oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-17 16:33:21 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,837 Commits 60 Branches 243 Tags
Commit Graph

1837 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman
8d9f1a8c43 skip tests that are missing full binaries 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 14:34:37 -05:00
Alex Goodman
76619b25b6 add rust darwin snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 13:23:54 -05:00
Alex Goodman
a8b0f239c2 Merge remote-tracking branch 'origin/main' into least-permissive-snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 13:09:51 -05:00
Alex Goodman
8006e9d8a0 adjust gitignore to be more permissive to snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 13:02:26 -05:00
Alex Goodman
d849719605 add remaining binary cataloger patterns and snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 12:48:50 -05:00
Christopher Angelo Phillips
2a04e06cbc
chore: update binary to -x (#2456) 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-22 09:50:32 -05:00
Laurent Goderre
3a6b6562d1
Add more functionality to the ErLang parser (#2390) 
* ERLang parser support for empty lists
* ERLang add support for single quote strings
* ERLang parser support for comments
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-22 09:45:20 -05:00
Laurent Goderre
63e7a004cb
Added OpenSSL binary matcher (#2416) 
* Added OpenSSL binary matcher

Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>

* chore: strip binary to smaller detection

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

---------

Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-22 09:37:09 -05:00
anchore-actions-token-generator[bot]
04e8c96822
chore(deps): update stereoscope to 590920dabc5479216e755983d41367b6be3544f3 (#2452) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
 2023-12-22 09:36:13 -05:00
anchore-actions-token-generator[bot]
1bc4179193
chore(deps): update tools to latest versions (#2451) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
 2023-12-22 09:30:00 -05:00
dependabot[bot]
51a1bad159
chore(deps): bump github/codeql-action from 3.22.11 to 3.22.12 (#2455) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.22.11 to 3.22.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b374143c11...012739e508)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-22 09:01:16 -05:00
Alex Goodman
e516eb4967 add manager for binary cataloger test fixtures 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-21 18:06:14 -05:00
Christopher Angelo Phillips
3cffa0b7fd
chore: remove execute from test fixtures (#2450) 
* chore: remove execute from test fixtures

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

* chore: add back ignored file

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

---------

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
v0.99.0 		2023-12-20 22:34:29 +00:00
anchore-actions-token-generator[bot]
da03e981c3
chore(deps): update tools to latest versions (#2447) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
 2023-12-20 10:59:01 -05:00
William Murphy
4aa2d8c0af
fix: don't panic when hackage missing in haskell stack yaml lock (#2448) 
Fixes a bug where previously the haskell cataloger would panic
when parsing a stack.yaml.lock file that had an entry with an empty
hackage string.

Signed-off-by: houdini91 <mdstrauss91@gmail.com>
Signed-off-by: Will Murphy <will.murphy@anchore.com>
Co-authored-by: houdini91 <mdstrauss91@gmail.com>
 2023-12-20 10:57:06 -05:00
Alex Goodman
bab4142881 [wip] download bin helpers 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-19 16:14:20 -05:00
Christopher Phillips
6d89a2bfcc
test: final version of snippet script 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 13:37:38 -05:00
Christopher Phillips
48cfc60631
test: update tests to new pattern 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 13:25:57 -05:00
Christopher Phillips
7b86f23883
test: add flatter haproxy example 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:36:50 -05:00
Christopher Phillips
fd26fc124f
test: move haproxy new new snippet 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:30:43 -05:00
Christopher Phillips
b92ccf8dc7
test: update go classifier to new snippet workflow 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:21:16 -05:00
Christopher Phillips
0b4f9ad9bb
test: update script to size 600 bytes 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:16:44 -05:00
Christopher Phillips
d1f3d1197b
test: migrate bash fixture to new snippet workflow 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:59:17 -05:00
Christopher Phillips
5e555309f4
test: rename unversioned java to versioned folders 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:50:09 -05:00
Christopher Phillips
b945968058
test: move openjdk lts to versioned folder 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:47:22 -05:00
Christopher Phillips
d28932588e
test: update openjdk to named version 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:46:25 -05:00
Christopher Phillips
a782fd2cf7
test: update memcached to new generator pattern 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:39:03 -05:00
Christopher Phillips
9099b986e7
test: update erlang test to new generated format 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:35:17 -05:00
Christopher Phillips
2bf99715af
chore: update scripts and add new dir output for snippets 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:16:17 -05:00
Alex Goodman
de87abf029 add helper script to capture binary snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-18 17:03:57 -05:00
Christopher Phillips
f194de3060
chore: add lint check for large files 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-18 16:44:12 -05:00
Christopher Phillips
59eef3764f
test: strip fixtures of any execution permissions 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-18 15:55:35 -05:00
Laurent Goderre
a635d66657
Add binary classifier for the ERLang interpretter (#2417) 
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-18 15:00:49 -05:00
Laurent Goderre
51d3cd0066
Add binary classifier for Julia lang (#2427) 
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-18 15:00:21 -05:00
Laurent Goderre
4846639ee4
Add binary detection for PHP composer (#2432) 
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-18 14:59:45 -05:00
dependabot[bot]
6030a69b17
chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (#2433) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](a8a3f3ad30...c7d193f32e)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 11:17:07 -05:00
anchore-actions-token-generator[bot]
8b9194eb81
chore(deps): update CPE dictionary index (#2442) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: wagoodman <wagoodman@users.noreply.github.com>
 2023-12-18 07:01:21 -05:00
anchore-actions-token-generator[bot]
56a1ab54d2
chore(deps): update stereoscope to 4b999b76ca8901d15bb97aef445dc94c38d11d5c (#2440) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
 2023-12-18 06:43:24 -05:00
Alex Goodman
f4dd36ca9d
fix syft-json test to use pretty json for snapshot testing (#2441) 
without this fix, capturing fixtures will result in hard-to-read
failures in testing.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:23:21 -05:00
Alex Goodman
17c605822e
refactor pkg.Collection (#2439) 
- remove "catalog" references
- add a separate add() function for readability

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:11:11 -05:00
Alex Goodman
4eace4b141
refactor javascript cataloger to use configuration options when creating packages (#2438) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:11:02 -05:00
Alex Goodman
05660da8d7
use single source of truth for archive options (#2437) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:07:55 -05:00
Alex Goodman
2f378d806e
fix file digest cataloger when passed coordinates (#2436) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 14:43:09 -05:00
dependabot[bot]
b83cc8485a
chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0 (#2413) 2023-12-14 17:18:37 -05:00
Colm O hEigeartaigh
38a12bd91a
Look for a maven version in a pom from a parent dependency management section (#2423) 
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
 2023-12-14 13:15:14 -05:00
Colm O hEigeartaigh
649d152548
Parse Python licenses from LicenseExpression entry in the Wheel Metadata (#2431) 
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
 2023-12-14 12:41:41 -05:00
dependabot[bot]
f5d5892434
chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11 (#2430) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.10 to 3.22.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](305f654631...b374143c11)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-14 12:40:39 -05:00
dependabot[bot]
51831d303c
chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0 (#2429) 
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.27.0 to 1.28.0.
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.27.0...v1.28.0)

---
updated-dependencies:
- dependency-name: modernc.org/sqlite
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-14 12:38:55 -05:00
anchore-actions-token-generator[bot]
09e62c3282
chore(deps): update tools to latest versions (#2428) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
 2023-12-14 07:31:44 -05:00
Colm O hEigeartaigh
d39ef44e40
Parse Python licenses from LicenseFile entry in the Wheel Metadata (#2331) 
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
 2023-12-13 17:46:56 -05:00