oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 14:02:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
734 Commits 65 Branches 273 Tags
4bf08e6b6d68b87b2431774c7d663b422b979cc2
Commit Graph
77 Commits
Author SHA1 Message Date
Christopher Angelo Phillips 10fa8dc7c9 Add windows support (#548) 
* update  build tags, ui support, and stereoscope, and release for windows support

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
 2021-10-21 12:49:36 -04:00
Alex Goodman 560b05c2c9 Introduce new format pattern + port json processing (#550) 
* add new format pattern

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add syftjson format

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add internal formats helper

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add SBOM encode/decode to lib API

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove json presenter + update presenter tests to use common utils

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove presenter format enum type + add formats shim in presenter helper

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add MustCPE helper for tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update usage of format enum

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add test fixtures for encode/decode tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix integration test

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* migrate format detection to use reader

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address review comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-20 21:36:34 +00:00
Alex Goodman 5e315c0f17 Disable ETUI for piped input (#571) 
* fixed piped input

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* allow pipedinput helper to raise an error

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* factor out verbosity check to function

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-20 12:40:52 -04:00
Alex Goodman 6f3fa494d7 Show help text when no args are given (#573) 
* show help text when no args are given

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* repurpose the input args validation function

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* ensure app does not check for update in cli tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-20 09:51:05 -04:00
Alex Goodman a000a2926b update linter + fix whitespace (#536) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-06 13:46:55 +00:00
Alex Goodman 1b23a94015 Add option to output SBOM report to a file (#530) 
* add output to file option

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* log errors on close of the report destination

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove file option from persistent args

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update file option comments and logging

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* allow for multiple UI fallback options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update UI select signatures + tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-05 14:47:24 -04:00
Christopher Angelo Phillips 5e4b668e5a 497 stable sorted CPE array (JSON and SPDX) (#522) 
* add small sorting change to our specificity

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
 2021-10-01 15:31:17 -04:00
houdini91 2f99a35f51 Power user command support for directory scans (#467) 
* Power-user directory source support
Signed-off-by: Mikey Strauss <mikey@scribe-security.com>

Signed-off-by: houdini91 <mdstrauss91@gmail.com>

* Remove newline

Signed-off-by: houdini91 <mdstrauss91@gmail.com>

* Shared filetree (#1)

* Shared directory resolver filetree

Signed-off-by: houdini91 <mdstrauss91@gmail.com>

* PR - change error ErrObserve to ErrPath

Signed-off-by: houdini91 <mdstrauss91@gmail.com>

* PR - share directory resolver
* Use pointer to source struct

Signed-off-by: houdini91 <mdstrauss91@gmail.com>

* Fix Lint

Signed-off-by: houdini91 <mdstrauss91@gmail.com>
 2021-09-08 09:18:53 -04:00
Alex Goodman fee74d57b8 Update documentation to show SPDX support (#452) 
* add docs for spdx support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* copy updates for format options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-07-01 14:52:57 +00:00
Alex Goodman ecf4e5546a add help message when no arguments are provided (#455) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-30 12:53:12 -04:00
Alex Goodman 2de56c0749 force UI teardown when event is sourced from a signal interrupt (#453) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-29 18:16:32 -04:00
Alex Goodman 962e82297c Split UI from event handling (#448) 
* split UI from event handling

Signed-off-by: Alex Goodman <wagoodman@gmail.com>

* add event loop tests

Signed-off-by: Alex Goodman <wagoodman@gmail.com>

* use stereoscope cleanup function during signal handling

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* correct error wrapping in packages cmd

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* migrate ui event handlers to ui package

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* clarify command worker input var + remove dead comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-29 18:28:09 +00:00
Samuel Dacanay 5a2e2eb679 Export the presenter interface so it may be used by external projects 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2021-06-09 10:21:55 -07:00
Dan Luhring 80e23bdb50 Add config option for import timeout (#421) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-05-25 15:01:02 -04:00
Alex Goodman c363b2b532 Add ability to pull images directly from a registry (#378) 
* add registry image source

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use explicit source for fetching image + add scheme and registry tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* adjust test variable name and add credential helper function

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 13:30:57 +00:00
Alex Goodman cd542bab5b ensure file content cataloger is using the proper scope 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:37:38 -04:00
Alex Goodman 51b13f8221 rename Contents to FileContents in app config and documentation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:34:54 -04:00
Alex Goodman c1551a03c5 add file contents cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:30:57 -04:00
Alex Goodman 870a676a5d wire up file classifier to power-user cmd 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:08:50 -04:00
Alex Goodman 9ec09add67 Add secrets search capability (#367) 
* add initial secrets cataloger

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update ETUI elements with new catalogers (file metadata, digests, and secrets)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update secrets cataloger to read full contents into memory for searching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype of parallelization secret regex search

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype with single aggregated regex

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype for secret search line-by-line

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype hybrid secrets search

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add secrets cataloger with line strategy

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* adjust verbiage towards SearchResults instead of Secrets + add tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json schema with secrets cataloger results

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address PR comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update readme with secrets config options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* ensure file catalogers call AllLocations once

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-01 21:34:15 +00:00
Alex Goodman cd925e5664 account for repoDigests data in power-user json testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-30 08:46:42 -04:00
Alex Goodman 0e9c1c1d86 arrange power-user tasks ahead of parsing the source image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:29:38 -04:00
Alex Goodman 46636ccb3c simplify command alias logic + remove deprecation warning for root command 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 15:25:04 -04:00
Alex Goodman f180d1c537 improve config parsing + fix command deprecation warning 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman 97f0f83544 add poweruser command and alias root to packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:53 -04:00
Dan Luhring babb09b3a4 Refactor and improve base URL prep for client 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-02-02 09:54:00 -05:00
Dan Luhring 6d730d24dd Lean on built-in URL parsing to enable path prefix 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-02-01 13:48:25 -05:00
Alex Goodman 6aaf9ee712 Incorporate import changes + add image overwrite option (#294) 
* incorporate import changes + add image overwrite option

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update import tests to account for arbitrary json shape

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 16:59:30 -05:00
Alex Goodman 82c8a8e17b add mem profile option and refactor python cataloger for batch requests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman be5917a058 add profiler dev option 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:13 -05:00
Alex Goodman 52bac6e2fd Add enterprise upload capability (#285) 
* add support to upload results to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add package sbom upload

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add dockerfile support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add manifest, index, and dockerfile import functions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* schema version to json output + enhance json schema generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* modify package SBOM shape to be entire syft document + add etui updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add import image config and manifest support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add config options for import to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate final stereoscope and client-go deps

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-09 22:20:53 -05:00
Alex Goodman 569a598df7 minimize pointer usage & order return types consistently 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman c892c3609e improve doc comments 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 6f7a4fd3e4 move source metadata upstream and fix tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 9668341a14 rename scope to source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Dan Luhring 4861f69d7c Fix spelling in logger setup 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-14 11:35:55 -05:00
Alex Goodman e6b71486b0 modify version command to match grype (#196) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-06 13:13:52 -04:00
Alex Goodman 3d91a66536 Add OCI support + use URI schemes for user image input (#178) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update docs to reflect OCI image sources + URI scheme change

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope pin

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:24:24 -04:00
Samuel Dacanay b467964044 port over shell completion w/ cobra from grype, find/replace, etc. 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-15 09:07:17 -07:00
Samuel Dacanay ef64a6f206 Add support for JSON version output 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

Make json version output always verbose, cleanup struct tag

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

Use camel case for json

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-14 13:48:27 -07:00
Alex Goodman 8a4886ec0e Add package URL support to the CycloneDX presenter (#164) 
* add package URL support to the CycloneDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap license tags with licenses

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-30 21:40:19 -04:00
Alex Goodman f892289e7c Add CycloneDX presenter (#157) 
* add CycloneDX presenter + BOM Descriptor extension

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add docstrings to cyclonedx presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-24 20:43:29 -04:00
Alfredo Deza 3bcae045cd cmd: allow no args passed, don't error 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-11 08:01:19 -04:00
Alex Goodman dc8dfc8457 fix panic on top-level log (#125) 2020-08-06 08:29:52 -04:00
Dan Luhring 70e673204c Add poetry cataloger (#121) 
* Minor cleanup

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update pkg Type definition to string

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Implement poetry.lock parsing

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Address CI issues

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Integrate Alex's changes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-04 18:22:43 -04:00
Alex GoodmanandAlfredo Deza 2560266e38 Initial README (#120) 
* initial readme + logging and output fixes to support descriptions

* minor tweaks to README descriptions

* simplify phrasing

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* add comment for example gif

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* spelling fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* update phrasing

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* simplify TODO note

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* grammar fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* phrase fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* rm readme bash block indicators

* clarify config examples are default values

* rm value

Co-authored-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-08-04 15:22:34 -04:00
Alex Goodman 78515da285 replace zap logger with logrus (#116) 2020-08-01 11:56:38 -04:00
Alex Goodman 271ba35c85 Export UI handlers for reuse in other tools (#113) 
* export UI handlers for reuse in other tools

* bump jotframe to fix cursor issues at frame close
 2020-07-30 15:16:58 -04:00
Alex Goodman 32071b0bf1 add default table presenter 2020-07-23 21:48:12 -04:00
Alex Goodman a4016d35ce rename to syft 2020-07-23 20:54:04 -04:00