1206 Commits

Author	SHA1	Message	Date
Dan Luhring	1416e3cb7a	Invert if statement to reduce nesting in archive parser ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-01-27 10:34:52 -05:00
Alex Goodman	bb1facbf81	ensure java parent pkg ref isnt nil when looking for parent matches ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-27 10:12:41 -05:00
Dan Luhring	4576c081b9	Improve output for test case ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-01-22 15:20:42 -05:00
Dan Luhring	d5779a9822	Clarify debug message for package.json omissions ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-01-22 15:20:24 -05:00
Dan Luhring	9ec3ad58c8	Update regression test expected value and pin deps ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-01-22 14:03:50 -05:00
Dan Luhring	176dfdd9c1	Don't create packages unless package.json has name and version ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-01-22 13:56:54 -05:00
Alex Goodman	6a49717314	add VirtualPath to source.Location ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-05 21:16:42 -05:00
Alex Goodman	06641cfda2	prefer real paths for glob results ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-05 18:48:28 -05:00
Alex Goodman	a5537943fa	keep original dpkg md5sum location ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-05 14:30:05 -05:00
Alex Goodman	fc8b431ea6	duplicate reference readers for duplicate location resolutions ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-05 13:54:39 -05:00
Alex Goodman	bb70b0b43e	Merge pull request #305 from anchore/add-has-path-to-resolver ... Add HasPath() to Resolver interface for existence check	2021-01-04 19:45:03 -05:00
Alex Goodman	33c27c4f3d	add HasPath() to Resolver interface ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-04 19:39:49 -05:00
Alex Goodman	133d180eec	update gemspec glob to include named spec dirs ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-04 19:33:52 -05:00
Alex Goodman	7f4e8ab97d	Fix symlink resolutions for constituent paths (#304) ... * bump stereoscope to pull in content API refactors Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * incorporate symlink fixes Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * with filetree.File() adjustments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * regress all-layers scope to not include dead-links + default tests to squashed scope Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore all layers resolver glob behavior (custom + lazy link resolution) Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * incorporate filetree link resolution options and restore no-follow dead link option for resolvers Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * removed path from lower-level FileTree.File() calls Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * bump stereoscope to pull in latest link resolution fixes Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * bump doublestar to v2 for directory resolver Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-04 16:41:45 -05:00
Dan Luhring	c2799b35d8	Fix mock resolver interface implementation ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-01-04 14:18:51 -05:00
Alex Goodman	d475e6280a	bump stereoscope to pull in content API refactors ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-01-04 14:07:14 -05:00
Dan Luhring	359212e8ee	Disable lint rule prealloc ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-23 11:35:49 -05:00
Dan Luhring	52e719dcb8	Create MockResolver and use to improve python cataloger tests ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-23 11:24:49 -05:00
Dan Luhring	13c289eb7e	Add tests for determining site packages root ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-23 08:22:31 -05:00
Dan Luhring	c1fa701602	Apply lint fix ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-22 17:46:33 -05:00
Dan Luhring	183b8f79d0	Handle site packages based on which egg file is parsed ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-22 17:41:27 -05:00
Alfredo Deza	d0d7e849c9	catalogers: Python runtime is not a Python package itself, ignore it ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-12-22 10:59:43 -05:00
Alex Goodman	6aaf9ee712	Incorporate import changes + add image overwrite option (#294) ... * incorporate import changes + add image overwrite option Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update import tests to account for arbitrary json shape Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-18 16:59:30 -05:00
Zach Hill	7962002f81	Split dpk source into name and version (#297) ... * Split dpk source into name and version Signed-off-by: Zach Hill <zach@anchore.com> * update dpkg status source name parsing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Dan Luhring <luhring@users.noreply.github.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-18 14:08:19 -05:00
Alex Goodman	ea162f87f4	update dpkg license to include single-word entries (#298) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Dan Luhring <luhring@users.noreply.github.com>	2020-12-18 12:54:09 -05:00
Zach Hill	9adb57bcb5	Adds globs for .egg-info file for python detection as well as tests (#296) ... * Adds globs for .egg-info file for python detection as well as tests Signed-off-by: Zach Hill <zach@anchore.com> * Fix lint error Signed-off-by: Dan Luhring <dan.luhring@anchore.com> Co-authored-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-18 12:36:25 -05:00
Alex Goodman	d94d7a7d80	add tests for content requester object ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-15 10:59:15 -05:00
Alex Goodman	45fed7c69b	break out packageEntry into a separate file ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-15 10:59:14 -05:00
Alex Goodman	e4a3e433b6	add content requested and refactor python cataloger to use it ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-15 10:59:14 -05:00
Alex Goodman	82c8a8e17b	add mem profile option and refactor python cataloger for batch requests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-15 10:59:14 -05:00
Dan Luhring	737a81c38c	Sort generated CPEs by specificity (#289) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-11 12:08:39 -05:00
Alex Goodman	52bac6e2fd	Add enterprise upload capability (#285) ... * add support to upload results to enterprise Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add package sbom upload Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add dockerfile support Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add manifest, index, and dockerfile import functions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * schema version to json output + enhance json schema generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * modify package SBOM shape to be entire syft document + add etui updates Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add import image config and manifest support Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add config options for import to enterprise Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * incorporate final stereoscope and client-go deps Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-09 22:20:53 -05:00
Toure Dunnon	1a124bd77b	added: regenerated new test fixtures to reflect change in specification. ... Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>	2020-12-04 11:48:20 -05:00
Toure Dunnon	a5fd83b21d	added: correct the bom descriptor to meet the cyclonedx 1.2 ... Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>	2020-12-04 11:48:20 -05:00
Alex Goodman	6f9ded60ed	Merge pull request #279 from anchore/enhance-java-cpe-by-group-id ... Include CPEs with elements from POM GroupId fields	2020-12-02 07:50:31 -05:00
Dan Luhring	65cbacd135	Clarify python wheel parsing process (#281) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-01 16:30:30 -05:00
Alex Goodman	2989d3d975	include CPEs with elementds from POM GroupId fields ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-01 08:00:49 -05:00
Alex Goodman	8a17bfb69f	generate json schema from struct definitions ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-20 15:47:10 -05:00
Alex Goodman	3aaa0e5566	move package purl and cpes (identities) to pkg.Package ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-19 11:25:51 -05:00
Alex Goodman	030427bb33	rename json artifact to package + update resolver integrity checks ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	569a598df7	minimize pointer usage & order return types consistently ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Dan Luhring	0ad8c53ec2	Fix cyclonedx test fixture usage of dynamic digest value ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	c892c3609e	improve doc comments ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	62b03f3a91	dont export structs used for unmarshaling ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	4b45c42f5a	make cyclonedx presenter generally reusable (for grype) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	f46de19c6b	migrate scope option to image metadata (from source) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	91baabe5a1	add image metadata as catalogFromJSON return ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	6f7a4fd3e4	move source metadata upstream and fix tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	aa0d444fd4	fix tests to use location instead of file.Reference ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	b694dacb21	add source.Location + reorient Resolvers to use it ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:11 -05:00