218 Commits

Author	SHA1	Message	Date
Alex Goodman	3aaa0e5566	move package purl and cpes (identities) to pkg.Package ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-19 11:25:51 -05:00
Alex Goodman	030427bb33	rename json artifact to package + update resolver integrity checks ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	569a598df7	minimize pointer usage & order return types consistently ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Dan Luhring	0ad8c53ec2	Fix cyclonedx test fixture usage of dynamic digest value ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	c892c3609e	improve doc comments ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	62b03f3a91	dont export structs used for unmarshaling ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	4b45c42f5a	make cyclonedx presenter generally reusable (for grype) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	f46de19c6b	migrate scope option to image metadata (from source) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	91baabe5a1	add image metadata as catalogFromJSON return ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	6f7a4fd3e4	move source metadata upstream and fix tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	aa0d444fd4	fix tests to use location instead of file.Reference ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	b694dacb21	add source.Location + reorient Resolvers to use it ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:11 -05:00
Alex Goodman	9668341a14	rename scope to source ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:11 -05:00
Alex Goodman	495fb0a45f	add sbom document import lib helper function ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:36:51 -05:00
Dan Luhring	3e8bca6911	Rework Java archive name and version detection and clean up tests ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 08:35:10 -05:00
Dan Luhring	5afdd574a8	Update existing archive test cases to correct names and versions ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 08:35:10 -05:00
Dan Luhring	0ebe791acd	Add archive filename test case for failing example from #255 ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 08:35:10 -05:00
Dan Luhring	6bde075cd3	Remove unused argument value ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:20:06 -05:00
Dan Luhring	f7be73dbcc	Fix package.json parsing for no licenses ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:12:13 -05:00
Dan Luhring	fc99538d78	Fix package.json parsing for multiple licenses objects ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:12:13 -05:00
Dan Luhring	4d4e242251	Fix package.json parsing for license object ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:12:12 -05:00
Dan Luhring	416afa015e	Add test for package.json with no licenses ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:11:46 -05:00
Dan Luhring	bd4c784a64	Add test for package.json multiple license objects ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:01:59 -05:00
Dan Luhring	624a090631	Add test for package.json license object ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 09:50:17 -05:00
Alex Goodman	7964c27bd8	add source to packages found by rpmdb cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-12 09:27:08 -05:00
Alex Goodman	2c82c7c0f0	Merge pull request #257 from anchore/enhance-deb-support ... Enhance dpkg support	2020-11-11 13:12:29 -05:00
Alex Goodman	db98fba3b4	Merge pull request #260 from anchore/add-warning-levels ... Add warning log level	2020-11-11 11:13:51 -05:00
Alex Goodman	2a329002b8	enhance dpkg support by parsing md5sum and copyright file sources ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-11 11:06:34 -05:00
Alex Goodman	a6365886ad	add warning log level ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-10 15:09:41 -05:00
Alfredo Deza	6ae3b47959	tests: update all tests to pass the IDLike value ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-10 12:40:50 -05:00
Alfredo Deza	10b55311df	presenter: provide ID_LIKE information in json ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-10 12:40:17 -05:00
Alfredo Deza	64d5554144	include ID_LIKE in distro detection ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-10 12:37:35 -05:00
Alfredo Deza	c2cf4eb7b0	update tests for the new distro information ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-09 12:16:00 -05:00
Alfredo Deza	1e79986188	json: update the document to include distro information ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-09 12:16:00 -05:00
Alex Goodman	6aba2f48d4	split out rpmdb file processing to helper + lint fixes ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 10:44:27 -05:00
Alex Goodman	0205e72be9	ensure resolvers ignore directories for "FilesBy*" methods ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 07:21:38 -05:00
Alex Goodman	8095cd9980	add rpmdb file info to cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 07:21:23 -05:00
Alex Goodman	a52750bdd3	enhance alpine file discovery (#248) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-04 09:56:52 -05:00
Alex Goodman	232cd13035	update tests for enhanced java pkg pairings ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-30 10:44:45 -04:00
Alex Goodman	03dbfb8dfb	improve java name and version extraction as well as parent pkg pairing ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-30 08:12:25 -04:00
Alex Goodman	a5cba13ddf	enable more flexible java manifest structure (closer to the spec) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-29 16:26:04 -04:00
Alex Goodman	ab45be98b8	append java nested package names to the virtual path ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-29 13:52:34 -04:00
Alex Goodman	1230650771	allow for java manifest data to be optional ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-29 11:28:27 -04:00
Alex Goodman	452426d1d6	Merge pull request #245 from anchore/update-java-cataloger-for-engine ... Java cataloger miscellaneous fixes	2020-10-28 17:36:44 -04:00
Alex Goodman	2675891110	remove parent java package from json && add java manifest section parsing ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-28 17:19:06 -04:00
Dan Luhring	bffc4713a7	Update zip archive handling to match globs as expected (#244) ... * Refactor zip file tests Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add glob support for leading slashes Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Update zip testing to account for glob matching Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Ignore .DS_STORE Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Improve normalization of zip entry names Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Rename zip test helpers file Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-10-28 16:50:40 -04:00
Alex Goodman	62f6146c37	do not include optional fields ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-28 15:58:54 -04:00
Alex Goodman	8bcba7d830	update json schema and test for java virtualPath ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-28 15:25:30 -04:00
Alex Goodman	76c8f24090	add java virtual path ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-28 13:53:44 -04:00
Alex Goodman	6eb36bc3c8	allow for optional fields in npm metadata ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-23 15:00:55 -04:00