 Keith Zantow
|
1530ef354f
|
chore: update spdx/tools-golang to v0.5.0-rc1 (#1503)
|
2023-01-31 11:53:16 -05:00 |
|
|
Keith Zantow
|
934644232a
|
chore: revert GolangBinMetadata name and make analogous GolangModMetadata (#1458)
|
2023-01-13 16:46:12 -05:00 |
|
|
Keith Zantow
|
64be0a1072
|
chore: refactor basic CPE functionality to its own package (#1436)
|
2023-01-04 11:26:28 -05:00 |
|
|
Keith Zantow
|
7b08608adb
|
feat: add h1digest when scanning go.mod (#1405)
Fixes https://github.com/anchore/syft/issues/1277
|
2022-12-20 02:18:35 +00:00 |
|
|
Keith Zantow
|
42cb0a47a4
|
feat: SPDX 2.3 support (#1311)
|
2022-11-18 08:54:39 -05:00 |
|
   
|
949cff158d
|
Add support for dependency relationships for alpine (apk) (#1063)
* Fix type of pull deps and add support for provides
Signed-off-by: Dan Luhring <dan+github@luhrings.com>
* [wip] apk dependency lookup
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* update whitespace for linter
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* adjust test conditions
Signed-off-by: Timothy Gerla <tim@gerla.net>
* fix TODOs and improve Provides parser
* run simports after main merge
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* add tests to cover apk relationship parsing cases
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* generate JSON schema for breaking changes to apk metadata
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* update tests to account for additional dependencies
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* [wip] fix relationship encoding for cyclonedx
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* simplify package relationships that can be expressed
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Dan Luhring <dan+github@luhrings.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Signed-off-by: Timothy Gerla <tim@gerla.net>
Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Timothy Gerla <tim@gerla.net>
|
2022-11-09 15:43:37 +00:00 |
|
|
Keith Zantow
|
78a0af2e2d
|
Add go binary h1 digest to SPDX (#1265)
|
2022-10-19 16:33:10 -04:00 |
|
 Chapman Pendery
|
9097614f3b
|
refactor: move formats from internal into syft module (#1172)
|
2022-09-13 11:20:52 -04:00 |
|