oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-12 06:07:20 +02:00
Code Issues Packages Projects Releases Wiki Activity
667 Commits 63 Branches 272 Tags
upgrade-temp-file-management
Commit Graph
667 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman ab1401718b add event loop tests 
Signed-off-by: Alex Goodman <wagoodman@gmail.com>
 2021-06-27 13:32:45 -04:00
Alex Goodman aac0dac0de pull in temp dir generator from stereoscope 
Signed-off-by: Alex Goodman <wagoodman@gmail.com>
 2021-06-26 23:40:40 -04:00
Alex Goodman c5390264b0 split UI from event handling 
Signed-off-by: Alex Goodman <wagoodman@gmail.com>
 2021-06-26 23:32:28 -04:00
Alex Goodman 706322f826 Add SPDX support (#445) 
* add initial spdx support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* expose FileOwner and use in SPDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add initial json support for SPDX

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add remaining package fields

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add spdx license list generation + tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* keep fileOwner unexported from pkg

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* restore cli test util

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add external refs to spdx tag-value format

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add golang support to CPE generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use tag-value format as default "spdx" format flavor

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add tests around spdx presenters + refactor presenter tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add bouncer exception for spdx tools-golang repo

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove spdx model questions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-25 16:30:41 -04:00
Dan Luhring 66e71c39e2 Add callout for OSS meetup (#446) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-06-24 11:44:20 -04:00
Alex Goodman 6dd698d89e Merge pull request #438 from anchore/enable-pull-request-events 
Respond to pull_request events for internal PRs
v0.17.1 		2021-06-19 14:32:13 -04:00
Dan Luhring 50928ebd05 Add comments with examples for yarn.lock regexps (#439) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-06-17 09:24:05 -04:00
Alex Goodman 6e70d8af98 respond to pull_request events for internal PRs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-16 12:48:50 -04:00
Dan Luhring 67b7d63875 Fix yarn.lock parsing (#437) 2021-06-15 09:57:54 -04:00
Samuel Dacanay 5a2e2eb679 Export the presenter interface so it may be used by external projects 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2021-06-09 10:21:55 -07:00
Alex Goodman 801e662633 Merge pull request #428 from anchore/self-extracting-jar 
Add support for processing files with prepended bytes before the zip archive
v0.17.0 		2021-06-04 12:50:22 -04:00
Alex Goodman 6a398f9771 update zip util tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman bf1bf057ab add and update zip util tests with ZipReadCloser coverage 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman 36b44b1d8e add zip-byte-offset support to zip utils 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman 8f85c8affc update springboot fixture to create jar with a prepended shell script 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 12:11:49 -04:00
Alex Goodman 776164a078 Merge pull request #427 from anchore/epoch-fix 
Allow for RPM package epoch to be optionally provided in the version field
 2021-06-04 09:52:54 -04:00
Alex Goodman 5ea1d78464 rename helper fn to toELVersion 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-04 09:38:15 -04:00
Alex Goodman afbd8f8ea0 remove variadic functionality from intRef() test helper 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-02 17:13:31 -04:00
Alex Goodman 2f81a2548c allow for RPM package epoch to be optionally provided in the version string 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-02 15:28:12 -04:00
Dan Luhring 2754c889eb Replace links to Slack channels with public signup link (#424) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-05-26 09:18:25 -04:00
Dan Luhring 8be0d988e7 Fix go mod tidy release problem (#422) 
* Add go mod tidy check

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Run go mod tidy

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
v0.16.1 		2021-05-25 17:13:58 -04:00
Dan Luhring 80e23bdb50 Add config option for import timeout (#421) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
v0.16.0 		2021-05-25 15:01:02 -04:00
Dan Luhring 17bbf840cf Allow registry auth config without authority value (#420) 
* Allow registry auth config without authority value

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update CLI tests for new stereoscope log output

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-05-24 16:05:56 -04:00
Alex Goodman 2ca2f03501 Merge pull request #418 from anchore/add-all-pkg-metadata-types 
Add all package metadata types slice for use in downstream testing
 2021-05-24 11:15:56 -04:00
Alex Goodman 1201ad6df0 add all package metadata types slice for use in downstream testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-24 10:20:14 -04:00
Alex Goodman baa859d2ed Merge pull request #414 from anchore/fix-leaky-fds 
Close all ReadClosers explicitly retrieved from resolvers
v0.15.2 		2021-05-12 17:28:52 -04:00
Alex Goodman a6c798f438 close all ReadClosers explicitly retrieved from resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-12 17:21:30 -04:00
Alfredo Deza 360eb74cc7 Merge pull request #410 from anchore/readme-grype 
update readme to point to grype
 2021-05-06 15:09:09 -04:00
Alfredo Deza 92c20c885e update readme to point to grype 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-05-06 14:03:38 -04:00
Alfredo Deza 284b0c20b0 Merge pull request #389 from anchore/issue-381 
Support msrc types
 2021-04-29 14:59:04 -04:00
Alfredo Deza 4cce32f5c9 tests: remove KbPkg from defined pkgs since it isn't parsed 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-04-23 10:17:16 -04:00
Alfredo Deza 26007db650 manually add msrc as an observed distro 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-04-23 10:17:16 -04:00
Alfredo Deza 5af2687022 support msrc types 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-04-23 10:17:16 -04:00
Alex Goodman 032cecbe7f Merge pull request #406 from anchore/align-check-names-to-quality-gate 
Align check names to release quality gate
v0.15.1 		2021-04-22 16:38:09 -04:00
Alex Goodman 5e1e2628cf align check names to release quality gate 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 16:20:21 -04:00
Alex Goodman 1632fdd85e Merge pull request #405 from anchore/add-jenkins-filter 
Add for known bad CPE field combinations for jenkins package
v0.15.0 		2021-04-22 15:56:18 -04:00
Alex Goodman 18af21d2a5 add jenkins filter for known bad CPE field combinations 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 15:51:59 -04:00
Alex Goodman 1b62b10b2b Merge pull request #403 from anchore/pom-persist-not-for-shaded-jars 
Update parent pom persistence with regard to shaded jars
 2021-04-22 15:51:38 -04:00
Alex Goodman 170681943c remove type assertion check in packageIdentitiesMatch fn 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 14:00:31 -04:00
Alex Goodman 46043510ae update parent pom persistence with regard to shaded jars 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 14:00:31 -04:00
Alex Goodman c34060d188 Merge pull request #404 from anchore/add-more-jenkins-plugin-group-ids 
Add additional cases for categorizing jenkins package type by group id
 2021-04-22 13:33:17 -04:00
Alex Goodman 24a2f9344b add additional string.contains case for jenkins package by group id 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 13:20:12 -04:00
Alex Goodman d9de63c837 Enhance CPE generation for java GroupId and filtering (#402) 
* enhance cpe generation for group id and filtering

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* rename group id const + add doc comment for HasAnyOfPrefixes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 12:22:56 +00:00
Alex Goodman 0c29090b42 Add hyphen replacement logic for CPE generation (#397) 
* add hyphen replacement logic for CPE generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* migrate "python-" vendor prefix to product candidate processing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump linter timeout for CI

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update cpe candidate product tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-21 12:59:48 +00:00
Alex Goodman 6d2f139397 Merge pull request #401 from anchore/boostrap-gomod-tidy 
Ensure consistent go.sum state during release
 2021-04-21 08:54:55 -04:00
Alex Goodman 9c7906364d add go mod tidy to bootstrap make target 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-21 08:45:51 -04:00
Dan Luhring 7ae4504182 Merge pull request #399 from anchore/java-cpe-group-id-handling 
Don't use pom groupId for Jenkins and Jira plugins
 2021-04-21 08:06:33 -04:00
Dan Luhring 060e60b6dd Add more tests to CPE generation 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-04-20 20:42:40 -04:00
Dan Luhring 33e6be0b74 Identify Jenkins plugin upstream of CPE generation 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-04-20 19:36:34 -04:00
Dan Luhring fa7fd718cb Refactor Java archive parsing logic 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-04-20 19:34:59 -04:00