oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-12 06:07:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,629 Commits 63 Branches 272 Tags
fix-read-only-single-package-json
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman d25d3b1fb3 fix go module tidy checks for release pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-08-18 10:13:56 -04:00
Alex Goodman 32a54b94be add unit tests for distro identification based on "like" field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-08-12 14:09:22 -04:00
Alex Goodman 2093d2a1dc update slack channels 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-07-12 08:04:04 -04:00
Alex Goodman 6e70d8af98 respond to pull_request events for internal PRs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-16 12:48:50 -04:00
Alex Goodman 6a398f9771 update zip util tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman bf1bf057ab add and update zip util tests with ZipReadCloser coverage 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman 36b44b1d8e add zip-byte-offset support to zip utils 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman 8f85c8affc update springboot fixture to create jar with a prepended shell script 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman 5ea1d78464 rename helper fn to toELVersion 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 09:38:15 -04:00
Alex Goodman afbd8f8ea0 remove variadic functionality from intRef() test helper 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-02 17:13:31 -04:00
Alex Goodman 2f81a2548c allow for RPM package epoch to be optionally provided in the version string 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-02 15:28:12 -04:00
Alex Goodman 1201ad6df0 add all package metadata types slice for use in downstream testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-24 10:20:14 -04:00
Alex Goodman a6c798f438 close all ReadClosers explicitly retrieved from resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-12 17:21:30 -04:00
Alex Goodman 5e1e2628cf align check names to release quality gate 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 16:20:21 -04:00
Alex Goodman 18af21d2a5 add jenkins filter for known bad CPE field combinations 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 15:51:59 -04:00
Alex Goodman 170681943c remove type assertion check in packageIdentitiesMatch fn 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 14:00:31 -04:00
Alex Goodman 46043510ae update parent pom persistence with regard to shaded jars 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 14:00:31 -04:00
Alex Goodman 24a2f9344b add additional string.contains case for jenkins package by group id 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 13:20:12 -04:00
Alex Goodman 9c7906364d add go mod tidy to bootstrap make target 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-21 08:45:51 -04:00
Alex Goodman 136e439dc2 use the standard file.Digest for apk checksums 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-19 16:42:17 -04:00
Alex Goodman 6edbae08e5 update json schema with extra rpm fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 10:25:47 -04:00
Alex Goodman 0c7706f254 add extra RPM file record fields (user, group, flags) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 10:25:46 -04:00
Alex Goodman 0c100c4037 change mac acceptance test image.tar path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 09:57:13 -04:00
Alex Goodman 8b315367e8 fix validations badge 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 08:59:07 -04:00
Alex Goodman b771d7bfd3 bump go.mod minimum required go version 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 08:53:03 -04:00
Alex Goodman 484730435b safely join paths derived from archive headers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-15 08:55:29 -04:00
Alex Goodman 9fb79bfa2e dont append registry auth if potentially empty 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-14 10:28:21 -04:00
Alex Goodman 2ff3f58730 pull in stereoscope manifest + repo digests on registry source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 18:29:12 -04:00
Alex Goodman cd542bab5b ensure file content cataloger is using the proper scope 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:37:38 -04:00
Alex Goodman b5d4b2f7b2 simplify test assertions + rename file contents cataloger size limiter var 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:34:56 -04:00
Alex Goodman 51b13f8221 rename Contents to FileContents in app config and documentation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:34:54 -04:00
Alex Goodman 44915b435f add documentation for the file contents cataloger config options 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:33:49 -04:00
Alex Goodman d451a5ad30 update the json schema and tests with file contents section 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:33:20 -04:00
Alex Goodman c1551a03c5 add file contents cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:30:57 -04:00
Alex Goodman 28c407572c simplify test assertions for classification cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:11:43 -04:00
Alex Goodman f9d49885ae simplify MatchNamedCaptureGroups implementation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:11:43 -04:00
Alex Goodman f438ee974c add documentation for the file classifier cataloger config options 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:11:43 -04:00
Alex Goodman 309cbf5264 add missing file classification test fixtures + gitignore adjustment 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:11:43 -04:00
Alex Goodman 46fffe5c6f update json schema + presenter snapshots with file classification section 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:11:40 -04:00
Alex Goodman 080057b217 add file classifications to power-user json presenter 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:08:50 -04:00
Alex Goodman 870a676a5d wire up file classifier to power-user cmd 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:08:50 -04:00
Alex Goodman 46bfb68113 add file classifier + tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:08:50 -04:00
Alex Goodman 5743e32e02 add tests around MatchNamedCaptureGroups + rename 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:08:50 -04:00
Alex Goodman 0511972dfa clarify default collection value + fix appending conffiles location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-09 11:41:44 -04:00
Alex Goodman c56690fc52 fix DpkgMetadata.Files test to ensure it is never nil 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-09 08:46:59 -04:00
Alex Goodman ba3407a767 add dpkg conffile update to json schema + json test snapshots 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-09 08:37:28 -04:00
Alex Goodman 269832ce8d add conffile listing to dpkg metadata + normalize digests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-08 14:21:23 -04:00
Alex Goodman 7ec0e3785f bump stereoscope ; pull in fix to ensure credentials are not HTML encoded 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-05 14:20:49 -04:00
Alex Goodman cd925e5664 account for repoDigests data in power-user json testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-30 08:46:42 -04:00
Alex Goodman db35186c7d allow file metadata digests to be optional + add link destination 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-29 12:07:42 -04:00
Alex Goodman 8551168702 capitalize file type strings 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-29 12:07:41 -04:00
Alex Goodman 8658abc8c4 ignore failures on benchmark sticky comment 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-29 11:59:49 -04:00
Alex Goodman 9abdb174d5 ensure pkg.Catalog path index deduplicates real vs virtual paths 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-26 13:27:24 -04:00
Alex Goodman 2a9b1b2680 move docker login after keychain creation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-26 10:41:44 -04:00
Alex Goodman cfec812804 enable release environment (manual approval for releases) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 12:01:20 -04:00
Alex Goodman ac4b653721 fix sticky benchmark comment on PRs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 11:53:05 -04:00
Alex Goodman 51bf9f9e05 manually login to docker via cli during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 17:57:41 -04:00
Alex Goodman 1b7c755536 add file-type mix as golden image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 16:50:57 -04:00
Alex Goodman 8854d83934 cache mac acceptance image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 15:03:25 -04:00
Alex Goodman 3ef30f99be pull in stereoscope cache fix + add test cache makefile target helpers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 14:31:59 -04:00
Alex Goodman 12f419111e remove docker layer cache from validation pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 13:04:13 -04:00
Alex Goodman 68c4bf8bbe update documentation to reflect root vs packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 13:00:25 -04:00
Alex Goodman 929b78efbf remove prealloc nolint rule in catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 12:56:00 -04:00
Alex Goodman d420368ba9 add tests around new file metadata cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 11:00:59 -04:00
Alex Goodman 40199096e9 stabilize json file metadata presenter order 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 11:00:36 -04:00
Alex Goodman 0e9c1c1d86 arrange power-user tasks ahead of parsing the source image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:29:38 -04:00
Alex Goodman 77e4c89a5a bump coverage threshold + use ubuntu for snapshot builds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:28:57 -04:00
Alex Goodman e3b1522394 upgrade goreleaser + constrain pipeline tool cache 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 06:58:30 -04:00
Alex Goodman 46636ccb3c simplify command alias logic + remove deprecation warning for root command 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 15:25:04 -04:00
Alex Goodman 36e4af1953 adjust jsom schema version + adopt java pom properies test fixtures 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 11:27:01 -04:00
Alex Goodman abca2c5f0b remove token usage from benchmark sticky comment action 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman f180d1c537 improve config parsing + fix command deprecation warning 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman b1b57f6ba6 remove benchmark test event filter in validations pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 4bde850f04 add file-metadata config options to docs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 1d87f07da1 update pipeline with new levels of testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:07 -04:00
Alex Goodman cf516add95 add cli testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 68d698e9f2 remove inline-compare testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman efcd8a8b9a update integration and acceptance tests for new resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman ae32942a18 update import to require patching image metadata source field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 18dd2950ac update event handlers relative to new command structure 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 6a960ec1f3 update json schema with optional poweruser data shape 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:16 -04:00
Alex Goodman 97f0f83544 add poweruser command and alias root to packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:53 -04:00
Alex Goodman a6cba5d9db remove multi* content fetching from resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:51 -04:00
Alex Goodman f22d7d23c1 add poweruser concerns to the application config 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:52:37 -04:00
Alex Goodman ff4ed40d50 migrate syft/presenter to internal/presenter 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:52:33 -04:00
Alex Goodman 4666ca8469 migrate syft/cataloger to syft/pkg/cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:46:51 -04:00
Alex Goodman 48a1d4711a update presenter tests with json schema 1.0.3 examples + rename rust metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 09:44:55 -04:00
Alex Goodman e9e9fe6d9c prefer warnings over errors when parsing java manifests and pom properties 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-20 08:08:46 -04:00
Alex Goodman 2f8a568d4f check for multiple delimiters when parsing pom properties 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-20 08:00:08 -04:00
Alex Goodman 83778677c1 run snapshot build on ubuntu 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-19 08:42:27 -04:00
Alex Goodman 9f57e17887 add labels to the docker image + pin the docker pipeline install version 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-18 16:28:03 -04:00
Alex Goodman e9105c180a add dockerfile + docker build step 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 16:45:20 -05:00
Alex Goodman c7b26c55ac add docker to mac instance 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 14:01:00 -05:00
Alex Goodman 1aa8a10f6b ignore ownership for shared copyright resources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-02-26 12:30:24 -05:00
Alex Goodman bb1facbf81 ensure java parent pkg ref isnt nil when looking for parent matches 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-27 10:12:41 -05:00
Alex Goodman 6a49717314 add VirtualPath to source.Location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 21:16:42 -05:00
Alex Goodman 06641cfda2 prefer real paths for glob results 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 18:48:28 -05:00
Alex Goodman a5537943fa keep original dpkg md5sum location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 14:30:05 -05:00
Alex Goodman fc8b431ea6 duplicate reference readers for duplicate location resolutions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 13:54:39 -05:00
Alex Goodman 33c27c4f3d add HasPath() to Resolver interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 19:39:49 -05:00