Alex Goodman
560b05c2c9
Introduce new format pattern + port json processing ( #550 )
...
* add new format pattern
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add syftjson format
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add internal formats helper
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add SBOM encode/decode to lib API
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* remove json presenter + update presenter tests to use common utils
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* remove presenter format enum type + add formats shim in presenter helper
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add MustCPE helper for tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update usage of format enum
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add test fixtures for encode/decode tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* fix integration test
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* migrate format detection to use reader
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* address review comments
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-10-20 21:36:34 +00:00
Christopher Angelo Phillips
93d00dc340
Populate Files and Relationship fields for spdx-json output ( #507 )
...
* update spdx22 Document model to include relationships field
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* update document and relationship to match current JSON spec
https://github.com/spdx/spdx-spec/blob/development/v2.2.1/schemas/spdx-schema.json
https://github.com/spdx/spdx-spec/pull/528
https://github.com/spdx/spdx-spec/pull/528#issuecomment-904180177
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* update File struct based on SPDX schema
Required fields:
[ "SPDXID", "fileName", "copyrightText", "licenseConcluded" ]
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-09-17 09:06:12 -04:00
Alex Goodman
706322f826
Add SPDX support ( #445 )
...
* add initial spdx support
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* expose FileOwner and use in SPDX presenter
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add initial json support for SPDX
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add remaining package fields
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add spdx license list generation + tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* keep fileOwner unexported from pkg
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* restore cli test util
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add external refs to spdx tag-value format
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add golang support to CPE generation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* use tag-value format as default "spdx" format flavor
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add tests around spdx presenters + refactor presenter tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add bouncer exception for spdx tools-golang repo
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* remove spdx model questions
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-06-25 16:30:41 -04:00
Alex Goodman
ba3407a767
add dpkg conffile update to json schema + json test snapshots
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-04-09 08:37:28 -04:00
Alex Goodman
9ec09add67
Add secrets search capability ( #367 )
...
* add initial secrets cataloger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update ETUI elements with new catalogers (file metadata, digests, and secrets)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update secrets cataloger to read full contents into memory for searching
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* quick prototype of parallelization secret regex search
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* quick prototype with single aggregated regex
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* quick prototype for secret search line-by-line
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* quick prototype hybrid secrets search
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add secrets cataloger with line strategy
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* adjust verbiage towards SearchResults instead of Secrets + add tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update json schema with secrets cataloger results
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* address PR comments
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update readme with secrets config options
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* ensure file catalogers call AllLocations once
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-04-01 21:34:15 +00:00
Haim Helman
13a066ea18
Add repo digests if available from Stereoscope to the image metadata
...
Signed-off-by: Haim Helman <hhelman@vmware.com >
2021-03-25 05:57:23 -07:00
Alex Goodman
3ef30f99be
pull in stereoscope cache fix + add test cache makefile target helpers
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-03-23 14:31:59 -04:00
Alex Goodman
36e4af1953
adjust jsom schema version + adopt java pom properies test fixtures
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-03-22 11:27:01 -04:00
Alex Goodman
ff4ed40d50
migrate syft/presenter to internal/presenter
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-03-22 10:52:33 -04:00
Alex Goodman
Christopher Angelo Phillips
Alex Goodman
Haim Helman