 2020-08-11 08:29:28 -04:00
Alfredo Deza 3bcae045cd cmd: allow no args passed, don't error 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-11 08:01:19 -04:00
Alfredo Deza 21aa32c599 Merge pull request #134 from anchore/issue-69 
docs: add contributing guidelines
 2020-08-10 14:46:54 -04:00
Alfredo Deza 2adbe75002 docs: add contributing guidelines 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-10 14:15:07 -04:00
Alfredo Deza c67e17a2cf Merge pull request #114 from anchore/issue-111 
Add another option to fall back on name detection
 2020-07-31 07:50:49 -04:00
Alfredo Deza 04a1c91881 java: fallback to manifest.ImplTitle when there is no name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-31 07:35:43 -04:00
Alfredo Deza bb81c0b9fe tests: java cataloger tests for selecting name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-31 07:35:43 -04:00
Alfredo Deza bc693829a6 Merge pull request #110 from anchore/issue-8 
adds the yarn.lock cataloger
 2020-07-29 11:20:06 -04:00
Alfredo Deza caecce9b41 tests: update integration tests to include yarn packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:35:45 -04:00
Alfredo Deza 713f660528 cataloger: update controller to use javascript (vs. npm) 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:20:11 -04:00
Alfredo Deza d79cecea3e tests: verify new yarn.lock parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:20:11 -04:00
Alfredo Deza 57904743aa pkg: define the Yarn package type 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo Deza 67fb1326e0 cataloger: implement the yarn.lock parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo Deza 146b4bd01f cataloger: rename npm to javascript to accommodate yarn parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo DezaandAlex Goodman f8a5c56191 Fix acceptance tests (#106) 
* test: allow no metadata in packages

Signed-off-by: Alfredo Deza <adeza@anchore.com>

* test: update centos json fixture

Signed-off-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-07-25 06:39:44 -04:00
Alfredo Deza 578952986f Merge pull request #103 from anchore/issue-81 
scope: do not create scope if path is invalid
 2020-07-24 15:33:30 -04:00
Alfredo Deza e1ce040ead scope: do not create scope if path is invalid 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-24 15:25:14 -04:00
Alfredo Deza 3cb7c43dbc Merge pull request #96 from anchore/issue-7 
Add support for analyzing package-lock.json files
 2020-07-23 09:54:39 -04:00
Alfredo Deza f1c14d97f6 integration: validate package-lock.json parsing 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 09:51:05 -04:00
Alfredo Deza 9f314eb493 cataloger: support npm packages from package-lock.json files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 09:51:05 -04:00
Alfredo Deza fb4b83cf3e cataloger: define Javascript (npm) package type 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 09:51:01 -04:00
Alfredo Deza 265516682f Merge pull request #92 from anchore/issue-58 
catalog Python packages from a requirements.txt file
 2020-07-21 16:00:20 -04:00
Alfredo Deza 74d87254ed integration: validate requirements.txt is picked up and parsed 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:49:19 -04:00
Alfredo Deza 50eae46d37 type: add PythonPkg types for requirements-based packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:49:19 -04:00
Alfredo Deza f8a2b7a626 tests: verify requirements.txt captures versions 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:49:19 -04:00
Alfredo Deza 83056a4b6f cataloger: add a requirements.txt parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:38:30 -04:00
Alfredo Deza 8747b68b86 cataloger: add a glob path for parsing requirements.txt 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 14:37:06 -04:00
Alfredo Deza 380cd39514 Merge pull request #91 from anchore/issue-75 
Recurse when creating a directory catalog
 2020-07-21 11:26:03 -04:00
Alfredo Deza cea38fcba3 cataloger: use ** for glob patterns 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:19:42 -04:00
Alfredo Deza 03bbcfa08d cataloger: add ability to recurse with doublestar 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:10:02 -04:00
Alfredo Deza 942cd6eb18 dependencies: add doublestar for recursive globbing support 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:10:02 -04:00
Alfredo Deza f02b8cc7bc tests: use the catalog directly instead of via the presenters 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:10:02 -04:00
Alfredo Deza fe15c0a08b tests: remove dir_presenters, no longer needed 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-20 15:55:52 -04:00
Alfredo Deza b5a353349f Merge pull request #87 from anchore/unkown-distro 
Add a helper function/constructor for an UnkownDistro
 2020-07-17 13:54:14 -04:00
Alfredo Deza b734623ef0 make: bump test coverage 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza 0534a68ec6 tests for new Identify distro func 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza e2b71184aa when no distros are matched, return an UnkownDistro 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza f51cae2043 distro: add new constructor for getting UnkownDistros 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza f03f7b32e9 Merge pull request #85 from anchore/issue-84 
Remove carriage returns from distro files
 2020-07-17 08:31:22 -04:00
Alfredo Deza fb6bc116e0 tests: verify carriage returns are parsed in distro files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 17:20:30 -04:00
Alfredo Deza 5edcae13b3 distro: remove unwanted chars from os distro files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 17:19:57 -04:00
Alfredo Deza aa0693bdc0 Merge pull request #83 from anchore/issue-82 
Do not join paths when returning multiple file contents by ref
 2020-07-16 14:36:30 -04:00
Alfredo Deza a05d58686e resolvers: do not join paths, it is assumed they are already joined 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 13:14:03 -04:00
Alfredo Deza d82a0872c9 tests: verify MultipleFileContentsByRef gets contents from the right path 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 13:14:03 -04:00
Alfredo Deza 07b2a1da87 Merge pull request #76 from anchore/issue-73 
Better abstraction for img/dir decision fork
 2020-07-15 10:49:15 -04:00
Alfredo Deza b457d4ebd2 tests: drop coverage requirement to 69% for now 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza d982ad6345 lib: implement a NewScope to produce scopes from inputs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza b2c8685437 integration: use new constructor params for scope from images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza f418c99a3b remove old text support files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza 45b5fa82c8 presenters: abstract into text only 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza e7518ad998 tests: move img-based tests and fixtures 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 09:59:40 -04:00
Alfredo Deza a6e1866cdb cmd: do not default for images, handle it specifically 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 09:59:40 -04:00
Alfredo Deza 2f626bf9fd directory resolver should join path and target directory for retrieving contents 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 09:59:40 -04:00
Alfredo Deza 429c28720c integration: update tests to use scope instead of img directly 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza 69b01caba7 update scope tests to use new generic scope 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza c56b82e529 resolvers: add a directory resolver 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza 5cee2668e3 resolvers: satisfy interface with multiple file contents by ref 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza 6e9171e8a6 presenter: use new scoped source 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 4b69758f2c scope: create a new generic Resolver interface 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza b35a412467 scope: use a generic scope struct instead of specific to images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 145bb95a2d lib: use scope instead of requiring images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza d22c1d0838 distro: identify uses the scope resolvers now, not images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 923d220a90 controller: use new scope.Resolver interface 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 6cbf6d3409 cmd: do not pass img around, use scope 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 1d711ee06f Merge pull request #71 from anchore/protocol-cleanup 
cmd: replace Printf with a logging statement
 2020-07-07 10:42:26 -04:00
Alfredo Deza 74f339e043 cmd: replace Printf with a logging statement 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-07 10:40:55 -04:00
Alfredo Deza fe338760b0 Merge pull request #68 from anchore/issue-31-1 
Add support for file-based contents
 2020-07-02 17:29:45 -04:00
Alfredo Deza 9baae90c0b integration: add tests for dir-based presenters 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 3548c7b132 tests for scope.go 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 3eedb86a1f tests for protocol.go 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza c35108b00d tests: reorganize text img files to match new layout 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza f49ca8107a tests: add verification for dirs and imgs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 293b7b6ff9 tests: update integration tests to use new cataloger 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00