dependabot[bot]
6d206910f0
chore(deps): bump anchore/sbom-action ( #4544 )
...
Bumps the actions-minor-patch group with 1 update in the / directory: [anchore/sbom-action](https://github.com/anchore/sbom-action ).
Updates `anchore/sbom-action` from 0.21.0 to 0.21.1
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](https://github.com/anchore/sbom-action/compare/a930d0ac434e3182448fe678398ba5713717112a...0b82b0b1a22399a1c542d4d656f70cd903571b5c )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.21.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-minor-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-09 13:13:44 -05:00
Rez Moss
2f3a504acf
Feat/catalog mongodb bin ( #4541 )
...
* fixed #4550 , catalog mongodb bin
Signed-off-by: Rez Moss <hi@rezmoss.com >
* fixed #4550 , catalog mongodb bin
Signed-off-by: Rez Moss <hi@rezmoss.com >
---------
Signed-off-by: Rez Moss <hi@rezmoss.com >
2026-01-08 12:18:51 -05:00
anchore-actions-token-generator[bot] and spiffcs
d24e843c45
chore(deps): update tools to latest versions ( #4537 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
2026-01-08 11:56:50 -05:00
Will Murphy
83a4528fff
chore: sync generated file immediately ( #4538 )
...
A CI failure was observed where a generated file was only partly written
when the CI job immediately tried to read it. Put in an fs.Sync call to
eliminate this flakiness.
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com >
2026-01-08 09:01:17 -05:00
anchore-actions-token-generator[bot] and willmurphyscode
11e871566b
chore(deps): update anchore dependencies ( #4535 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: willmurphyscode <12529630+willmurphyscode@users.noreply.github.com >
2026-01-08 12:16:49 +00:00
promalert
cc1a7dfae8
chore: fix some comments to improve readability ( #4533 )
...
Signed-off-by: promalert <promalert@outlook.com >
2026-01-07 15:48:40 +00:00
Rez Moss and Alex Goodman
3a3a86eb01
fixed #4430 exclude dev pnpm pkg ( #4487 )
...
* fixed #4430 exclude dev pnpm pkg
Signed-off-by: Rez Moss <hi@rezmoss.com >
* use existing dev deps option
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fixed #4430 exclude dev pnpm pkg, add test
Signed-off-by: Rez Moss <hi@rezmoss.com >
* fixed #4430 exclude dev pnpm pkg, add test
Signed-off-by: Rez Moss <hi@rezmoss.com >
---------
Signed-off-by: Rez Moss <hi@rezmoss.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-01-07 10:39:16 -05:00
witchcraze
6509b7079e
add istio classifier ( #4521 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2026-01-07 10:36:39 -05:00
Rez Moss
7f1d57d06f
feat: detect older bitnami img packages ( #4532 )
...
Signed-off-by: Rez Moss <hi@rezmoss.com >
2026-01-07 10:07:33 -05:00
Alex Goodman
ed339e4fed
fix: ensure java image build failures stop the build ( #4531 )
...
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-01-06 11:43:51 -05:00
dependabot[bot] and Alex Goodman
3ea6a03cd0
chore(deps): bump the go-minor-patch group with 3 updates ( #4524 )
...
* chore(deps): bump the go-minor-patch group with 3 updates
Bumps the go-minor-patch group with 3 updates: [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml ), [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ) and [github.com/invopop/jsonschema](https://github.com/invopop/jsonschema ).
Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/BurntSushi/toml/releases )
- [Commits](https://github.com/BurntSushi/toml/compare/v1.5.0...v1.6.0 )
Updates `github.com/go-git/go-git/v5` from 5.16.3 to 5.16.4
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4 )
Updates `github.com/invopop/jsonschema` from 0.7.0 to 0.13.0
- [Commits](https://github.com/invopop/jsonschema/compare/v0.7.0...v0.13.0 )
---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
dependency-version: 1.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-minor-patch
- dependency-name: github.com/go-git/go-git/v5
dependency-version: 5.16.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: go-minor-patch
- dependency-name: github.com/invopop/jsonschema
dependency-version: 0.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-minor-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* port breaking jsonschema lib changes
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* regenerate the existing json schema with new generation code
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-01-06 15:25:43 +00:00
witchcraze
81dd955871
add envoy binary classifier ( #4530 )
...
* add envoy classifier
Signed-off-by: witchcraze <witchcraze@gmail.com >
* add envoy classifier
Signed-off-by: witchcraze <witchcraze@gmail.com >
2026-01-06 08:45:01 -05:00
Alex Goodman
48948ddb8f
add container support for graalvm fixture ( #4528 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-01-05 14:18:12 -05:00
dependabot[bot]
63273b1b00
chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates ( #4525 )
...
Bumps the actions-minor-patch group with 2 updates in the / directory: [docker/login-action](https://github.com/docker/login-action ) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ).
Updates `docker/login-action` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/184bdaa0721073962dff0199f1fb9940f07167d1...5e57cd118135c172c3672efd75eb46360885c0ef )
Updates `zizmorcore/zizmor-action` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/e673c3917a1aef3c65c972347ed84ccd013ecda4...e639db99335bc9038abc0e066dfcd72e23d26fb4 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-minor-patch
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-minor-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 12:48:30 -05:00
dependabot[bot]
92e523caa6
chore(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 ( #4526 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 12:48:20 -05:00
dependabot[bot]
9b33b8a3d6
chore(deps): bump actions/upload-artifact from 4.4.3 to 6.0.0 ( #4527 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.4.3 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...b7c566a772e6b6bfb58ed0dc250532a479d7789f )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 12:48:13 -05:00
Alex Goodman
29a0b19a21
Group dependabot updates ( #4522 )
...
* group dependabot updates
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use directories key
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-01-05 16:57:38 +00:00
Luis Miguel Santos and Luis M. Santos
ea43506196
fix: corrects handling of UNC root paths in windows.
...
---------
Signed-off-by: Luis M. Santos <luis.santos2@nih.gov >
Co-authored-by: Luis M. Santos <luis.santos2@nih.gov >
2026-01-05 11:32:07 -05:00
Rez Moss
2c96279df9
fix: traefik binary classifier ( #4499 )
...
Signed-off-by: Rez Moss <hi@rezmoss.com >
2026-01-05 11:14:00 -05:00
dependabot[bot]
488511f69d
chore(deps): bump modernc.org/sqlite from 1.41.0 to 1.42.2 ( #4513 )
...
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite ) from 1.41.0 to 1.42.2.
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.41.0...v1.42.2 )
---
updated-dependencies:
- dependency-name: modernc.org/sqlite
dependency-version: 1.42.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 10:46:39 -05:00
Alex Goodman
11fed90075
Migrate CI to runs-on ( #4351 )
...
* migrate to runs-on runners
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* keep validations on x64
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* correct ubuntu arm refs
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* bust cache
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use artifacts api between jobs
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* download individual artifacts
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* troubleshoot artifact upload
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* disable magic cache
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix deps
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* attempt to replicate layout
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* change asset names and remove extras
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* better artifact filters
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use action to get artifacts working
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add sboms
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* simpler artifacts
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add logging
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove logging
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* make artifacts executable
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* improve workflow dispatch calls
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* attempt to bring down ci times
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* update repo path
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use local config instead of shared one
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use runner labels instead of config
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use valid alias
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use compute instances for build
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* small comment on concurrency
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fixes from review
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove parallelism
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-01-05 09:53:06 -05:00
witchcraze
c8184bdb4c
add grafana classifier ( #4516 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2026-01-05 09:51:41 -05:00
witchcraze
15af992225
add valkey classifier ( #4509 )
...
* add valkey classifier
Signed-off-by: witchcraze <witchcraze@gmail.com >
* fix test path
Signed-off-by: witchcraze <witchcraze@gmail.com >
* Run 'go generate ./internal/capabilities'
Signed-off-by: witchcraze <witchcraze@gmail.com >
2026-01-05 09:40:35 -05:00
dependabot[bot]
1e15428c6f
chore(deps): bump anchore/sbom-action from 0.20.11 to 0.21.0 ( #4501 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.11 to 0.21.0.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](https://github.com/anchore/sbom-action/compare/43a17d6e7add2b5535efe4dcae9952337c479a93...a930d0ac434e3182448fe678398ba5713717112a )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 09:19:40 -05:00
dependabot[bot]
d1adfdc3a6
chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.7 to 6.7.8 ( #4502 )
...
Bumps [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty ) from 6.7.7 to 6.7.8.
- [Release notes](https://github.com/jedib0t/go-pretty/releases )
- [Commits](https://github.com/jedib0t/go-pretty/compare/v6.7.7...v6.7.8 )
---
updated-dependencies:
- dependency-name: github.com/jedib0t/go-pretty/v6
dependency-version: 6.7.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 09:19:34 -05:00
dependabot[bot]
0028165062
chore(deps): bump github.com/spdx/tools-golang from 0.5.5 to 0.5.6 ( #4503 )
...
Bumps [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang ) from 0.5.5 to 0.5.6.
- [Release notes](https://github.com/spdx/tools-golang/releases )
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md )
- [Commits](https://github.com/spdx/tools-golang/compare/v0.5.5...v0.5.6 )
---
updated-dependencies:
- dependency-name: github.com/spdx/tools-golang
dependency-version: 0.5.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 09:19:29 -05:00
anchore-actions-token-generator[bot] and spiffcs
997a76712f
chore(deps): update tools to latest versions ( #4504 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
2026-01-05 09:19:24 -05:00
dependabot[bot]
e44ef53489
chore(deps): bump github.com/hashicorp/go-getter from 1.8.3 to 1.8.4 ( #4518 )
...
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter ) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/hashicorp/go-getter/releases )
- [Commits](https://github.com/hashicorp/go-getter/compare/v1.8.3...v1.8.4 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
dependency-version: 1.8.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 09:17:46 -05:00
dependabot[bot]
e0708e725f
chore(deps): bump github.com/gkampitakis/go-snaps from 0.5.18 to 0.5.19 ( #4520 )
...
Bumps [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps ) from 0.5.18 to 0.5.19.
- [Release notes](https://github.com/gkampitakis/go-snaps/releases )
- [Commits](https://github.com/gkampitakis/go-snaps/compare/0.5.18...v0.5.19 )
---
updated-dependencies:
- dependency-name: github.com/gkampitakis/go-snaps
dependency-version: 0.5.19
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-05 09:17:39 -05:00
Alex Goodman
e9e3494853
remove debug output ( #4496 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-22 14:51:39 -05:00
b3c70da3ea
Add experimental cataloger capabilities command ( #4317 )
...
* add info command from generated capabilities
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* correct gentoo and arch ecosystems
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* rename os pkg types
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* better binary cataloger description
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* expose metadata and pacakge types in json
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* expose json schema types
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add completeness tests for metadata types
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* latest generation
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix linting
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* improve testing a docs
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix tests and linting
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* restore goreleaser config
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* tweak diagram
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix pdm
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* chore: java binary data
Signed-off-by: Keith Zantow <kzantow@gmail.com >
* new capability descriptions for gguf and python
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* correct poetry lock integrity hash claim
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix compile error
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix: remove purl version from overrides
Signed-off-by: Keith Zantow <kzantow@gmail.com >
* fix lua deps ref
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* keep gguf as ai ecosystem
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* split packages.yaml to multiple files by go package
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* ensure tests do not use go test cache
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* sort json output for info command
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* docs: fix ocaml, php, and portage capabilities yaml
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com >
* chore: update erlang capabilities
Signed-off-by: Keith Zantow <kzantow@gmail.com >
* chore: update java capabilities
Signed-off-by: Keith Zantow <kzantow@gmail.com >
* chore: update javascript capabilities
Signed-off-by: Keith Zantow <kzantow@gmail.com >
* chore: update linux kernel capabilities
Signed-off-by: Keith Zantow <kzantow@gmail.com >
* remove missing tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix package.yaml references
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* revert license list change
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* check for drift in capability descriptions
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* regenerate capabilities
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* test cleanup
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* use fixture cache in static analysis
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* claim fixtures pre-req for cap generation
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* update documentation with correct regeneration procedure
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* chore: ruby-gemspec-cataloger finds no dependencies
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com >
* chore: fix python docs and config comment
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com >
* chore: commit re-generated java yaml
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com >
* add cataloger selection to caps command
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* re-generate cap yamls
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix tests for cataloger selection
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix cli test
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add missing tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix linting
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* rename cmd to `cataloger info`
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* [wip] change capability description locations
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* [wip] continued
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* [wip] adjust for import cycles
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* correct docs
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix linting
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Signed-off-by: Keith Zantow <kzantow@gmail.com >
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com >
Co-authored-by: Keith Zantow <kzantow@gmail.com >
Co-authored-by: Will Murphy <willmurphyscode@users.noreply.github.com >
2025-12-22 19:34:10 +00:00
Alex Goodman
ae1a247f3d
Unpin fixture dependencies that will always float ( #4495 )
...
* unpin dependencies for package dedup case
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* prevent make from blocking tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add check
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-22 19:17:58 +00:00
Alex Goodman
0ea920ba6d
Decompress UPX packed binaries to extract golang build info (ELF formatted binaries with lzma method only) ( #4480 )
...
* decompress upx packed binaries
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix linting and remove dead code
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-22 14:17:38 +00:00
anchore-actions-token-generator[bot] and spiffcs
7ef4703454
chore(deps): update tools to latest versions ( #4491 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
2025-12-22 09:15:51 -05:00
dependabot[bot]
8334fb04ec
chore(deps): bump modernc.org/sqlite from 1.40.1 to 1.41.0 ( #4489 )
...
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite ) from 1.40.1 to 1.41.0.
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.40.1...v1.41.0 )
---
updated-dependencies:
- dependency-name: modernc.org/sqlite
dependency-version: 1.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-19 11:00:31 -05:00
VictorHuu
c9760d2341
feat: snap can be queried by revision and ``track/risk/branch`` ( #4439 )
...
---------
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
2025-12-18 15:41:36 -05:00
Rez Moss and Christopher Phillips
74c9380248
fix: 4423 dotnet-deps cataloger skips project type by def
...
---------
Signed-off-by: Rez Moss <hi@rezmoss.com >
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
Signed-off-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com >
Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
2025-12-18 13:38:47 -05:00
Alex Goodman
7ed733c3fb
signpost to docs site ( #4483 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-17 18:00:38 +00:00
dependabot[bot]
a39c600913
chore(deps): bump github/codeql-action from 4.31.8 to 4.31.9 ( #4481 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.8 to 4.31.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/1b168cd39490f61582a9beae412bb7057a6b2c4e...5d4e8d1aca955e8d8589aabd499c5cae939e33c7 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-17 10:20:52 -05:00
dependabot[bot]
a2020fe1c7
chore(deps): bump github.com/goccy/go-yaml from 1.19.0 to 1.19.1 ( #4482 )
...
Bumps [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml ) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/goccy/go-yaml/releases )
- [Changelog](https://github.com/goccy/go-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/goccy/go-yaml/compare/v1.19.0...v1.19.1 )
---
updated-dependencies:
- dependency-name: github.com/goccy/go-yaml
dependency-version: 1.19.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-17 10:20:43 -05:00
Rez Moss and Alex Goodman
c79a57b6a1
Detect embedded deps.json in .NET binaries ( #4375 )
...
* syft detect embedded deps.json,dotnet , fixed #4344
Signed-off-by: Rez Moss <hi@rezmoss.com >
* [wip] have pe utils process embedded dep.json
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* [wip] add PoC bundler processing
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* [wip] search for bundle marker within pe sections
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* put bundle parsing for multiple .net versions under test
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Rez Moss <hi@rezmoss.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-16 08:35:19 -05:00
dependabot[bot]
2c97ff1b24
chore(deps): bump actions/cache from 5.0.0 to 5.0.1 ( #4476 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/a7833574556fa59680c1b7cb190c1735db73ebf0...9255dc7a253b0ccc959486e2bca901246202afeb )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-16 08:28:51 -05:00
dependabot[bot]
e760a7cad4
chore(deps): bump actions/cache in /.github/actions/bootstrap ( #4477 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/a7833574556fa59680c1b7cb190c1735db73ebf0...9255dc7a253b0ccc959486e2bca901246202afeb )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-16 08:28:48 -05:00
anchore-actions-token-generator[bot] and spiffcs
e1ae4e1112
chore(deps): update tools to latest versions ( #4473 )
...
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
2025-12-16 08:28:44 -05:00
Alex Goodman
beb70891e5
unapply base path for resolver inbound requests ( #4478 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-16 08:28:12 -05:00
Rez Moss and Keith Zantow
e0b61a3ae3
fix: golang PURL should include full module ( #4395 )
...
* fixed #4316 go mod with ver purl
Signed-off-by: Rez Moss <hi@rezmoss.com >
* go mod purl fixed, added func to handle go.mod
Signed-off-by: Rez Moss <hi@rezmoss.com >
* fix: use module name in PURL string everywhere
Signed-off-by: Keith Zantow <kzantow@gmail.com >
---------
Signed-off-by: Rez Moss <hi@rezmoss.com >
Signed-off-by: Keith Zantow <kzantow@gmail.com >
Co-authored-by: Keith Zantow <kzantow@gmail.com >
2025-12-12 14:19:26 -05:00
VictorHuu and Alex Goodman
4c38ee1932
fix:best effort to get the os info of an ELF binary ( #4438 )
...
* fix:the os of an elf binary should be detected even when the os version is empty
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore:revoke the update of appCpe
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore:resume the testcase
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* fix:revoke the possible compromise to the json schema
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* fix:align with the json schema
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* add a json schema(pre-relase,may be in conflict with others')
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore:add a json schema
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore:revert the accidental change to 16.1.0
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* regression/fix:best effort to get the os info
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore:resume the previous json file
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* update the schema ver to 16.2.0
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore:no breaking behavior
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* chore: follow the guide of the README.md
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* appCpe is temporarily unused
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
* preserve json field for osCPE
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Yuntao Hu <victorhu493@gmail.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-12 19:13:59 +00:00
Alex Goodman
6be0a9abc4
Improve PR template ( #4472 )
...
* improve pr template
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* incorporate feedback
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-12 15:45:29 +00:00
Alexandre Steppé
ea1f4cba38
feat: add support for Gemfile.next.lock ( #4457 )
...
Signed-off-by: Alexandre Steppé <alexandre.steppe@gmail.com >
2025-12-12 10:20:53 -05:00
VictorHuu
c8982b887d
chore:cancel in-progress workflows for new commits on same PR ( #4465 )
...
Signed-off-by: VictorHuu <victorhu493@gmail.com >
2025-12-12 10:20:20 -05:00
dependabot[bot]
Rez Moss
anchore-actions-token-generator[bot]andspiffcs
Will Murphy
promalert
witchcraze
Luis Miguel SantosandLuis M. Santos
VictorHuu
Alexandre Steppé