Alex Goodman
|
3aaa0e5566
|
move package purl and cpes (identities) to pkg.Package
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-19 11:25:51 -05:00 |
|
Alex Goodman
|
030427bb33
|
rename json artifact to package + update resolver integrity checks
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:13 -05:00 |
|
Alex Goodman
|
569a598df7
|
minimize pointer usage & order return types consistently
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:13 -05:00 |
|
Dan Luhring
|
0ad8c53ec2
|
Fix cyclonedx test fixture usage of dynamic digest value
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-17 12:37:13 -05:00 |
|
Alex Goodman
|
c892c3609e
|
improve doc comments
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:13 -05:00 |
|
Alex Goodman
|
62b03f3a91
|
dont export structs used for unmarshaling
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:12 -05:00 |
|
Alex Goodman
|
4b45c42f5a
|
make cyclonedx presenter generally reusable (for grype)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:12 -05:00 |
|
Alex Goodman
|
f46de19c6b
|
migrate scope option to image metadata (from source)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:12 -05:00 |
|
Alex Goodman
|
91baabe5a1
|
add image metadata as catalogFromJSON return
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:12 -05:00 |
|
Alex Goodman
|
6f7a4fd3e4
|
move source metadata upstream and fix tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:12 -05:00 |
|
Alex Goodman
|
aa0d444fd4
|
fix tests to use location instead of file.Reference
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:12 -05:00 |
|
Alex Goodman
|
b694dacb21
|
add source.Location + reorient Resolvers to use it
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:11 -05:00 |
|
Alex Goodman
|
9668341a14
|
rename scope to source
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:37:11 -05:00 |
|
Alex Goodman
|
495fb0a45f
|
add sbom document import lib helper function
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-17 12:36:51 -05:00 |
|
Dan Luhring
|
3e8bca6911
|
Rework Java archive name and version detection and clean up tests
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-17 08:35:10 -05:00 |
|
Dan Luhring
|
5afdd574a8
|
Update existing archive test cases to correct names and versions
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-17 08:35:10 -05:00 |
|
Dan Luhring
|
0ebe791acd
|
Add archive filename test case for failing example from #255
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-17 08:35:10 -05:00 |
|
Dan Luhring
|
6bde075cd3
|
Remove unused argument value
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 11:20:06 -05:00 |
|
Dan Luhring
|
f7be73dbcc
|
Fix package.json parsing for no licenses
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 11:12:13 -05:00 |
|
Dan Luhring
|
fc99538d78
|
Fix package.json parsing for multiple licenses objects
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 11:12:13 -05:00 |
|
Dan Luhring
|
4d4e242251
|
Fix package.json parsing for license object
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 11:12:12 -05:00 |
|
Dan Luhring
|
416afa015e
|
Add test for package.json with no licenses
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 11:11:46 -05:00 |
|
Dan Luhring
|
bd4c784a64
|
Add test for package.json multiple license objects
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 11:01:59 -05:00 |
|
Dan Luhring
|
624a090631
|
Add test for package.json license object
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-11-14 09:50:17 -05:00 |
|
Alex Goodman
|
7964c27bd8
|
add source to packages found by rpmdb cataloger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-12 09:27:08 -05:00 |
|
Alex Goodman
|
2c82c7c0f0
|
Merge pull request #257 from anchore/enhance-deb-support
Enhance dpkg support
|
2020-11-11 13:12:29 -05:00 |
|
Alex Goodman
|
db98fba3b4
|
Merge pull request #260 from anchore/add-warning-levels
Add warning log level
|
2020-11-11 11:13:51 -05:00 |
|
Alex Goodman
|
2a329002b8
|
enhance dpkg support by parsing md5sum and copyright file sources
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-11 11:06:34 -05:00 |
|
Alex Goodman
|
a6365886ad
|
add warning log level
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-10 15:09:41 -05:00 |
|
Alfredo Deza
|
6ae3b47959
|
tests: update all tests to pass the IDLike value
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2020-11-10 12:40:50 -05:00 |
|
Alfredo Deza
|
10b55311df
|
presenter: provide ID_LIKE information in json
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2020-11-10 12:40:17 -05:00 |
|
Alfredo Deza
|
64d5554144
|
include ID_LIKE in distro detection
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2020-11-10 12:37:35 -05:00 |
|
Alfredo Deza
|
c2cf4eb7b0
|
update tests for the new distro information
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2020-11-09 12:16:00 -05:00 |
|
Alfredo Deza
|
1e79986188
|
json: update the document to include distro information
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2020-11-09 12:16:00 -05:00 |
|
Alex Goodman
|
6aba2f48d4
|
split out rpmdb file processing to helper + lint fixes
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-06 10:44:27 -05:00 |
|
Alex Goodman
|
0205e72be9
|
ensure resolvers ignore directories for "FilesBy*" methods
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-06 07:21:38 -05:00 |
|
Alex Goodman
|
8095cd9980
|
add rpmdb file info to cataloger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-06 07:21:23 -05:00 |
|
Alex Goodman
|
a52750bdd3
|
enhance alpine file discovery (#248)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-11-04 09:56:52 -05:00 |
|
Alex Goodman
|
232cd13035
|
update tests for enhanced java pkg pairings
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-30 10:44:45 -04:00 |
|
Alex Goodman
|
03dbfb8dfb
|
improve java name and version extraction as well as parent pkg pairing
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-30 08:12:25 -04:00 |
|
Alex Goodman
|
a5cba13ddf
|
enable more flexible java manifest structure (closer to the spec)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-29 16:26:04 -04:00 |
|
Alex Goodman
|
ab45be98b8
|
append java nested package names to the virtual path
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-29 13:52:34 -04:00 |
|
Alex Goodman
|
1230650771
|
allow for java manifest data to be optional
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-29 11:28:27 -04:00 |
|
Alex Goodman
|
452426d1d6
|
Merge pull request #245 from anchore/update-java-cataloger-for-engine
Java cataloger miscellaneous fixes
|
2020-10-28 17:36:44 -04:00 |
|
Alex Goodman
|
2675891110
|
remove parent java package from json && add java manifest section parsing
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-28 17:19:06 -04:00 |
|
Dan Luhring
|
bffc4713a7
|
Update zip archive handling to match globs as expected (#244)
* Refactor zip file tests
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
* Add glob support for leading slashes
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
* Update zip testing to account for glob matching
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
* Ignore .DS_STORE
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
* Improve normalization of zip entry names
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
* Rename zip test helpers file
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2020-10-28 16:50:40 -04:00 |
|
Alex Goodman
|
62f6146c37
|
do not include optional fields
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-28 15:58:54 -04:00 |
|
Alex Goodman
|
8bcba7d830
|
update json schema and test for java virtualPath
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-28 15:25:30 -04:00 |
|
Alex Goodman
|
76c8f24090
|
add java virtual path
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-28 13:53:44 -04:00 |
|
Alex Goodman
|
6eb36bc3c8
|
allow for optional fields in npm metadata
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-10-23 15:00:55 -04:00 |
|