9 Commits

Author	SHA1	Message	Date
Dan Luhring	316d4341c8	Use Anchore fork of packageurl lib without replace directive (#512) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-09-22 15:04:09 -04:00
Christopher Angelo Phillips	93d00dc340	Populate Files and Relationship fields for spdx-json output (#507) ... * update spdx22 Document model to include relationships field Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update document and relationship to match current JSON spec https://github.com/spdx/spdx-spec/blob/development/v2.2.1/schemas/spdx-schema.json https://github.com/spdx/spdx-spec/pull/528 https://github.com/spdx/spdx-spec/pull/528#issuecomment-904180177 Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update File struct based on SPDX schema Required fields: [ "SPDXID", "fileName", "copyrightText", "licenseConcluded" ] Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>	2021-09-17 09:06:12 -04:00
Alex Goodman	2f81a2548c	allow for RPM package epoch to be optionally provided in the version string ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-06-02 15:28:12 -04:00
Alex Goodman	0c7706f254	add extra RPM file record fields (user, group, flags) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 10:25:46 -04:00
Alex Goodman	6d5ff0fd8e	Mark package relations by file ownership (#329) ... * add marking package relations by file ownership Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * correct json schema version; ensure fileOwners dont return dups; pin test pkg versions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract package relationships into separate section Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * pull in client-go features for import of PackageRelationships Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * move unit test for ownership by files relationship further down Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename relationship to "ownership-by-file-overlap" Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-02-25 13:47:13 -05:00
Alex Goodman	3aaa0e5566	move package purl and cpes (identities) to pkg.Package ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-19 11:25:51 -05:00
Alex Goodman	c892c3609e	improve doc comments ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	8095cd9980	add rpmdb file info to cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 07:21:23 -05:00
Alex Goodman	7fc926d40d	add python author and emil fields + add metadata type ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-22 09:51:29 -04:00