oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 22:12:28 +01:00
Code Issues Packages Projects Releases Wiki Activity
883 Commits 65 Branches 273 Tags
635904fcb6f7c16309fb5ec66f4c27c1d7703e15
Commit Graph
72 Commits
Author SHA1 Message Date
Alex Goodman 635904fcb6 Reduce PR check failures (#858) 2022-03-02 17:51:37 +00:00
Christopher Angelo Phillips 256e85bc12 510 - SBOM attestation stdout (#785) 
add syft attest command to produce an attestation as application/vnd.in-toto+json to standard out using on disk PKI

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2022-02-22 21:45:12 -05:00
Alex Goodman 55c7f3d1e7 Upgrade install.sh to support installations for previous versions (#830) 2022-02-15 22:23:11 +00:00
Christopher Angelo Phillips 8f96adacfb Upgrade golang to 1.17 (#809) 
* initial upgrade workflow

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

* update go.mod

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2022-02-09 11:08:24 -05:00
Alex Goodman 341288ba29 Normalize snapshot and release artifacts (#789) 
* refactor signing steps in release/snapshot workflows

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* show signing logs on snapshot or release failure

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update install.sh + tests to account for new goreleaser changes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update cli tests to account for new goreleaser build names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix acceptance test to use new snapshot bin path

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add notarization

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address review comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2022-02-04 12:41:37 -05:00
Alex Goodman f38b0b7256 Refactor install.sh (#765) 
* [wip] get assets based on gh api

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* put install.sh download_asset fn under test

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* put install.sh install_asset fn under test

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use zip for darwin installs

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix install.sh negative test cases

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* allow errors to propagate in install.sh

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove exit on error from install.sh tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add more docs around install.sh helpers

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add integration tests for install.sh

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add install.sh testing to pipeline

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add install test cache to CI

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* make colors globally available

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* test download against github release

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* always test release-based install against latest release

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use better install.sh test names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2022-02-01 16:58:47 -05:00
Christopher Angelo Phillips 1c63943055 Add arm64 image support and Darwin M1 support to .goreleaser.yaml (#591) 
* update support arm64

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>

* small update syntax

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>

* restore release command

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>

* add docker manifests

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
 2021-10-26 09:42:35 -04:00
Alex Goodman 4bf08e6b6d swap out the changelog generator for chronicle tool (#580) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-21 13:37:13 -04:00
Christopher Angelo Phillips 10fa8dc7c9 Add windows support (#548) 
* update  build tags, ui support, and stereoscope, and release for windows support

Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
 2021-10-21 12:49:36 -04:00
Alex Goodman cbdb72ea22 remove unnecessary codeql checkout from second parent commit (#567) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-18 13:31:19 -04:00
Keith Zantow e5caba043d Add SBOM to releases (#500) 
Signed-off-by: Keith Zantow <kzantow@gmail.com>
 2021-09-24 20:21:23 -04:00
Alex Goodman ddfc8e20c0 Revert "disable docker releases (workaround) (#493)" (#501) 
This reverts commit 06dcd3261d.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-09-13 13:06:23 -04:00
Alex Goodman 06dcd3261d disable docker releases (workaround) (#493) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-09-03 21:29:34 +00:00
Alex Goodman 6e70d8af98 respond to pull_request events for internal PRs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-16 12:48:50 -04:00
Alex Goodman 5e1e2628cf align check names to release quality gate 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 16:20:21 -04:00
Alex Goodman 0c100c4037 change mac acceptance test image.tar path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 09:57:13 -04:00
Alex Goodman 8658abc8c4 ignore failures on benchmark sticky comment 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-29 11:59:49 -04:00
Alex Goodman 2a9b1b2680 move docker login after keychain creation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-26 10:41:44 -04:00
Alex Goodman cfec812804 enable release environment (manual approval for releases) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 12:01:20 -04:00
Alex Goodman ac4b653721 fix sticky benchmark comment on PRs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 11:53:05 -04:00
Alex Goodman 51bf9f9e05 manually login to docker via cli during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 17:57:41 -04:00
Alex Goodman 1b7c755536 add file-type mix as golden image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 16:50:57 -04:00
Alex Goodman 8854d83934 cache mac acceptance image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 15:03:25 -04:00
Alex Goodman 12f419111e remove docker layer cache from validation pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 13:04:13 -04:00
Alex Goodman 77e4c89a5a bump coverage threshold + use ubuntu for snapshot builds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:28:57 -04:00
Alex Goodman e3b1522394 upgrade goreleaser + constrain pipeline tool cache 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 06:58:30 -04:00
Alex Goodman 36e4af1953 adjust jsom schema version + adopt java pom properies test fixtures 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 11:27:01 -04:00
Alex Goodman abca2c5f0b remove token usage from benchmark sticky comment action 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman f180d1c537 improve config parsing + fix command deprecation warning 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman b1b57f6ba6 remove benchmark test event filter in validations pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 1d87f07da1 update pipeline with new levels of testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:07 -04:00
Alex Goodman 83778677c1 run snapshot build on ubuntu 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-19 08:42:27 -04:00
Alex Goodman 9f57e17887 add labels to the docker image + pin the docker pipeline install version 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-18 16:28:03 -04:00
Alex Goodman e9105c180a add dockerfile + docker build step 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 16:45:20 -05:00
Alex Goodman c7b26c55ac add docker to mac instance 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 14:01:00 -05:00
Alex Goodman 5e62bca72f Revert "Add docker image and refactor release pipeline (#310)" 
This reverts commit 6195002ae5.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2021-03-11 12:42:18 -05:00
Dan LuhringandAlex Goodman 6195002ae5 Add docker image and refactor release pipeline (#310) 
* Create independent build targets for Mac and Linux

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Create targets for macOS signing and notarization

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Create target for Linux packaging

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update release workflow and leverage new make targets

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add release assets to release draft

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add homebrew formula release follow-up and improve Makefile

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add follow-up workflow for updating version check file

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Get rid of fetch depth 0 for checkout action

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add follow-up workflow for Docker images

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Restore wait-for-checks job

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Replace make functions with shell functions

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Account for envsubst command in bootstrap-ci-linux

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* move homebrew generation into script

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add release approval step; remove goreleaser; add docker image smoke testing in acceptance step

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* replace homebrew formula template file with heredoc template

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update release documentation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-10 13:25:31 -05:00
Dan Luhring bf2d5ed87e Pin actions/cache to v2.1.3 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-02-05 11:15:53 -05:00
Alex Goodman a56292e2e0 Revert "Add the ability to run syft from a scratch image." 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-12-16 16:54:34 -05:00
Toure Dunnon a19496b846 added: Docker login github action to publish new images 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-15 11:07:14 -05:00
Dan Luhring ecfc471ce5 Resolve security warning for macOS users (#249) 
* Add support for macOS signing and notarization

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Use Docker to run the changelog generator locally

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-04 15:47:55 -05:00
Alex Goodman cc466e47da bump python version for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-27 14:53:52 -04:00
Alex Goodman 103f0617f5 bootstrap cached deps and ci deps separately for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:42:57 -04:00
Alex Goodman 4c751cb1d4 Merge pull request #222 from VinodAnandan/main 
Enable CodeQL Security Scan
 2020-10-15 23:11:01 -04:00
Vinod Anandan 0f92f16eb6 Enable CodeQL Security Scan 
https://github.blog/2020-09-30-code-scanning-is-now-available/

remove java from codeql scan

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Vinod Anandan <vinod.anandan@jpmorgan.com>
 2020-10-16 03:02:09 +01:00
Alex Goodman 1bf1e643eb restore original release token 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 14:41:28 -04:00
Alex Goodman dcb5d6d08e remove greeter action since it is broken for forked PRs (#223) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 10:20:09 -04:00
Alex Goodman 2b932f8d65 run tests on fork PRs (#210) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 07:45:05 -04:00
Robert PrinceAlex GoodmanAlex Goodman
 		587589bfe3 Add first issue/PR welcome message action (#185) 
* Add first issue/PR welcome message action

Signed-off-by: Robert Prince <robert.prince@anchore.com>

* update first-pr-issue message with a simple greeting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-10-08 15:42:46 -04:00
Alex Goodman 956af57d3b update release token name 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 14:37:06 -04:00