oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 14:02:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,837 Commits 65 Branches 273 Tags
8d9f1a8c43bc6c2eb3f2564308de52a9d1a197c0
Commit Graph
1837 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman 8d9f1a8c43 skip tests that are missing full binaries 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 14:34:37 -05:00
Alex Goodman 76619b25b6 add rust darwin snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 13:23:54 -05:00
Alex Goodman a8b0f239c2 Merge remote-tracking branch 'origin/main' into least-permissive-snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 13:09:51 -05:00
Alex Goodman 8006e9d8a0 adjust gitignore to be more permissive to snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 13:02:26 -05:00
Alex Goodman d849719605 add remaining binary cataloger patterns and snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-22 12:48:50 -05:00
Christopher Angelo Phillips 2a04e06cbc chore: update binary to -x (#2456) 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-22 09:50:32 -05:00
Laurent Goderre 3a6b6562d1 Add more functionality to the ErLang parser (#2390) 
* ERLang parser support for empty lists
* ERLang add support for single quote strings
* ERLang parser support for comments
---------
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-22 09:45:20 -05:00
Laurent GoderreandChristopher Phillips 63e7a004cb Added OpenSSL binary matcher (#2416) 
* Added OpenSSL binary matcher

Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>

* chore: strip binary to smaller detection

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

---------

Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-22 09:37:09 -05:00
anchore-actions-token-generator[bot]andkzantow 04e8c96822 chore(deps): update stereoscope to 590920dabc5479216e755983d41367b6be3544f3 (#2452) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
 2023-12-22 09:36:13 -05:00
anchore-actions-token-generator[bot]andspiffcs 1bc4179193 chore(deps): update tools to latest versions (#2451) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
 2023-12-22 09:30:00 -05:00
dependabot[bot] 51a1bad159 chore(deps): bump github/codeql-action from 3.22.11 to 3.22.12 (#2455) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.22.11 to 3.22.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b374143c1149a9115d881581d29b8390bbcbb59c...012739e5082ff0c22ca6d6ab32e07c36df03c4a4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-22 09:01:16 -05:00
Alex Goodman e516eb4967 add manager for binary cataloger test fixtures 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-21 18:06:14 -05:00
Christopher Angelo Phillips 3cffa0b7fd chore: remove execute from test fixtures (#2450) 
* chore: remove execute from test fixtures

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

* chore: add back ignored file

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>

---------

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
v0.99.0 		2023-12-20 22:34:29 +00:00
anchore-actions-token-generator[bot]andspiffcs da03e981c3 chore(deps): update tools to latest versions (#2447) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
 2023-12-20 10:59:01 -05:00
William Murphyandhoudini91 4aa2d8c0af fix: don't panic when hackage missing in haskell stack yaml lock (#2448) 
Fixes a bug where previously the haskell cataloger would panic
when parsing a stack.yaml.lock file that had an entry with an empty
hackage string.

Signed-off-by: houdini91 <mdstrauss91@gmail.com>
Signed-off-by: Will Murphy <will.murphy@anchore.com>
Co-authored-by: houdini91 <mdstrauss91@gmail.com>
 2023-12-20 10:57:06 -05:00
Alex Goodman bab4142881 [wip] download bin helpers 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-19 16:14:20 -05:00
Christopher Phillips 6d89a2bfcc test: final version of snippet script 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 13:37:38 -05:00
Christopher Phillips 48cfc60631 test: update tests to new pattern 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 13:25:57 -05:00
Christopher Phillips 7b86f23883 test: add flatter haproxy example 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:36:50 -05:00
Christopher Phillips fd26fc124f test: move haproxy new new snippet 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:30:43 -05:00
Christopher Phillips b92ccf8dc7 test: update go classifier to new snippet workflow 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:21:16 -05:00
Christopher Phillips 0b4f9ad9bb test: update script to size 600 bytes 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 12:16:44 -05:00
Christopher Phillips d1f3d1197b test: migrate bash fixture to new snippet workflow 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:59:17 -05:00
Christopher Phillips 5e555309f4 test: rename unversioned java to versioned folders 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:50:09 -05:00
Christopher Phillips b945968058 test: move openjdk lts to versioned folder 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:47:22 -05:00
Christopher Phillips d28932588e test: update openjdk to named version 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:46:25 -05:00
Christopher Phillips a782fd2cf7 test: update memcached to new generator pattern 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:39:03 -05:00
Christopher Phillips 9099b986e7 test: update erlang test to new generated format 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:35:17 -05:00
Christopher Phillips 2bf99715af chore: update scripts and add new dir output for snippets 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-19 11:16:17 -05:00
Alex Goodman de87abf029 add helper script to capture binary snippets 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-18 17:03:57 -05:00
Christopher Phillips f194de3060 chore: add lint check for large files 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-18 16:44:12 -05:00
Christopher Phillips 59eef3764f test: strip fixtures of any execution permissions 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2023-12-18 15:55:35 -05:00
Laurent Goderre a635d66657 Add binary classifier for the ERLang interpretter (#2417) 
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-18 15:00:49 -05:00
Laurent Goderre 51d3cd0066 Add binary classifier for Julia lang (#2427) 
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-18 15:00:21 -05:00
Laurent Goderre 4846639ee4 Add binary detection for PHP composer (#2432) 
Signed-off-by: Laurent Goderre <laurent.goderre@docker.com>
 2023-12-18 14:59:45 -05:00
dependabot[bot] 6030a69b17 chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (#2433) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/a8a3f3ad30e3422c9c7b888a15615d19a852ae32...c7d193f32edcb7bfad88892161225aeda64e9392)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-18 11:17:07 -05:00
anchore-actions-token-generator[bot]andwagoodman 8b9194eb81 chore(deps): update CPE dictionary index (#2442) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: wagoodman <wagoodman@users.noreply.github.com>
 2023-12-18 07:01:21 -05:00
anchore-actions-token-generator[bot]andkzantow 56a1ab54d2 chore(deps): update stereoscope to 4b999b76ca8901d15bb97aef445dc94c38d11d5c (#2440) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
 2023-12-18 06:43:24 -05:00
Alex Goodman f4dd36ca9d fix syft-json test to use pretty json for snapshot testing (#2441) 
without this fix, capturing fixtures will result in hard-to-read
failures in testing.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:23:21 -05:00
Alex Goodman 17c605822e refactor pkg.Collection (#2439) 
- remove "catalog" references
- add a separate add() function for readability

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:11:11 -05:00
Alex Goodman 4eace4b141 refactor javascript cataloger to use configuration options when creating packages (#2438) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:11:02 -05:00
Alex Goodman 05660da8d7 use single source of truth for archive options (#2437) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 17:07:55 -05:00
Alex Goodman 2f378d806e fix file digest cataloger when passed coordinates (#2436) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2023-12-15 14:43:09 -05:00
dependabot[bot] b83cc8485a chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0 (#2413) 2023-12-14 17:18:37 -05:00
Colm O hEigeartaigh 38a12bd91a Look for a maven version in a pom from a parent dependency management section (#2423) 
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
 2023-12-14 13:15:14 -05:00
Colm O hEigeartaigh 649d152548 Parse Python licenses from LicenseExpression entry in the Wheel Metadata (#2431) 
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
 2023-12-14 12:41:41 -05:00
dependabot[bot] f5d5892434 chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11 (#2430) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.10 to 3.22.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/305f6546310b9203e892c28c1484e82977f4f63d...b374143c1149a9115d881581d29b8390bbcbb59c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-14 12:40:39 -05:00
dependabot[bot] 51831d303c chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0 (#2429) 
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.27.0 to 1.28.0.
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.27.0...v1.28.0)

---
updated-dependencies:
- dependency-name: modernc.org/sqlite
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-14 12:38:55 -05:00
anchore-actions-token-generator[bot]andspiffcs 09e62c3282 chore(deps): update tools to latest versions (#2428) 
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
 2023-12-14 07:31:44 -05:00
Colm O hEigeartaigh d39ef44e40 Parse Python licenses from LicenseFile entry in the Wheel Metadata (#2331) 
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
 2023-12-13 17:46:56 -05:00