oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-11 21:57:22 +02:00
Code Issues Packages Projects Releases Wiki Activity
427 Commits 63 Branches 272 Tags
82c8a8e17b406d40aaecbd426c37fb734edd0bd6
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman 82c8a8e17b add mem profile option and refactor python cataloger for batch requests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman be5917a058 add profiler dev option 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:13 -05:00
Alex Goodman 3ce7eabc98 bump stereoscope to remove tree-catalog syft check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-03 16:20:17 -05:00
Alex Goodman 2989d3d975 include CPEs with elementds from POM GroupId fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-01 08:00:49 -05:00
Alex Goodman 8a17bfb69f generate json schema from struct definitions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-20 15:47:10 -05:00
Alex Goodman 3aaa0e5566 move package purl and cpes (identities) to pkg.Package 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-19 11:25:51 -05:00
Alex Goodman 030427bb33 rename json artifact to package + update resolver integrity checks 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 569a598df7 minimize pointer usage & order return types consistently 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman c892c3609e improve doc comments 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 62b03f3a91 dont export structs used for unmarshaling 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 4b45c42f5a make cyclonedx presenter generally reusable (for grype) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman f46de19c6b migrate scope option to image metadata (from source) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 91baabe5a1 add image metadata as catalogFromJSON return 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 6f7a4fd3e4 move source metadata upstream and fix tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman aa0d444fd4 fix tests to use location instead of file.Reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman b694dacb21 add source.Location + reorient Resolvers to use it 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman 9668341a14 rename scope to source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman 495fb0a45f add sbom document import lib helper function 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:36:51 -05:00
Alex Goodman 7964c27bd8 add source to packages found by rpmdb cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 09:27:08 -05:00
Alex Goodman 7e270bf76c restore the checksum file during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 15:11:51 -05:00
Alex Goodman fde37b4b56 provide goreleaser asset version via env var 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 14:36:24 -05:00
Alex Goodman 2a329002b8 enhance dpkg support by parsing md5sum and copyright file sources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 11:06:34 -05:00
Alex Goodman a6365886ad add warning log level 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-10 15:09:41 -05:00
Alex Goodman 6aba2f48d4 split out rpmdb file processing to helper + lint fixes 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 10:44:27 -05:00
Alex Goodman 0205e72be9 ensure resolvers ignore directories for "FilesBy*" methods 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:38 -05:00
Alex Goodman 8095cd9980 add rpmdb file info to cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:23 -05:00
Alex Goodman 773581704c bump threshold for inline compare for jenkins image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 15:14:32 -04:00
Alex Goodman e2593cd6b7 remove extra fields from the compare script metadata namedtuple 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:59:53 -04:00
Alex Goodman 232cd13035 update tests for enhanced java pkg pairings 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:44:45 -04:00
Alex Goodman 2532928afa bump java compare testing thresholds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:06:47 -04:00
Alex Goodman 03dbfb8dfb improve java name and version extraction as well as parent pkg pairing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 08:12:25 -04:00
Alex Goodman a5cba13ddf enable more flexible java manifest structure (closer to the spec) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 16:26:04 -04:00
Alex Goodman a4f22e65fc expand compare testing images 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:51 -04:00
Alex Goodman ab45be98b8 append java nested package names to the virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:34 -04:00
Alex Goodman fc991bc62e partial java comparison with extra metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 12:40:49 -04:00
Alex Goodman 1230650771 allow for java manifest data to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 11:28:27 -04:00
Alex Goodman 2675891110 remove parent java package from json && add java manifest section parsing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 17:19:06 -04:00
Alex Goodman 62f6146c37 do not include optional fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:58:54 -04:00
Alex Goodman 8bcba7d830 update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman 76c8f24090 add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Alex Goodman cc466e47da bump python version for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-27 14:53:52 -04:00
Alex Goodman 6eb36bc3c8 allow for optional fields in npm metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 15:00:55 -04:00
Alex Goodman 1cdf2b9151 remove cyclonedx from future plans (already implemented) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 11:05:28 -04:00
Alex Goodman 103f0617f5 bootstrap cached deps and ci deps separately for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:42:57 -04:00
Alex Goodman 7d55bca0a0 allow for python metadata fields to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:29:52 -04:00
Alex Goodman 2e5ff4a995 add top_level.txt processing to python package cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 12:39:03 -04:00
Alex Goodman 1414d1fbc3 add test coverage for python pacakge cataloger and update catalog interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman 7fc926d40d add python author and emil fields + add metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman 0ce8701e73 split python package catalogers by image vs directory 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:48:26 -04:00
Alex Goodman d4ca0ab167 expand the resolver to include content requests for a single reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:40:14 -04:00
Alex Goodman 6cd9c2b771 upgrade cataloger interface to use full resolver (remove SelectFiles function) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 10:49:33 -04:00
Alex Goodman 931c796158 add dynamic package.json parsing of author field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-20 15:23:04 -04:00
Alex Goodman 1bf1e643eb restore original release token 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 14:41:28 -04:00
Alex Goodman 4a8ee15e87 fix syft version verbiage 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 11:50:23 -04:00
Alex Goodman 5d0909f31e add regression test to cover issue #212 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-14 07:22:19 -04:00
Alex Goodman 956af57d3b update release token name 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 14:37:06 -04:00
Alex Goodman 262a0888a8 fix release pipeline to wait for GHA check names 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 13:57:43 -04:00
Alex Goodman 9edbc65bce move unicode regex to static space 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:55:57 -04:00
Alex Goodman 398d8903e7 finalize gemspec parser + update json schema to match 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman 46c74865e5 add render unicode in gemspec parser 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman 1f0f6fa3e5 more gemspec tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:03 -04:00
Alex Goodman abdd00cd24 rename gem parsers and catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman 10b44f5311 split catalogers into two sets, one for images another for directory scans 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman 1c320a8382 defer to GenericCataloger instances for pkg catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman 2844b9878f add release notification 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 23:21:16 -04:00
Alex Goodman 8b81c87d18 remove unreleased tags and exclude size labels 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 22:59:19 -04:00
Alex Goodman 9bd9dad76c remove unrelease changelog option 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 18:11:02 -04:00
Alex Goodman 6d9f9a9b3b pin the two tags used for release autochangelog 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 17:57:51 -04:00
Alex Goodman 50cb5612d0 fix github releaser changelog intake 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 17:20:27 -04:00
Alex Goodman 080f010746 remove tty requirement from release process 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 17:07:59 -04:00
Alex Goodman afce14388b replace in-repo asset 2020-08-14 13:58:45 -04:00
Alex Goodman 676544b6ab use token on release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 18:28:43 -04:00
Alex Goodman fa5d2b5d98 fix readme installation notice 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 11:42:58 -04:00
Alex Goodman 076d5c2f1a fix ui handlers to write before first event 2020-07-31 17:53:22 -04:00
Alex Goodman e3976596f3 pull in fix for bounds check progress formatting values in etui 2020-07-31 06:56:20 -04:00
Alex Goodman ad1a72c6ff ignore prerelease verions when uploading version file on release 2020-07-29 14:54:47 -04:00
Alex Goodman 06f8355fce finalize update check URL 2020-07-27 15:13:41 -04:00
Alex Goodman 19eadde9ca use aws creds for version file upload 2020-07-27 09:55:11 -04:00
Alex Goodman d21de64cb3 use mount path for version upload 2020-07-27 09:35:55 -04:00
Alex Goodman 6536f0bb36 upload version check file on release 2020-07-27 09:30:05 -04:00
Alex Goodman 2e15d854eb bump circle resources 2020-07-25 19:08:19 -04:00
Alex Goodman 78c3652759 bump bouncer version 2020-07-25 16:55:41 -04:00
Alex Goodman 2502814143 rollup static analysis to make target 2020-07-25 16:40:37 -04:00
Alex Goodman 991bf203da bust old imgbom cache 2020-07-25 10:36:17 -04:00
Alex Goodman 05c78de9d3 generate java fixtures ahead of tests 2020-07-25 10:06:52 -04:00
Alex Goodman c9dea59232 verify signing fingerprint 2020-07-25 09:59:48 -04:00
Alex Goodman 1ba0678cf6 provide signed checksums 2020-07-25 08:42:50 -04:00
Alex Goodman c814379c80 add auto prerelease option 2020-07-25 07:33:24 -04:00
Alex Goodman f3428e49b8 add release quality gate 2020-07-25 07:23:15 -04:00
Alex Goodman 585569e929 fix gha go cache key; rm brew until oss release 2020-07-25 07:18:21 -04:00
Alex Goodman 32bd57886e add publish release 2020-07-25 07:09:20 -04:00
Alex Goodman 44f26c7f90 update release quality gate version 2020-07-25 07:03:57 -04:00
Alex Goodman 2e458cd73d make acceptance test results dir on run 2020-07-24 18:04:52 -04:00
Alex Goodman 14ec30aee1 fix acceptance test compare script & persist 2020-07-24 17:41:22 -04:00
Alex Goodman 32071b0bf1 add default table presenter 2020-07-23 21:48:12 -04:00
Alex Goodman 0a0bc68e95 show verbose test output to prevent circleci kills 2020-07-23 21:47:11 -04:00
Alex Goodman a4016d35ce rename to syft 2020-07-23 20:54:04 -04:00
Alex Goodman 502e2afd06 fix linting issue 2020-07-10 07:45:13 -04:00
Alex Goodman 15ff94b56b tweak java manifest version processing 2020-07-10 07:41:13 -04:00
Alex Goodman 4c7d9ccef7 simplify unzip; update java error statements 2020-07-09 11:53:52 -04:00