oss/syft - syft - Sa' Rocí Solutions

oss/syft

mirror of https://github.com/anchore/syft.git synced 2026-11-05 00:46:38 +01:00

Author	SHA1	Message	Date
Keith Zantow	9217f2099f	chore: update ffmpeg tests (#4249 ) Signed-off-by: Keith Zantow <kzantow@gmail.com>	2025-10-01 13:11:36 +00:00
Alan Pope	e1483e0285	Add support for identifying ffmpeg/libav libraries (#4227 ) * Add support for identifying ffmpeg/libav libraries Signed-off-by: Alan Pope <alan.pope@anchore.com> * Undo my snippet-based confusion Signed-off-by: Alan Pope <alan.pope@anchore.com> * Put test fixture config back Signed-off-by: Alan Pope <alan.pope@anchore.com> --------- Signed-off-by: Alan Pope <alan.pope@anchore.com>	2025-09-26 10:43:47 -04:00
Alan Pope	ada74a8121	Feature: Add ffmpeg binary cataloger (#3994 ) * Add ffmpeg binary cataloger Signed-off-by: Alan Pope <alan.pope@anchore.com> * add linux-amd64 snippet and test Signed-off-by: Alan Pope <alan.pope@anchore.com> * Widen scope of regex to two digit version numbers Signed-off-by: Alan Pope <alan.pope@anchore.com> * Add full test fixtures for ffmpeg Signed-off-by: Alan Pope <alan.pope@anchore.com> --------- Signed-off-by: Alan Pope <alan.pope@anchore.com>	2025-08-25 07:50:04 -04:00
honigbot	80e61175ad	fix: support multiple letters in openssl patch version (#4106 ) Signed-off-by: honigbot <thesoftbear@gmail.com>	2025-08-12 10:30:41 -04:00
Will MurphyandKeith Zantow	594b309cdf	feat: add binary classifier for hashicorp vault (#4121 ) * add binary classifier for hashicorp vault The Go Binary Cataloger isn't able to parse the version out of the binary shipped in the DockerHub images of hashicorp/vault because the version of the main module isn't set in the binary. Therefore, add a binary classifier cataloger for this binary. Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com> * chore: add test fixtures, update vault Signed-off-by: Keith Zantow <kzantow@gmail.com> * chore: set binary classifier package type based on PURL Signed-off-by: Keith Zantow <kzantow@gmail.com> * chore: use github.com/hashicorp/vault as package name Signed-off-by: Keith Zantow <kzantow@gmail.com> * chore: update tests Signed-off-by: Keith Zantow <kzantow@gmail.com> --------- Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com> Signed-off-by: Keith Zantow <kzantow@gmail.com> Co-authored-by: Keith Zantow <kzantow@gmail.com>	2025-08-08 13:26:15 -04:00
Keith Zantow	48bf81cf7f	fix: align binary java detection with jvm cataloger + support IBM (#4046 ) Signed-off-by: Keith Zantow <kzantow@gmail.com>	2025-07-22 12:06:32 -04:00
Laurent GoderreandAlex Goodman	a8e5b25632	Add PHP interpreter + extensions cataloger (#2585 ) * Add PHP extensions binary classifiers Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> * [wip] add php extensions cataloger Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix linting Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * find interpreters + extension Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * internalize binary cataloger utilities Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * default to linux/amd64 for test fixtures Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-05-15 08:22:50 -04:00
Oleksandr Vodotiiets	78ef2cf53b	fix: Improve detection of erlang binary in alpine Linux (#3839 ) Signed-off-by: Oleksandr Vodotiiets <alex.vodotiiets@gmail.com> Signed-off-by: Oleksandr Vodotiiets <61548316+avodotiiets@users.noreply.github.com>	2025-04-30 18:50:12 +00:00
VictorHuu	fa599547a3	fix the fluent-bit regex detection pattern (#3817 ) Signed-off-by: Yuntao Hu <victorhu493@gmail.com>	2025-04-25 11:50:45 -04:00
Stijn Taelemans	df11561929	Support detection of Chrome binaries (#3136 ) * test: add test cases Signed-off-by: Stijn Taelemans <taelemansst@gmail.com> * feat: add classifier for chrome Signed-off-by: Stijn Taelemans <taelemansst@gmail.com> --------- Signed-off-by: Stijn Taelemans <taelemansst@gmail.com>	2025-04-21 16:37:15 -04:00
VictorHuu	ab570497b0	fix:allow golang tip image detection regex pattern (#3757 ) * Modify the Regex version matcher for golang in the binary classifiers to make it compatible with golang tip images Signed-off-by: Victor Hu <victorhu493@gmail.com> Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * Preliminary fix the regex matching for golang tip image and add the corresponding unit tests Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * consider VERSION.cache when it comes to golang tip images Signed-off-by: Yuntao Hu <victorhu493@gmail.com> * consider VERSION.cache when it comes to golang tip images Signed-off-by: Yuntao Hu <victorhu493@gmail.com> --------- Signed-off-by: Victor Hu <victorhu493@gmail.com> Signed-off-by: Yuntao Hu <victorhu493@gmail.com>	2025-04-21 14:06:52 -04:00
Alan Pope	c687b7bfa5	fix: improve fluent-bit binary detection regex pattern (#3701 ) * fix: improve fluent-bit binary detection regex pattern This fixes issue #3133 by updating the regex pattern for fluent-bit binary detection to better handle ANSI escape sequences and multiple null bytes between the version string and "Fluent Bit" text. The change also makes the %s format specifier optional, supporting all variations in fluent-bit binary signatures. Signed-off-by: Alan Pope <alan.pope@anchore.com> * test: add fluent-bit 1.7.0-dev-3 test fixture for issue #3133 Signed-off-by: Alan Pope <alan.pope@anchore.com> --------- Signed-off-by: Alan Pope <alan.pope@anchore.com>	2025-03-07 14:56:37 +00:00
Alex Goodman	cbce129bb9	Use reader when scanning for package versions over reading entire binary into memory (#3558 ) * use streaming readers Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * replace redis search patterns Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address PR feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-01-02 22:12:37 +00:00
witchcraze	2118295f19	fix: dart classifier for 2.x and ARM (#3475 ) Signed-off-by: witchcraze <witchcraze@gmail.com>	2024-11-22 13:05:09 -05:00
witchcraze	263ea6b1bb	feat: update haproxy classifier (#3277 ) Signed-off-by: witchcraze <witchcraze@gmail.com>	2024-10-02 15:10:39 -04:00
witchcraze	2a3d171c10	fix: improve node classifier version matching (#3284 ) Signed-off-by: witchcraze <witchcraze@gmail.com>	2024-09-27 08:53:35 -04:00
Laurent Goderre	7815d8e4d9	feat: classifier for Dart lang binaries (#3265 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-09-23 14:21:31 -04:00
Krystian G.Krystian Gorny Alex Goodman	6a95a5f2ed	feat: add binary classifiers for lighttp, proftpd, zstd, xz, gzip, jq, and sqlcipher (#3252 ) * feat: detect lighttpd binaries Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * feat: detect proftpd binaries Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * feat: detect zstd binaries Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * feat: detect xz utils binarie Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * feat: detect gzip binaries Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * feat: detect sqlcipher binaries Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * feat: detect jq binaries Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> * add tests + snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Krystian Gorny <krystian.gorny@wipotec.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-19 13:21:02 +00:00
Laurent Goderre	dbc4238f63	Add haskell binaries cataloger (#3078 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-09-10 10:58:20 -04:00
Alex Goodman	0a3f513f92	Slim down docker cache size (#3190 ) * slim down docker cache size Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove old centos images Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * troubleshoot test failure Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix wget version ref Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor caching mechanisms Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add cache cleanup steps Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * simplify deleting cache Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix first clone issue Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tool dep Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-09-09 11:15:13 -04:00
witchcraze	a343825685	fix: haproxy classifier for versions with -dev suffix (#3180 ) Signed-off-by: witchcraze <witchcraze@gmail.com>	2024-09-05 14:52:19 -04:00
Keith Zantow	73b9d5aa42	fix: mysql 8.0.3x binary detection (#3142 ) Signed-off-by: Keith Zantow <kzantow@gmail.com>	2024-08-21 09:48:28 -04:00
Laurent Goderre	92d63df6f5	Added the SWI Prolog (swipl) ecosystem (#3076 ) * Add binary classifier for swipl Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> * Added cataloger for SWI Prolog Pack packages Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> --------- Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-07-31 16:13:26 -04:00
Laurent Goderre	7a35de04ee	fix: detection of arangodb 3.12 (#2979 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-06-20 11:11:03 -04:00
Laurent Goderre	b608ab77e1	feat: classifier for util-linux (#2933 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-06-05 17:32:52 -04:00
Keith Zantow	ac34808b9c	feat: detect fluent-bit binaries (#2905 ) Signed-off-by: Keith Zantow <kzantow@gmail.com>	2024-05-28 10:13:06 -04:00
Laurent Goderre	e7b6284039	Add binary classifier for ArangoDB (#2830 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-05-07 12:06:32 -04:00
Laurent Goderre	e353214ef8	Add detection for newer version of ErLang/OTP (#2829 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-05-06 11:47:54 -04:00
Laurent GoderreandKeith Zantow	c9aab4863b	fix: binary character in java version (#2766 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> Signed-off-by: Keith Zantow <kzantow@gmail.com> Co-authored-by: Keith Zantow <kzantow@gmail.com>	2024-04-11 10:32:24 -04:00
Laurent Goderre	619ace65c3	Differentiate between JRE and JDK (#2748 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-04-05 15:10:58 -04:00
Laurent GoderreandAlex Goodman	cf17bd69b2	Add detection for Oracle GraalVM (#2705 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-03-14 15:40:07 +00:00
Harm Weites	356f7c92b4	fix: match OpenSSL letter releases (#2682 ) * chore: match openssl 1.1 letter releases Signed-off-by: Harm Weites <harm@weites.com> * chore: include image sha Signed-off-by: Harm Weites <harm@weites.com> --------- Signed-off-by: Harm Weites <harm@weites.com>	2024-02-29 14:39:23 +00:00
Laurent Goderre	5602c80edb	feat: classifier for wordpress cli binary (#2473 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-01-17 11:42:03 -05:00
Andrew Garner	29c9857857	feat: binary classifiers for Percona Software For MySQL (#2478 ) Signed-off-by: Andrew Garner <garnera@vmware.com>	2024-01-10 16:06:14 +00:00
Laurent Goderre	d1e4ecba42	feat: binary classifier for pypy (#2474 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-01-10 10:59:25 -05:00
Laurent Goderre	fecfb2f939	fix: support traefik binary from the official Docker image (#2484 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-01-10 15:57:32 +00:00
Laurent Goderre	e61aac0b53	feat: binary classifier for GCC (#2479 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2024-01-10 10:50:38 -05:00
Christopher Angelo PhillipsandAlex Goodman	7182f5b519	Upgrade binary test fixtures management (#2444 ) * test: strip fixtures of any execution permissions Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * chore: add lint check for large files Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * add helper script to capture binary snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * chore: update scripts and add new dir output for snippets Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: update erlang test to new generated format Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: update memcached to new generator pattern Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: update openjdk to named version Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: move openjdk lts to versioned folder Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: rename unversioned java to versioned folders Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: migrate bash fixture to new snippet workflow Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: update script to size 600 bytes Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: update go classifier to new snippet workflow Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: move haproxy new new snippet Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: add flatter haproxy example Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: update tests to new pattern Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * test: final version of snippet script Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * [wip] download bin helpers Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add manager for binary cataloger test fixtures Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add remaining binary cataloger patterns and snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * adjust gitignore to be more permissive to snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add rust darwin snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * skip tests that are missing full binaries Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address PR feedback Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests for binary test fixture manager Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * highlight rows that do not have binaries or snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * bump fixture limit to 1K (found exceptions when adding snippets) Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add redis and postgres snippets Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * improve formating of fixture listing Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-05 21:40:03 +00:00
Laurent GoderreandAlex Goodman	a16a4ad6c9	Add ability to extend the binaries cataloguers (#2469 ) * Add ability to extend the binaries cataloguers Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> * restrict binary classifier package attributes Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-01-05 15:32:07 -05:00
Christopher Angelo Phillips	2a04e06cbc	chore: update binary to -x (#2456 ) Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>	2023-12-22 09:50:32 -05:00
Laurent GoderreandChristopher Phillips	63e7a004cb	Added OpenSSL binary matcher (#2416 ) * Added OpenSSL binary matcher Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> * chore: strip binary to smaller detection Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> --------- Signed-off-by: Laurent Goderre <laurent.goderre@docker.com> Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>	2023-12-22 09:37:09 -05:00
Christopher Angelo Phillips	3cffa0b7fd	chore: remove execute from test fixtures (#2450 ) * chore: remove execute from test fixtures Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> * chore: add back ignored file Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com> --------- Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>	2023-12-20 22:34:29 +00:00
Laurent Goderre	a635d66657	Add binary classifier for the ERLang interpretter (#2417 ) Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>	2023-12-18 15:00:49 -05:00
Duane MayandAlex Goodman	d4733fac1d	Add binary classifiers for MySQL and MariaDB (#2316 ) * Add MySQL and MariaDB binary classifiers Signed-off-by: Duane May <duanemay@gmail.com> Signed-off-by: Duane May <mduane@vmware.com> * use smallest possible binary fixtures Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Duane May <duanemay@gmail.com> Signed-off-by: Duane May <mduane@vmware.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-11-21 16:54:41 +00:00
David Dooling	34774a0e10	Enhance redis binary classifier (#2329 ) Allow existing matcher to match host identifiers longer than 12 characters. The binaries distributed by redis have the version before payload, so add a matcher for that. Add test fixtures covering these scenarios. Signed-off-by: David Dooling <david.dooling@docker.com>	2023-11-21 16:24:59 +00:00
witchcraze	1848aa22cf	feat: add bash classifier (#2055 ) Signed-off-by: witchcraze <witchcraze@gmail.com>	2023-08-24 10:13:59 -04:00
Sem Provoost	433a7b8a42	feat: nginx binary classifier (#1988 ) Signed-off-by: SemProvoost <27961543+SemProvoost@users.noreply.github.com>	2023-08-03 13:09:31 -04:00
Keith Zantow	cc0a376aba	fix: more python matching support (#1667 )	2023-03-13 13:26:43 -04:00
witchcraze	a81e0c8008	feat: add ruby classifier (#1665 ) Signed-off-by: witchcraze <witchcraze@gmail.com>	2023-03-10 08:29:40 -05:00
Keith Zantow	7714bc0521	fix: improved Python binary detection (#1648 )	2023-03-07 10:52:29 -05:00

1 2