619 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Dan Luhring	33e6be0b74	Identify Jenkins plugin upstream of CPE generation ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-04-20 19:36:34 -04:00
Dan Luhring	fa7fd718cb	Refactor Java archive parsing logic ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-04-20 19:34:59 -04:00
Dan Luhring	65e4e17590	Pin gradle builder container image ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-04-20 19:34:59 -04:00
Dan Luhring	091fd1f0b0	Improve CPE generation for Jenkins/Jira plugins ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-04-20 19:34:53 -04:00
Alex Goodman	b301b56db1	add nomatch_inclusion engine mechanism in cpe generation logic (#394) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-20 19:57:04 +00:00
Alex Goodman	676bdf9816	refactor pom properties to modify parent pkg less often (#392) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-20 16:19:28 +00:00
Alex Goodman	c06ee1ecc2	Merge pull request #388 from anchore/add-apk-extra-fields ... Use the standard file.Digest for apk checksums	2021-04-19 16:46:41 -04:00
Alex Goodman	136e439dc2	use the standard file.Digest for apk checksums ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-19 16:42:17 -04:00
Alex Goodman	ecb16b6a34	Merge pull request #387 from anchore/add-rpmdb-extra-fields ... Expand RPM DB fields	2021-04-19 16:41:05 -04:00
Alex Goodman	6edbae08e5	update json schema with extra rpm fields ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 10:25:47 -04:00
Alex Goodman	0c7706f254	add extra RPM file record fields (user, group, flags) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 10:25:46 -04:00
Alex Goodman	11866ab69e	Merge pull request #391 from anchore/cache-acceptance-mac-image ... Change mac acceptance test image.tar path	2021-04-16 10:16:49 -04:00
Alex Goodman	0c100c4037	change mac acceptance test image.tar path ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 09:57:13 -04:00
Alex Goodman	cca9d33b36	Merge pull request #390 from anchore/bump-go-mod-go-version ... Bump go.mod minimum required go version to 1.16	2021-04-16 09:03:05 -04:00
Alex Goodman	8b315367e8	fix validations badge ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 08:59:07 -04:00
Alex Goodman	b771d7bfd3	bump go.mod minimum required go version ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 08:53:03 -04:00
Alex Goodman	0c9eca4a30	Merge pull request #386 from anchore/add-safe-join ... Safely join paths derived from archive headers	2021-04-15 08:59:39 -04:00
Alex Goodman	484730435b	safely join paths derived from archive headers ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-15 08:55:29 -04:00
Alex Goodman	d5dfaaba53	Merge pull request #384 from anchore/add-registry-follow-up ... Modify registry credential verification	2021-04-14 16:03:32 -04:00
Alex Goodman	9fb79bfa2e	dont append registry auth if potentially empty ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-14 10:28:21 -04:00
Alex Goodman	2a5207ec88	Merge pull request #382 from anchore/add-manifest-to-registry-source ... Add manifest + repo digests on registry source	2021-04-14 08:03:04 -04:00
Alex Goodman	2ff3f58730	pull in stereoscope manifest + repo digests on registry source ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-13 18:29:12 -04:00
Dan Luhring	8c178c497e	Merge pull request #379 from anchore/fix-column-mismatch ... Expose column index for UI handler consumers	2021-04-13 10:08:27 -04:00
Dan Luhring	4abffc8fbc	Expose column index for UI handler consumers ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-04-13 09:32:38 -04:00
Alex Goodman	c363b2b532	Add ability to pull images directly from a registry (#378) ... * add registry image source Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use explicit source for fetching image + add scheme and registry tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust test variable name and add credential helper function Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-13 13:30:57 +00:00
Alex Goodman	c02ab88d5f	Merge pull request #370 from anchore/add-file-contents-cataloger ... Add file contents cataloger	2021-04-12 17:41:54 -04:00
Alex Goodman	cd542bab5b	ensure file content cataloger is using the proper scope ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:37:38 -04:00
Alex Goodman	b5d4b2f7b2	simplify test assertions + rename file contents cataloger size limiter var ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:34:56 -04:00
Alex Goodman	51b13f8221	rename Contents to FileContents in app config and documentation ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:34:54 -04:00
Alex Goodman	44915b435f	add documentation for the file contents cataloger config options ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:33:49 -04:00
Alex Goodman	d451a5ad30	update the json schema and tests with file contents section ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:33:20 -04:00
Alex Goodman	c1551a03c5	add file contents cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:30:57 -04:00
Alex Goodman	9ad786d608	Merge pull request #374 from anchore/add-binary-classifier ... Add file classification cataloger	2021-04-12 17:25:16 -04:00
Alex Goodman	28c407572c	simplify test assertions for classification cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	f9d49885ae	simplify MatchNamedCaptureGroups implementation ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	f438ee974c	add documentation for the file classifier cataloger config options ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	309cbf5264	add missing file classification test fixtures + gitignore adjustment ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	46fffe5c6f	update json schema + presenter snapshots with file classification section ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:40 -04:00
Alex Goodman	080057b217	add file classifications to power-user json presenter ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	870a676a5d	wire up file classifier to power-user cmd ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	46bfb68113	add file classifier + tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	5743e32e02	add tests around MatchNamedCaptureGroups + rename ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	66ebe49a04	Merge pull request #375 from anchore/package-verification-fields-dpkg ... Update package verification fields for DPKG	2021-04-12 16:35:45 -04:00
Alex Goodman	0511972dfa	clarify default collection value + fix appending conffiles location ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 11:41:44 -04:00
Alex Goodman	c56690fc52	fix DpkgMetadata.Files test to ensure it is never nil ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 08:46:59 -04:00
Alex Goodman	ba3407a767	add dpkg conffile update to json schema + json test snapshots ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 08:37:28 -04:00
Alex Goodman	269832ce8d	add conffile listing to dpkg metadata + normalize digests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-08 14:21:23 -04:00
Alex Goodman	7a10cbae0c	Merge pull request #368 from anchore/fix-registry-auth-encode-issue ... Ensure credentials are not HTML encoded	2021-04-05 14:25:57 -04:00
Alex Goodman	7ec0e3785f	bump stereoscope ; pull in fix to ensure credentials are not HTML encoded ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-05 14:20:49 -04:00
Alex Goodman	9ec09add67	Add secrets search capability (#367) ... * add initial secrets cataloger Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update ETUI elements with new catalogers (file metadata, digests, and secrets) Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update secrets cataloger to read full contents into memory for searching Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype of parallelization secret regex search Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype with single aggregated regex Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype for secret search line-by-line Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype hybrid secrets search Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add secrets cataloger with line strategy Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust verbiage towards SearchResults instead of Secrets + add tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update json schema with secrets cataloger results Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * address PR comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update readme with secrets config options Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure file catalogers call AllLocations once Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-01 21:34:15 +00:00