witchcraze
2118295f19
fix: dart classifier for 2.x and ARM ( #3475 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-11-22 13:05:09 -05:00
Keith Zantow and Alex Goodman
ccbee94b87
feat: report unknowns in sbom ( #2998 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-10-07 16:11:37 -04:00
witchcraze
263ea6b1bb
feat: update haproxy classifier ( #3277 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-10-02 15:10:39 -04:00
witchcraze
f5f8005fe0
update redis classifier ( #3281 )
...
* update redis classifier
Signed-off-by: witchcraze <witchcraze@gmail.com >
* Remove snippets to pass Validation.
In this case, 9000 byte was required...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-09-30 15:37:47 -04:00
witchcraze
2a3d171c10
fix: improve node classifier version matching ( #3284 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-09-27 08:53:35 -04:00
witchcraze
1a746b2c05
fix: update ruby classifier for -rc, -dev, etc. versions ( #3285 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-09-27 08:51:50 -04:00
Laurent Goderre
7815d8e4d9
feat: classifier for Dart lang binaries ( #3265 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-09-23 14:21:31 -04:00
6a95a5f2ed
feat: add binary classifiers for lighttp, proftpd, zstd, xz, gzip, jq, and sqlcipher ( #3252 )
...
* feat: detect lighttpd binaries
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* feat: detect proftpd binaries
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* feat: detect zstd binaries
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* feat: detect xz utils binarie
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* feat: detect gzip binaries
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* feat: detect sqlcipher binaries
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* feat: detect jq binaries
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
* add tests + snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Krystian Gorny <krystian.gorny@wipotec.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Krystian Gorny <krystian.gorny@wipotec.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-09-19 13:21:02 +00:00
Krystian G. and Gorny Krystian
cb0de97bc3
fix: capture-snippet.sh can handle leading whitespaces now ( #3249 ) ( #3250 )
...
Signed-off-by: Gorny Krystian <krystian.gorny@wipotec.com >
Co-authored-by: Gorny Krystian <krystian.gorny@wipotec.com >
2024-09-19 09:15:54 -04:00
Laurent Goderre
dbc4238f63
Add haskell binaries cataloger ( #3078 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-09-10 10:58:20 -04:00
Alex Goodman
0a3f513f92
Slim down docker cache size ( #3190 )
...
* slim down docker cache size
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove old centos images
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* troubleshoot test failure
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix wget version ref
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* refactor caching mechanisms
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add cache cleanup steps
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* simplify deleting cache
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix first clone issue
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add tool dep
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-09-09 11:15:13 -04:00
witchcraze
a343825685
fix: haproxy classifier for versions with -dev suffix ( #3180 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-09-05 14:52:19 -04:00
anchore-actions-token-generator[bot]
dad253785e
chore(deps): update tools to latest versions ( #3144 )
2024-08-23 14:42:12 -04:00
KrysGor
cff9d494df
feat: detect curl binaries ( #3146 )
2024-08-23 14:41:08 -04:00
Keith Zantow
73b9d5aa42
fix: mysql 8.0.3x binary detection ( #3142 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2024-08-21 09:48:28 -04:00
Laurent Goderre
92d63df6f5
Added the SWI Prolog (swipl) ecosystem ( #3076 )
...
* Add binary classifier for swipl
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
* Added cataloger for SWI Prolog Pack packages
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-07-31 16:13:26 -04:00
witchcraze
490e05adb2
fix: traefik classifier ( #3077 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-07-29 09:46:51 -04:00
dependabot[bot] and Christopher Phillips
fe7c5a7174
chore(deps): bump github.com/charmbracelet/lipgloss from 0.11.1 to 0.12.1 ( #3040 )
...
* chore(deps): bump github.com/charmbracelet/lipgloss
Bumps [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss ) from 0.11.1 to 0.12.1.
- [Release notes](https://github.com/charmbracelet/lipgloss/releases )
- [Changelog](https://github.com/charmbracelet/lipgloss/blob/master/.goreleaser.yml )
- [Commits](https://github.com/charmbracelet/lipgloss/compare/v0.11.1...v0.12.1 )
---
updated-dependencies:
- dependency-name: github.com/charmbracelet/lipgloss
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: pin fedora linux/amd64 to sha
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
Signed-off-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
2024-07-22 10:43:17 -07:00
Keith Zantow
278b72d39b
chore: pin fedora image for elf binary test ( #3041 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2024-07-15 16:37:09 +00:00
Laurent Goderre
ceced5eb27
Add detection of Erlang in Alpine linux ( #2996 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-06-25 14:40:40 -07:00
Laurent Goderre
7a35de04ee
fix: detection of arangodb 3.12 ( #2979 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-06-20 11:11:03 -04:00
Alex Goodman
254a562b4e
Add support for reading ELF package notes with section header ( #2939 )
...
* add support for reading ELF package notes with section header
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add systemd elf package fields to json schema
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-06-07 14:38:54 -04:00
Laurent Goderre
b608ab77e1
feat: classifier for util-linux ( #2933 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-06-05 17:32:52 -04:00
Keith Zantow
ac34808b9c
feat: detect fluent-bit binaries ( #2905 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2024-05-28 10:13:06 -04:00
Laurent Goderre
7071f1e498
feat: Added functionality to convert major, minor, patch to version for binary classifier ( #2864 )
...
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-05-23 12:17:12 -04:00
Brian Ebarb and Alex Goodman
4194a2cd34
feat: add relationships to ELF package discovery ( #2715 )
...
This PR adds DependencyOf relationships when ELF packages have been discovered by the binary cataloger. The discovered file.Executable type has a []ImportedLibraries that's read from the file when discovered by syft. By mapping these imported libraries back to the package collection, syft is able to create relationships showing which packages are dependencies of other packages by just reading metadata from the ELF executable.
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Signed-off-by: Brian Ebarb <ebarb.brian@sers.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-05-09 13:53:59 -04:00
Laurent Goderre
e7b6284039
Add binary classifier for ArangoDB ( #2830 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-05-07 12:06:32 -04:00
Laurent Goderre
e353214ef8
Add detection for newer version of ErLang/OTP ( #2829 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-05-06 11:47:54 -04:00
Laurent Goderre and Keith Zantow
c9aab4863b
fix: binary character in java version ( #2766 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Keith Zantow <kzantow@gmail.com >
Co-authored-by: Keith Zantow <kzantow@gmail.com >
2024-04-11 10:32:24 -04:00
Laurent Goderre
619ace65c3
Differentiate between JRE and JDK ( #2748 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-04-05 15:10:58 -04:00
Laurent Goderre and Alex Goodman
cf17bd69b2
Add detection for Oracle GraalVM ( #2705 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-03-14 15:40:07 +00:00
6a2517b5d2
Add ELF binary package cataloger ( #2396 )
...
* feat Adds Elf package catalogger
Signed-off-by: Brian Ebarb <ebarb.brian@gmail.com >
* Add test fixtures for elf package
Signed-off-by: Colleen Divers <colleen.divers@gmail.com >
* bump JSON schema to v16.0.6 + expand test fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* less verbose logging
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove dead test code
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove unreleated swift change
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Brian Ebarb <ebarb.brian@gmail.com >
Signed-off-by: Colleen Divers <colleen.divers@gmail.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Colleen Divers <colleen.divers@gmail.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-03-14 11:16:03 -04:00
Harm Weites
356f7c92b4
fix: match OpenSSL letter releases ( #2682 )
...
* chore: match openssl 1.1 letter releases
Signed-off-by: Harm Weites <harm@weites.com >
* chore: include image sha
Signed-off-by: Harm Weites <harm@weites.com >
---------
Signed-off-by: Harm Weites <harm@weites.com >
2024-02-29 14:39:23 +00:00
17ef243956
chore(deps): update tools to latest versions ( #2616 )
...
* chore(deps): update tools to latest versions
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
* fix: update to new linter rules
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2024-02-14 14:59:49 +00:00
Laurent Goderre
5602c80edb
feat: classifier for wordpress cli binary ( #2473 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-17 11:42:03 -05:00
Andrew Garner
29c9857857
feat: binary classifiers for Percona Software For MySQL ( #2478 )
...
Signed-off-by: Andrew Garner <garnera@vmware.com >
2024-01-10 16:06:14 +00:00
Laurent Goderre
d1e4ecba42
feat: binary classifier for pypy ( #2474 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-10 10:59:25 -05:00
Laurent Goderre
fecfb2f939
fix: support traefik binary from the official Docker image ( #2484 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-10 15:57:32 +00:00
Laurent Goderre
e61aac0b53
feat: binary classifier for GCC ( #2479 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-10 10:50:38 -05:00
Christopher Angelo Phillips and Alex Goodman
7182f5b519
Upgrade binary test fixtures management ( #2444 )
...
* test: strip fixtures of any execution permissions
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* chore: add lint check for large files
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* add helper script to capture binary snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* chore: update scripts and add new dir output for snippets
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update erlang test to new generated format
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update memcached to new generator pattern
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update openjdk to named version
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: move openjdk lts to versioned folder
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: rename unversioned java to versioned folders
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: migrate bash fixture to new snippet workflow
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update script to size 600 bytes
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update go classifier to new snippet workflow
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: move haproxy new new snippet
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: add flatter haproxy example
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update tests to new pattern
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: final version of snippet script
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* [wip] download bin helpers
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add manager for binary cataloger test fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add remaining binary cataloger patterns and snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* adjust gitignore to be more permissive to snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add rust darwin snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* skip tests that are missing full binaries
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* address PR feedback
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add tests for binary test fixture manager
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* highlight rows that do not have binaries or snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* bump fixture limit to 1K (found exceptions when adding snippets)
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add redis and postgres snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* improve formating of fixture listing
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-01-05 21:40:03 +00:00
Laurent Goderre and Alex Goodman
a16a4ad6c9
Add ability to extend the binaries cataloguers ( #2469 )
...
* Add ability to extend the binaries cataloguers
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
* restrict binary classifier package attributes
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-01-05 15:32:07 -05:00
Christopher Angelo Phillips
2a04e06cbc
chore: update binary to -x ( #2456 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-12-22 09:50:32 -05:00
Laurent Goderre and Christopher Phillips
63e7a004cb
Added OpenSSL binary matcher ( #2416 )
...
* Added OpenSSL binary matcher
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
* chore: strip binary to smaller detection
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-12-22 09:37:09 -05:00
Christopher Angelo Phillips
3cffa0b7fd
chore: remove execute from test fixtures ( #2450 )
...
* chore: remove execute from test fixtures
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* chore: add back ignored file
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-12-20 22:34:29 +00:00
Laurent Goderre
a635d66657
Add binary classifier for the ERLang interpretter ( #2417 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2023-12-18 15:00:49 -05:00
Duane May and Alex Goodman
d4733fac1d
Add binary classifiers for MySQL and MariaDB ( #2316 )
...
* Add MySQL and MariaDB binary classifiers
Signed-off-by: Duane May <duanemay@gmail.com >
Signed-off-by: Duane May <mduane@vmware.com >
* use smallest possible binary fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Duane May <duanemay@gmail.com >
Signed-off-by: Duane May <mduane@vmware.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-11-21 16:54:41 +00:00
David Dooling
34774a0e10
Enhance redis binary classifier ( #2329 )
...
Allow existing matcher to match host identifiers longer than 12
characters. The binaries distributed by redis have the version before
payload, so add a matcher for that. Add test fixtures covering these
scenarios.
Signed-off-by: David Dooling <david.dooling@docker.com >
2023-11-21 16:24:59 +00:00
Christopher Angelo Phillips
094b41b301
chore: pin and update all workflow dependencies; add permission scopes ( #2138 )
...
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-09-15 14:18:42 -04:00
witchcraze
1848aa22cf
feat: add bash classifier ( #2055 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-08-24 10:13:59 -04:00
Sem Provoost
433a7b8a42
feat: nginx binary classifier ( #1988 )
...
Signed-off-by: SemProvoost <27961543+SemProvoost@users.noreply.github.com >
2023-08-03 13:09:31 -04:00
witchcraze
Keith ZantowandAlex Goodman
Laurent Goderre
anchore-actions-token-generator[bot]
dependabot[bot]andChristopher Phillips
Brian EbarbandAlex Goodman
Harm Weites
Andrew Garner
Duane MayandAlex Goodman
David Dooling
Sem Provoost