605 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Alex Goodman	8b315367e8	fix validations badge ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 08:59:07 -04:00
Alex Goodman	b771d7bfd3	bump go.mod minimum required go version ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-16 08:53:03 -04:00
Alex Goodman	0c9eca4a30	Merge pull request #386 from anchore/add-safe-join ... Safely join paths derived from archive headers	2021-04-15 08:59:39 -04:00
Alex Goodman	484730435b	safely join paths derived from archive headers ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-15 08:55:29 -04:00
Alex Goodman	d5dfaaba53	Merge pull request #384 from anchore/add-registry-follow-up ... Modify registry credential verification	2021-04-14 16:03:32 -04:00
Alex Goodman	9fb79bfa2e	dont append registry auth if potentially empty ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-14 10:28:21 -04:00
Alex Goodman	2a5207ec88	Merge pull request #382 from anchore/add-manifest-to-registry-source ... Add manifest + repo digests on registry source	2021-04-14 08:03:04 -04:00
Alex Goodman	2ff3f58730	pull in stereoscope manifest + repo digests on registry source ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-13 18:29:12 -04:00
Dan Luhring	8c178c497e	Merge pull request #379 from anchore/fix-column-mismatch ... Expose column index for UI handler consumers	2021-04-13 10:08:27 -04:00
Dan Luhring	4abffc8fbc	Expose column index for UI handler consumers ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-04-13 09:32:38 -04:00
Alex Goodman	c363b2b532	Add ability to pull images directly from a registry (#378) ... * add registry image source Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use explicit source for fetching image + add scheme and registry tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust test variable name and add credential helper function Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-13 13:30:57 +00:00
Alex Goodman	c02ab88d5f	Merge pull request #370 from anchore/add-file-contents-cataloger ... Add file contents cataloger	2021-04-12 17:41:54 -04:00
Alex Goodman	cd542bab5b	ensure file content cataloger is using the proper scope ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:37:38 -04:00
Alex Goodman	b5d4b2f7b2	simplify test assertions + rename file contents cataloger size limiter var ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:34:56 -04:00
Alex Goodman	51b13f8221	rename Contents to FileContents in app config and documentation ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:34:54 -04:00
Alex Goodman	44915b435f	add documentation for the file contents cataloger config options ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:33:49 -04:00
Alex Goodman	d451a5ad30	update the json schema and tests with file contents section ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:33:20 -04:00
Alex Goodman	c1551a03c5	add file contents cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:30:57 -04:00
Alex Goodman	9ad786d608	Merge pull request #374 from anchore/add-binary-classifier ... Add file classification cataloger	2021-04-12 17:25:16 -04:00
Alex Goodman	28c407572c	simplify test assertions for classification cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	f9d49885ae	simplify MatchNamedCaptureGroups implementation ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	f438ee974c	add documentation for the file classifier cataloger config options ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	309cbf5264	add missing file classification test fixtures + gitignore adjustment ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	46fffe5c6f	update json schema + presenter snapshots with file classification section ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:40 -04:00
Alex Goodman	080057b217	add file classifications to power-user json presenter ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	870a676a5d	wire up file classifier to power-user cmd ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	46bfb68113	add file classifier + tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	5743e32e02	add tests around MatchNamedCaptureGroups + rename ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	66ebe49a04	Merge pull request #375 from anchore/package-verification-fields-dpkg ... Update package verification fields for DPKG	2021-04-12 16:35:45 -04:00
Alex Goodman	0511972dfa	clarify default collection value + fix appending conffiles location ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 11:41:44 -04:00
Alex Goodman	c56690fc52	fix DpkgMetadata.Files test to ensure it is never nil ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 08:46:59 -04:00
Alex Goodman	ba3407a767	add dpkg conffile update to json schema + json test snapshots ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 08:37:28 -04:00
Alex Goodman	269832ce8d	add conffile listing to dpkg metadata + normalize digests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-08 14:21:23 -04:00
Alex Goodman	7a10cbae0c	Merge pull request #368 from anchore/fix-registry-auth-encode-issue ... Ensure credentials are not HTML encoded	2021-04-05 14:25:57 -04:00
Alex Goodman	7ec0e3785f	bump stereoscope ; pull in fix to ensure credentials are not HTML encoded ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-05 14:20:49 -04:00
Alex Goodman	9ec09add67	Add secrets search capability (#367) ... * add initial secrets cataloger Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update ETUI elements with new catalogers (file metadata, digests, and secrets) Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update secrets cataloger to read full contents into memory for searching Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype of parallelization secret regex search Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype with single aggregated regex Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype for secret search line-by-line Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype hybrid secrets search Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add secrets cataloger with line strategy Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust verbiage towards SearchResults instead of Secrets + add tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update json schema with secrets cataloger results Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * address PR comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update readme with secrets config options Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure file catalogers call AllLocations once Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-01 21:34:15 +00:00
Alex Goodman	557ad8be49	Merge pull request #366 from zhill/issue-331 ... Use sorted artifacts for consistent SBoM output in table, cyclonedx, and json presenters	2021-04-01 11:04:34 -04:00
Zach Hill	c332ba0867	Use cataloger Sorted() output instead of Enumerate() for stable result sorting in presenters. Fixes #331 ... Also adds artifact location to sort key for Sorted() to ensure consistent sorts when artifacts of same name, version, and type are found in different locations in the image. Location should be sufficient since we assume only one package of a given name and version can exist in one location, even if that location is an package-db like rpmdb. Signed-off-by: Zach Hill <zach@anchore.com>	2021-04-01 01:40:41 -07:00
Alex Goodman	485caa1ea3	Merge pull request #357 from anchore/enhance-file-metadata ... Add link destination to file metadata	2021-03-30 09:36:10 -04:00
Alex Goodman	cd925e5664	account for repoDigests data in power-user json testing ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-30 08:46:42 -04:00
Alex Goodman	db35186c7d	allow file metadata digests to be optional + add link destination ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-29 12:07:42 -04:00
Alex Goodman	8551168702	capitalize file type strings ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-29 12:07:41 -04:00
Alex Goodman	772613647c	Merge pull request #364 from anchore/allow-for-failures-of-benchmark-sticky-note ... Ignore failures on benchmark sticky comment	2021-03-29 12:03:10 -04:00
Alex Goodman	8658abc8c4	ignore failures on benchmark sticky comment ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-29 11:59:49 -04:00
Robert Prince	ab83b7f840	Merge pull request #350 from octarinesec/repo-digests ... Add repo digests if available from Stereoscope to the image metadata	2021-03-29 08:47:50 -07:00
Alex Goodman	0f26681ac5	Merge pull request #356 from anchore/dedup-pkg-index ... Ensure pkg.Catalog path index deduplicates real vs virtual paths	2021-03-28 14:06:25 -04:00
Alex Goodman	9abdb174d5	ensure pkg.Catalog path index deduplicates real vs virtual paths ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-26 13:27:24 -04:00
Alex Goodman	44cf7ccb44	Merge pull request #355 from anchore/move-docker-login-after-keychain-step ... Move docker login to after keychain creation	2021-03-26 11:05:47 -04:00
Alex Goodman	2a9b1b2680	move docker login after keychain creation ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-26 10:41:44 -04:00
Alex Goodman	cedf8cd6d7	Merge pull request #352 from anchore/enable-release-environment ... Enable manual release approval	2021-03-25 12:13:41 -04:00