Laurent Goderre
92d63df6f5
Added the SWI Prolog (swipl) ecosystem ( #3076 )
...
* Add binary classifier for swipl
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
* Added cataloger for SWI Prolog Pack packages
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-07-31 16:13:26 -04:00
witchcraze
490e05adb2
fix: traefik classifier ( #3077 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2024-07-29 09:46:51 -04:00
dependabot[bot] and Christopher Phillips
fe7c5a7174
chore(deps): bump github.com/charmbracelet/lipgloss from 0.11.1 to 0.12.1 ( #3040 )
...
* chore(deps): bump github.com/charmbracelet/lipgloss
Bumps [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss ) from 0.11.1 to 0.12.1.
- [Release notes](https://github.com/charmbracelet/lipgloss/releases )
- [Changelog](https://github.com/charmbracelet/lipgloss/blob/master/.goreleaser.yml )
- [Commits](https://github.com/charmbracelet/lipgloss/compare/v0.11.1...v0.12.1 )
---
updated-dependencies:
- dependency-name: github.com/charmbracelet/lipgloss
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: pin fedora linux/amd64 to sha
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
Signed-off-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com >
2024-07-22 10:43:17 -07:00
Keith Zantow
278b72d39b
chore: pin fedora image for elf binary test ( #3041 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2024-07-15 16:37:09 +00:00
Laurent Goderre
ceced5eb27
Add detection of Erlang in Alpine linux ( #2996 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-06-25 14:40:40 -07:00
Laurent Goderre
7a35de04ee
fix: detection of arangodb 3.12 ( #2979 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-06-20 11:11:03 -04:00
Alex Goodman
254a562b4e
Add support for reading ELF package notes with section header ( #2939 )
...
* add support for reading ELF package notes with section header
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add systemd elf package fields to json schema
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-06-07 14:38:54 -04:00
Laurent Goderre
b608ab77e1
feat: classifier for util-linux ( #2933 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-06-05 17:32:52 -04:00
Keith Zantow
ac34808b9c
feat: detect fluent-bit binaries ( #2905 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2024-05-28 10:13:06 -04:00
Laurent Goderre
7071f1e498
feat: Added functionality to convert major, minor, patch to version for binary classifier ( #2864 )
...
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-05-23 12:17:12 -04:00
Brian Ebarb and Alex Goodman
4194a2cd34
feat: add relationships to ELF package discovery ( #2715 )
...
This PR adds DependencyOf relationships when ELF packages have been discovered by the binary cataloger. The discovered file.Executable type has a []ImportedLibraries that's read from the file when discovered by syft. By mapping these imported libraries back to the package collection, syft is able to create relationships showing which packages are dependencies of other packages by just reading metadata from the ELF executable.
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Signed-off-by: Brian Ebarb <ebarb.brian@sers.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-05-09 13:53:59 -04:00
Laurent Goderre
e7b6284039
Add binary classifier for ArangoDB ( #2830 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-05-07 12:06:32 -04:00
Laurent Goderre
e353214ef8
Add detection for newer version of ErLang/OTP ( #2829 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-05-06 11:47:54 -04:00
Laurent Goderre and Keith Zantow
c9aab4863b
fix: binary character in java version ( #2766 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Keith Zantow <kzantow@gmail.com >
Co-authored-by: Keith Zantow <kzantow@gmail.com >
2024-04-11 10:32:24 -04:00
Laurent Goderre
619ace65c3
Differentiate between JRE and JDK ( #2748 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-04-05 15:10:58 -04:00
Laurent Goderre and Alex Goodman
cf17bd69b2
Add detection for Oracle GraalVM ( #2705 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-03-14 15:40:07 +00:00
6a2517b5d2
Add ELF binary package cataloger ( #2396 )
...
* feat Adds Elf package catalogger
Signed-off-by: Brian Ebarb <ebarb.brian@gmail.com >
* Add test fixtures for elf package
Signed-off-by: Colleen Divers <colleen.divers@gmail.com >
* bump JSON schema to v16.0.6 + expand test fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* less verbose logging
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove dead test code
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove unreleated swift change
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Brian Ebarb <ebarb.brian@gmail.com >
Signed-off-by: Colleen Divers <colleen.divers@gmail.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Colleen Divers <colleen.divers@gmail.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-03-14 11:16:03 -04:00
Harm Weites
356f7c92b4
fix: match OpenSSL letter releases ( #2682 )
...
* chore: match openssl 1.1 letter releases
Signed-off-by: Harm Weites <harm@weites.com >
* chore: include image sha
Signed-off-by: Harm Weites <harm@weites.com >
---------
Signed-off-by: Harm Weites <harm@weites.com >
2024-02-29 14:39:23 +00:00
17ef243956
chore(deps): update tools to latest versions ( #2616 )
...
* chore(deps): update tools to latest versions
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
* fix: update to new linter rules
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2024-02-14 14:59:49 +00:00
Laurent Goderre
5602c80edb
feat: classifier for wordpress cli binary ( #2473 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-17 11:42:03 -05:00
Andrew Garner
29c9857857
feat: binary classifiers for Percona Software For MySQL ( #2478 )
...
Signed-off-by: Andrew Garner <garnera@vmware.com >
2024-01-10 16:06:14 +00:00
Laurent Goderre
d1e4ecba42
feat: binary classifier for pypy ( #2474 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-10 10:59:25 -05:00
Laurent Goderre
fecfb2f939
fix: support traefik binary from the official Docker image ( #2484 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-10 15:57:32 +00:00
Laurent Goderre
e61aac0b53
feat: binary classifier for GCC ( #2479 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2024-01-10 10:50:38 -05:00
Christopher Angelo Phillips and Alex Goodman
7182f5b519
Upgrade binary test fixtures management ( #2444 )
...
* test: strip fixtures of any execution permissions
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* chore: add lint check for large files
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* add helper script to capture binary snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* chore: update scripts and add new dir output for snippets
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update erlang test to new generated format
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update memcached to new generator pattern
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update openjdk to named version
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: move openjdk lts to versioned folder
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: rename unversioned java to versioned folders
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: migrate bash fixture to new snippet workflow
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update script to size 600 bytes
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update go classifier to new snippet workflow
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: move haproxy new new snippet
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: add flatter haproxy example
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: update tests to new pattern
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* test: final version of snippet script
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* [wip] download bin helpers
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add manager for binary cataloger test fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add remaining binary cataloger patterns and snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* adjust gitignore to be more permissive to snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add rust darwin snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* skip tests that are missing full binaries
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* address PR feedback
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add tests for binary test fixture manager
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* highlight rows that do not have binaries or snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* bump fixture limit to 1K (found exceptions when adding snippets)
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add redis and postgres snippets
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* improve formating of fixture listing
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-01-05 21:40:03 +00:00
Laurent Goderre and Alex Goodman
a16a4ad6c9
Add ability to extend the binaries cataloguers ( #2469 )
...
* Add ability to extend the binaries cataloguers
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
* restrict binary classifier package attributes
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-01-05 15:32:07 -05:00
Christopher Angelo Phillips
2a04e06cbc
chore: update binary to -x ( #2456 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-12-22 09:50:32 -05:00
Laurent Goderre and Christopher Phillips
63e7a004cb
Added OpenSSL binary matcher ( #2416 )
...
* Added OpenSSL binary matcher
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
* chore: strip binary to smaller detection
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-12-22 09:37:09 -05:00
Christopher Angelo Phillips
3cffa0b7fd
chore: remove execute from test fixtures ( #2450 )
...
* chore: remove execute from test fixtures
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
* chore: add back ignored file
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-12-20 22:34:29 +00:00
Laurent Goderre
a635d66657
Add binary classifier for the ERLang interpretter ( #2417 )
...
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com >
2023-12-18 15:00:49 -05:00
Duane May and Alex Goodman
d4733fac1d
Add binary classifiers for MySQL and MariaDB ( #2316 )
...
* Add MySQL and MariaDB binary classifiers
Signed-off-by: Duane May <duanemay@gmail.com >
Signed-off-by: Duane May <mduane@vmware.com >
* use smallest possible binary fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Duane May <duanemay@gmail.com >
Signed-off-by: Duane May <mduane@vmware.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-11-21 16:54:41 +00:00
David Dooling
34774a0e10
Enhance redis binary classifier ( #2329 )
...
Allow existing matcher to match host identifiers longer than 12
characters. The binaries distributed by redis have the version before
payload, so add a matcher for that. Add test fixtures covering these
scenarios.
Signed-off-by: David Dooling <david.dooling@docker.com >
2023-11-21 16:24:59 +00:00
Christopher Angelo Phillips
094b41b301
chore: pin and update all workflow dependencies; add permission scopes ( #2138 )
...
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-09-15 14:18:42 -04:00
witchcraze
1848aa22cf
feat: add bash classifier ( #2055 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-08-24 10:13:59 -04:00
Sem Provoost
433a7b8a42
feat: nginx binary classifier ( #1988 )
...
Signed-off-by: SemProvoost <27961543+SemProvoost@users.noreply.github.com >
2023-08-03 13:09:31 -04:00
Alex Goodman and Weston Steimel
26c201f7f7
Extract go module versions from ldflags for binaries built by go ( #1832 )
...
* wip
Signed-off-by: Weston Steimel <weston.steimel@anchore.com >
* with golang bin ldflags refactor
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add test for golang binary cataloger for ldflag extraction
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* remove binary classfiers that overlap with new go ldflags detection
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Weston Steimel <weston.steimel@anchore.com >
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
Co-authored-by: Weston Steimel <weston.steimel@anchore.com >
2023-05-23 10:27:48 -04:00
Shane Dell
244b797a19
Create consul binary classifier ( #1738 )
...
* Create consul binary classifier
Closes #1590
Signed-off-by: Shane Dell <shanedell100@gmail.com >
* Create test for consul binary classifier
Signed-off-by: Shane Dell <shanedell100@gmail.com >
* Update version for consul. Add note that about consul version matcher is brittle
Signed-off-by: Shane Dell <shanedell100@gmail.com >
---------
Signed-off-by: Shane Dell <shanedell100@gmail.com >
2023-04-17 12:26:07 -04:00
witchcraze
f66e77e2c6
fix ruby classifier ( #1678 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-03-17 09:42:20 -04:00
Joye Lin
e3140063d4
feat: add argocd, helm, kustomize and kubectl binary classifiers ( #1663 )
...
* add argocd, helm, kustomize and kubectl binary classifiers
* update golang PURL
* address PR faceback about binary/test-fixtures/Makefile
* remove the /v[n] suffix from the PURL in both argocd and helm
---------
Signed-off-by: y12studio <y12studio@gmail.com >
2023-03-15 14:53:22 -04:00
Keith Zantow
cc0a376aba
fix: more python matching support ( #1667 )
2023-03-13 13:26:43 -04:00
witchcraze
a81e0c8008
feat: add ruby classifier ( #1665 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-03-10 08:29:40 -05:00
Keith Zantow
7714bc0521
fix: improved Python binary detection ( #1648 )
2023-03-07 10:52:29 -05:00
Weston Steimel
e92b0fa629
feat: rust toolchain binary cataloger ( #1601 )
...
Signed-off-by: Weston Steimel <weston.steimel@anchore.com >
2023-03-01 14:53:37 +00:00
Benji Visser
abfec62219
feat: haproxy binary matcher ( #1591 )
...
Signed-off-by: Benji Visser <benji@093b.org >
2023-02-23 14:39:08 -05:00
Keith Zantow
f5e20521e0
fix: merging of binary packages ( #1583 )
2023-02-22 12:03:15 -05:00
Benji Visser
e84ffc6003
feat: add perl binary classifier ( #1592 )
...
Signed-off-by: Benji Visser <benji@093b.org >
2023-02-22 09:58:05 -05:00
witchcraze and Alex Goodman
284814153d
feat: add postgresql classifier ( #1536 )
...
* add postgresql classifier
Signed-off-by: witchcraze <witchcraze@gmail.com >
* revert package dedup test upgrade
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
Co-authored-by: Alex Goodman <alex.goodman@anchore.com >
2023-02-08 14:31:17 -05:00
witchcraze
0853a50f4d
feat: add traefik classifier ( #1504 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-02-02 13:59:26 -05:00
witchcraze
7427445fe9
feat: add memcached classifier ( #1486 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-01-19 11:22:11 -05:00
witchcraze
e063471c66
feat: add apache httpd binary classifier ( #1448 )
...
Signed-off-by: witchcraze <witchcraze@gmail.com >
2023-01-12 10:50:01 -05:00
Laurent Goderre
witchcraze
dependabot[bot]andChristopher Phillips
Keith Zantow
Alex Goodman
Brian EbarbandAlex Goodman
Harm Weites
Andrew Garner
Duane MayandAlex Goodman
David Dooling
Sem Provoost
Shane Dell
Joye Lin
Benji Visser
