Keith Zantow
a8ceb73220
chore: continue building snapshots for acceptance tests
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-10-13 15:38:46 -04:00
Keith Zantow
2fc2588030
chore: workaround goreleaser single-target running multiple hooks bug
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-10-13 11:37:47 -04:00
Keith Zantow
ecfba80ca7
chore: snapshot cmd
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-10-13 10:32:35 -04:00
Keith Zantow
bd9b39d370
Merge remote-tracking branch 'origin/main' into chore/build-syft-for-cli-tests
2023-10-13 09:18:40 -04:00
Keith Zantow
6c3755fbbe
chore: attempt to avoid full snapshot build
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-10-13 09:13:01 -04:00
anchore-actions-token-generator[bot] and spiffcs
44e5480238
chore(deps): update bootstrap tools to latest versions ( #2178 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-09-27 15:05:15 -04:00
anchore-actions-token-generator[bot] and spiffcs
8f57d22f63
chore(deps): update bootstrap tools to latest versions ( #2171 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-09-26 11:14:25 -04:00
Alex Goodman
40899adb87
use annotated tags, update chronicle, fix cache keys ( #2154 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-09-20 10:11:44 -04:00
William Murphy
9de4129638
chore: enforce race detector ( #2122 )
...
Previously, there were some data races in syft. Right now, none are
detected, so check for data races on the overall command, and on unit
tests. (Checking for races on integration tests triples the time needed
for those tests, from ~1 minute to ~3 minutes on my workstation, so that
was not done at this time.)
Signed-off-by: Will Murphy <will.murphy@anchore.com >
2023-09-12 13:09:18 -04:00
anchore-actions-token-generator[bot] and spiffcs
46e4ac1474
chore(deps): update bootstrap tools to latest versions ( #2086 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-09-07 09:30:44 -04:00
Keith Zantow
dd09e0362e
chore: update quill to the latest version ( #2065 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-08-25 20:45:04 +00:00
anchore-actions-token-generator[bot] and spiffcs
ee656fe088
chore(deps): update bootstrap tools to latest versions ( #2048 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-22 08:48:42 -04:00
anchore-actions-token-generator[bot] and spiffcs
c7fe58683d
chore(deps): update bootstrap tools to latest versions ( #2022 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-14 11:36:15 -04:00
anchore-actions-token-generator[bot] and spiffcs
a90cff1cd2
chore(deps): update bootstrap tools to latest versions ( #2012 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-10 13:20:09 -04:00
anchore-actions-token-generator[bot] and spiffcs
c2b4231cc3
chore(deps): update bootstrap tools to latest versions ( #1991 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-03 10:53:29 -04:00
Dan Luhring and Alex Goodman
99d172f0d1
Introduce indexed embedded CPE dictionary ( #1897 )
...
* Introduce indexed embedded CPE dictionary
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
* Don't generate cpe-index on make snapshot
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
* Add unit tests for individual addEntry funcs
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
* migrate CPE index build to go generate and add periodic workflow
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add test to ensure generated cpe index is wired up to function that uses it
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-07-21 13:54:19 +00:00
Christopher Angelo Phillips
204b790012
docs: update docs with new docker specific instructions ( #1941 )
...
* docs: update docs with new docker specific instructions
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Former-commit-id: c67c76e84df84e3e24aa307637d884ca8b7e3eea
2023-07-17 18:19:21 +00:00
anchore-actions-token-generator[bot] and spiffcs
d5d95da3b6
chore(deps): update bootstrap tools to latest versions ( #1922 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-07-10 11:03:09 -04:00
anchore-actions-token-generator[bot] and spiffcs
6280146c81
chore(deps): update bootstrap tools to latest versions ( #1908 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-07-05 11:06:22 -04:00
Alex Goodman
4da3be864f
Refactor source API ( #1846 )
...
* refactor source API and syft json source block
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update source detection and format test utils
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* generate list of all source metadata types
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* extract base and root normalization into helper functions
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* preserve syftjson model package name import ref
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* alias should not be a pointer
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-06-30 14:19:16 +00:00
anchore-actions-token-generator[bot] and spiffcs
608dbded06
chore(deps): update bootstrap tools to latest versions ( #1905 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-06-29 14:10:30 -04:00
anchore-actions-token-generator[bot] and spiffcs
e5e97b5c4e
chore(deps): update bootstrap tools to latest versions ( #1902 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-06-28 12:04:39 -04:00
anchore-actions-token-generator[bot] and spiffcs
38b47e484c
chore(deps): update bootstrap tools to latest versions ( #1894 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-06-26 13:58:17 -04:00
anchore-actions-token-generator[bot]
269006bf04
chore(deps): update bootstrap tools to latest versions ( #1880 )
2023-06-20 10:22:18 -04:00
anchore-actions-token-generator[bot] and Christopher Phillips
7d1b292ad0
chore(deps): update bootstrap tools to latest versions ( #1857 )
...
* chore(deps): update bootstrap tools to latest versions
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-06-05 18:56:04 +00:00
Alex Goodman
74013d7da7
Add test to ensure package metadata is represented in the JSON schema ( #1841 )
...
* [wip] try to reflect metadata types... probably wont work
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* refactor to add unit test to ensure there is coverage in the schema
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* [wip] generate metadata container
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add generation of metadata container struct for JSON schema generation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* fix linting
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update linter script to account for code generation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-05-25 13:26:56 -04:00
Bob Callaway
0580328ad9
update cosign to v2 release (different go module) ( #1805 )
...
Signed-off-by: Bob Callaway <bcallaway@google.com >
2023-05-10 11:12:37 -04:00
anchore-actions-token-generator[bot]
8a3cbf2fdd
chore(deps): update bootstrap tools to latest versions ( #1807 )
2023-05-10 08:25:36 -04:00
anchore-actions-token-generator[bot]
3f19aa589c
chore(deps): update bootstrap tools to latest versions ( #1792 )
2023-05-07 13:23:41 -04:00
anchore-actions-token-generator[bot]
1860bab24b
chore(deps): update bootstrap tools to latest versions ( #1786 )
2023-05-05 14:57:02 -04:00
Christopher Angelo Phillips
55a90a2ee0
fix: update cache.fingerprint file to java-builds dir ( #1748 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-04-19 12:17:07 -04:00
anchore-actions-token-generator[bot] and spiffcs
52b54bbad9
chore(deps): update bootstrap tools to latest versions ( #1744 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-04-18 10:25:02 -04:00
95176d7e0c
chore(deps): update bootstrap tools to latest versions ( #1740 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-04-17 12:06:35 -04:00
Alex Goodman
5a7bab972c
Fix kernel cataloger test fixtures ( #1742 )
...
* pin kernel and modules version for kernel fixtures
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* cache kernel fixtures in CI
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update CLI test image with pinned kernel deps
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update the kernel version found in integration tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-04-17 11:44:46 -04:00
Alex Goodman
05715489c4
add format make target ( #1733 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-04-12 14:36:38 -04:00
anchore-actions-token-generator[bot] and spiffcs
dd30c99bc2
chore(deps): update bootstrap tools to latest versions ( #1728 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-04-11 10:13:14 -04:00
anchore-actions-token-generator[bot] and spiffcs
63bbd1e3ed
chore(deps): update bootstrap tools to latest versions ( #1697 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-03-27 09:17:34 -04:00
anchore-actions-token-generator[bot]
829a71cd92
chore(deps): update bootstrap tools to latest versions ( #1686 )
2023-03-22 09:01:24 -04:00
anchore-actions-token-generator[bot]
434aa7fd46
chore: Update syft bootstrap tools to latest versions. ( #1682 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-03-20 13:20:48 -04:00
Keith Zantow
cc0a376aba
fix: more python matching support ( #1667 )
2023-03-13 13:26:43 -04:00
anchore-actions-token-generator[bot] and spiffcs
b379dd9f27
Update syft bootstrap tools to latest versions. ( #1666 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-03-13 10:40:13 -04:00
anchore-actions-token-generator[bot]
41cbbe09b2
Update syft bootstrap tools to latest versions. ( #1658 )
2023-03-07 12:54:32 -05:00
Keith Zantow
7714bc0521
fix: improved Python binary detection ( #1648 )
2023-03-07 10:52:29 -05:00
Christopher Angelo Phillips
98e737fc27
chore: update deprecated release flag ( #1629 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-02-27 15:57:56 -05:00
anchore-actions-token-generator[bot]
d339ffdcb5
chore: update syft bootstrap tools to latest versions. ( #1593 )
2023-02-22 10:16:14 -05:00
Alex Goodman
88c81d33ed
switch from trigger-release target to release target ( #1560 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-02-09 16:35:11 +00:00
anchore-actions-token-generator[bot]
550e2fc7c3
Update syft bootstrap tools to latest versions. ( #1549 )
2023-02-09 10:10:35 -05:00
Alex Goodman
8847ba5d0b
Add release trigger ( #1501 )
...
* add release trigger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* deduplicate version and changelog calls + add gh checks
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add more chronicle verbosity, but not when triggering releases
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* bump chronicle version to get --version-file feature
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update bootstrap tool workflow to include glow
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add version prefix check on tags in release quality gate
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-02-08 11:38:27 -05:00
deb7052f41
Update syft bootstrap tools to latest versions. ( #1541 )
...
* Update syft bootstrap tools to latest versions.
Signed-off-by: GitHub <noreply@github.com >
* fix: remove ineff assign
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: GitHub <noreply@github.com >
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-02-07 15:41:14 +00:00
anchore-actions-token-generator[bot] and spiffcs
b6a496f18c
Update syft bootstrap tools to latest versions. ( #1537 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-02-03 12:35:33 -05:00
