oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-04 16:36:40 +01:00
Code Issues Packages Projects Releases Wiki Activity
564 Commits 66 Branches 274 Tags
85511687026de9010ed2e63d541e93a1e12b4c5b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman 8551168702 capitalize file type strings 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-29 12:07:41 -04:00
Alex Goodman 8658abc8c4 ignore failures on benchmark sticky comment 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-29 11:59:49 -04:00
Alex Goodman 9abdb174d5 ensure pkg.Catalog path index deduplicates real vs virtual paths 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-26 13:27:24 -04:00
Alex Goodman 2a9b1b2680 move docker login after keychain creation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-26 10:41:44 -04:00
Alex Goodman cfec812804 enable release environment (manual approval for releases) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 12:01:20 -04:00
Alex Goodman ac4b653721 fix sticky benchmark comment on PRs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 11:53:05 -04:00
Alex Goodman 51bf9f9e05 manually login to docker via cli during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 17:57:41 -04:00
Alex Goodman 1b7c755536 add file-type mix as golden image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 16:50:57 -04:00
Alex Goodman 8854d83934 cache mac acceptance image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 15:03:25 -04:00
Alex Goodman 3ef30f99be pull in stereoscope cache fix + add test cache makefile target helpers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 14:31:59 -04:00
Alex Goodman 12f419111e remove docker layer cache from validation pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 13:04:13 -04:00
Alex Goodman 68c4bf8bbe update documentation to reflect root vs packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 13:00:25 -04:00
Alex Goodman 929b78efbf remove prealloc nolint rule in catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 12:56:00 -04:00
Alex Goodman d420368ba9 add tests around new file metadata cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 11:00:59 -04:00
Alex Goodman 40199096e9 stabilize json file metadata presenter order 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 11:00:36 -04:00
Alex Goodman 0e9c1c1d86 arrange power-user tasks ahead of parsing the source image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:29:38 -04:00
Alex Goodman 77e4c89a5a bump coverage threshold + use ubuntu for snapshot builds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:28:57 -04:00
Alex Goodman e3b1522394 upgrade goreleaser + constrain pipeline tool cache 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 06:58:30 -04:00
Alex Goodman 46636ccb3c simplify command alias logic + remove deprecation warning for root command 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 15:25:04 -04:00
Alex Goodman 36e4af1953 adjust jsom schema version + adopt java pom properies test fixtures 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 11:27:01 -04:00
Alex Goodman abca2c5f0b remove token usage from benchmark sticky comment action 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman f180d1c537 improve config parsing + fix command deprecation warning 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman b1b57f6ba6 remove benchmark test event filter in validations pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 4bde850f04 add file-metadata config options to docs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 1d87f07da1 update pipeline with new levels of testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:07 -04:00
Alex Goodman cf516add95 add cli testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 68d698e9f2 remove inline-compare testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman efcd8a8b9a update integration and acceptance tests for new resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman ae32942a18 update import to require patching image metadata source field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 18dd2950ac update event handlers relative to new command structure 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 6a960ec1f3 update json schema with optional poweruser data shape 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:16 -04:00
Alex Goodman 97f0f83544 add poweruser command and alias root to packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:53 -04:00
Alex Goodman a6cba5d9db remove multi* content fetching from resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:51 -04:00
Alex Goodman f22d7d23c1 add poweruser concerns to the application config 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:52:37 -04:00
Alex Goodman ff4ed40d50 migrate syft/presenter to internal/presenter 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:52:33 -04:00
Alex Goodman 4666ca8469 migrate syft/cataloger to syft/pkg/cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:46:51 -04:00
Alex Goodman 48a1d4711a update presenter tests with json schema 1.0.3 examples + rename rust metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 09:44:55 -04:00
Alex Goodman e9e9fe6d9c prefer warnings over errors when parsing java manifests and pom properties 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-20 08:08:46 -04:00
Alex Goodman 2f8a568d4f check for multiple delimiters when parsing pom properties 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-20 08:00:08 -04:00
Alex Goodman 83778677c1 run snapshot build on ubuntu 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-19 08:42:27 -04:00
Alex Goodman 9f57e17887 add labels to the docker image + pin the docker pipeline install version 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-18 16:28:03 -04:00
Alex Goodman e9105c180a add dockerfile + docker build step 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 16:45:20 -05:00
Alex Goodman c7b26c55ac add docker to mac instance 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 14:01:00 -05:00
Alex Goodman 1aa8a10f6b ignore ownership for shared copyright resources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-02-26 12:30:24 -05:00
Alex Goodman bb1facbf81 ensure java parent pkg ref isnt nil when looking for parent matches 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-27 10:12:41 -05:00
Alex Goodman 6a49717314 add VirtualPath to source.Location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 21:16:42 -05:00
Alex Goodman 06641cfda2 prefer real paths for glob results 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 18:48:28 -05:00
Alex Goodman a5537943fa keep original dpkg md5sum location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 14:30:05 -05:00
Alex Goodman fc8b431ea6 duplicate reference readers for duplicate location resolutions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 13:54:39 -05:00
Alex Goodman 33c27c4f3d add HasPath() to Resolver interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 19:39:49 -05:00
Alex Goodman 133d180eec update gemspec glob to include named spec dirs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 19:33:52 -05:00
Alex Goodman 37b96a241b ensure acceptance tests use existing snapshot dir 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 16:50:35 -05:00
Alex Goodman d475e6280a bump stereoscope to pull in content API refactors 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 14:07:14 -05:00
Alex Goodman 60f525af18 add manual cache buster to the pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-22 16:22:42 -05:00
Alex Goodman 75d89293ce fix acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 14:32:29 -05:00
Alex Goodman d94d7a7d80 add tests for content requester object 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:15 -05:00
Alex Goodman 45fed7c69b break out packageEntry into a separate file 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman e4a3e433b6 add content requested and refactor python cataloger to use it 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman 82c8a8e17b add mem profile option and refactor python cataloger for batch requests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman be5917a058 add profiler dev option 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:13 -05:00
Alex Goodman 3ce7eabc98 bump stereoscope to remove tree-catalog syft check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-03 16:20:17 -05:00
Alex Goodman 2989d3d975 include CPEs with elementds from POM GroupId fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-01 08:00:49 -05:00
Alex Goodman 8a17bfb69f generate json schema from struct definitions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-20 15:47:10 -05:00
Alex Goodman 3aaa0e5566 move package purl and cpes (identities) to pkg.Package 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-19 11:25:51 -05:00
Alex Goodman 030427bb33 rename json artifact to package + update resolver integrity checks 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 569a598df7 minimize pointer usage & order return types consistently 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman c892c3609e improve doc comments 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 62b03f3a91 dont export structs used for unmarshaling 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 4b45c42f5a make cyclonedx presenter generally reusable (for grype) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman f46de19c6b migrate scope option to image metadata (from source) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 91baabe5a1 add image metadata as catalogFromJSON return 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 6f7a4fd3e4 move source metadata upstream and fix tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman aa0d444fd4 fix tests to use location instead of file.Reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman b694dacb21 add source.Location + reorient Resolvers to use it 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman 9668341a14 rename scope to source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman 495fb0a45f add sbom document import lib helper function 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:36:51 -05:00
Alex Goodman 7964c27bd8 add source to packages found by rpmdb cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 09:27:08 -05:00
Alex Goodman 7e270bf76c restore the checksum file during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 15:11:51 -05:00
Alex Goodman fde37b4b56 provide goreleaser asset version via env var 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 14:36:24 -05:00
Alex Goodman 2a329002b8 enhance dpkg support by parsing md5sum and copyright file sources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 11:06:34 -05:00
Alex Goodman a6365886ad add warning log level 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-10 15:09:41 -05:00
Alex Goodman 6aba2f48d4 split out rpmdb file processing to helper + lint fixes 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 10:44:27 -05:00
Alex Goodman 0205e72be9 ensure resolvers ignore directories for "FilesBy*" methods 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:38 -05:00
Alex Goodman 8095cd9980 add rpmdb file info to cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:23 -05:00
Alex Goodman 773581704c bump threshold for inline compare for jenkins image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 15:14:32 -04:00
Alex Goodman e2593cd6b7 remove extra fields from the compare script metadata namedtuple 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:59:53 -04:00
Alex Goodman 232cd13035 update tests for enhanced java pkg pairings 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:44:45 -04:00
Alex Goodman 2532928afa bump java compare testing thresholds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:06:47 -04:00
Alex Goodman 03dbfb8dfb improve java name and version extraction as well as parent pkg pairing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 08:12:25 -04:00
Alex Goodman a5cba13ddf enable more flexible java manifest structure (closer to the spec) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 16:26:04 -04:00
Alex Goodman a4f22e65fc expand compare testing images 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:51 -04:00
Alex Goodman ab45be98b8 append java nested package names to the virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:34 -04:00
Alex Goodman fc991bc62e partial java comparison with extra metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 12:40:49 -04:00
Alex Goodman 1230650771 allow for java manifest data to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 11:28:27 -04:00
Alex Goodman 2675891110 remove parent java package from json && add java manifest section parsing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 17:19:06 -04:00
Alex Goodman 62f6146c37 do not include optional fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:58:54 -04:00
Alex Goodman 8bcba7d830 update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman 76c8f24090 add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Alex Goodman cc466e47da bump python version for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-27 14:53:52 -04:00
Alex Goodman 6eb36bc3c8 allow for optional fields in npm metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 15:00:55 -04:00