oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-01 23:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity
653 Commits 65 Branches 273 Tags
8f85c8affccf06190fece72ee21506b4a3aaf2ce
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman 776164a078 Merge pull request #427 from anchore/epoch-fix 
Allow for RPM package epoch to be optionally provided in the version field
 2021-06-04 09:52:54 -04:00
Alex Goodman 2ca2f03501 Merge pull request #418 from anchore/add-all-pkg-metadata-types 
Add all package metadata types slice for use in downstream testing
 2021-05-24 11:15:56 -04:00
Alex Goodman baa859d2ed Merge pull request #414 from anchore/fix-leaky-fds 
Close all ReadClosers explicitly retrieved from resolvers
 2021-05-12 17:28:52 -04:00
Alex Goodman 032cecbe7f Merge pull request #406 from anchore/align-check-names-to-quality-gate 
Align check names to release quality gate
 2021-04-22 16:38:09 -04:00
Alex Goodman 1632fdd85e Merge pull request #405 from anchore/add-jenkins-filter 
Add for known bad CPE field combinations for jenkins package
 2021-04-22 15:56:18 -04:00
Alex Goodman 1b62b10b2b Merge pull request #403 from anchore/pom-persist-not-for-shaded-jars 
Update parent pom persistence with regard to shaded jars
 2021-04-22 15:51:38 -04:00
Alex Goodman c34060d188 Merge pull request #404 from anchore/add-more-jenkins-plugin-group-ids 
Add additional cases for categorizing jenkins package type by group id
 2021-04-22 13:33:17 -04:00
Alex Goodman d9de63c837 Enhance CPE generation for java GroupId and filtering (#402) 
* enhance cpe generation for group id and filtering

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* rename group id const + add doc comment for HasAnyOfPrefixes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-22 12:22:56 +00:00
Alex Goodman 0c29090b42 Add hyphen replacement logic for CPE generation (#397) 
* add hyphen replacement logic for CPE generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* migrate "python-" vendor prefix to product candidate processing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump linter timeout for CI

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update cpe candidate product tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-21 12:59:48 +00:00
Alex Goodman 6d2f139397 Merge pull request #401 from anchore/boostrap-gomod-tidy 
Ensure consistent go.sum state during release
 2021-04-21 08:54:55 -04:00
Alex Goodman b301b56db1 add nomatch_inclusion engine mechanism in cpe generation logic (#394) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-20 19:57:04 +00:00
Alex Goodman 676bdf9816 refactor pom properties to modify parent pkg less often (#392) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-20 16:19:28 +00:00
Alex Goodman c06ee1ecc2 Merge pull request #388 from anchore/add-apk-extra-fields 
Use the standard file.Digest for apk checksums
 2021-04-19 16:46:41 -04:00
Alex Goodman ecb16b6a34 Merge pull request #387 from anchore/add-rpmdb-extra-fields 
Expand RPM DB fields
 2021-04-19 16:41:05 -04:00
Alex Goodman 11866ab69e Merge pull request #391 from anchore/cache-acceptance-mac-image 
Change mac acceptance test image.tar path
 2021-04-16 10:16:49 -04:00
Alex Goodman cca9d33b36 Merge pull request #390 from anchore/bump-go-mod-go-version 
Bump go.mod minimum required go version to 1.16
 2021-04-16 09:03:05 -04:00
Alex Goodman 0c9eca4a30 Merge pull request #386 from anchore/add-safe-join 
Safely join paths derived from archive headers
 2021-04-15 08:59:39 -04:00
Alex Goodman d5dfaaba53 Merge pull request #384 from anchore/add-registry-follow-up 
Modify registry credential verification
 2021-04-14 16:03:32 -04:00
Alex Goodman 2a5207ec88 Merge pull request #382 from anchore/add-manifest-to-registry-source 
Add manifest + repo digests on registry source
 2021-04-14 08:03:04 -04:00
Alex Goodman c363b2b532 Add ability to pull images directly from a registry (#378) 
* add registry image source

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use explicit source for fetching image + add scheme and registry tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* adjust test variable name and add credential helper function

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 13:30:57 +00:00
Alex Goodman c02ab88d5f Merge pull request #370 from anchore/add-file-contents-cataloger 
Add file contents cataloger
 2021-04-12 17:41:54 -04:00
Alex Goodman 9ad786d608 Merge pull request #374 from anchore/add-binary-classifier 
Add file classification cataloger
 2021-04-12 17:25:16 -04:00
Alex Goodman 66ebe49a04 Merge pull request #375 from anchore/package-verification-fields-dpkg 
Update package verification fields for DPKG
 2021-04-12 16:35:45 -04:00
Alex Goodman 7a10cbae0c Merge pull request #368 from anchore/fix-registry-auth-encode-issue 
Ensure credentials are not HTML encoded
 2021-04-05 14:25:57 -04:00
Alex Goodman 9ec09add67 Add secrets search capability (#367) 
* add initial secrets cataloger

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update ETUI elements with new catalogers (file metadata, digests, and secrets)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update secrets cataloger to read full contents into memory for searching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype of parallelization secret regex search

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype with single aggregated regex

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype for secret search line-by-line

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype hybrid secrets search

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add secrets cataloger with line strategy

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* adjust verbiage towards SearchResults instead of Secrets + add tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json schema with secrets cataloger results

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address PR comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update readme with secrets config options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* ensure file catalogers call AllLocations once

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-01 21:34:15 +00:00
Alex Goodman 557ad8be49 Merge pull request #366 from zhill/issue-331 
Use sorted artifacts for consistent SBoM output in table, cyclonedx, and json presenters
 2021-04-01 11:04:34 -04:00
Alex Goodman 485caa1ea3 Merge pull request #357 from anchore/enhance-file-metadata 
Add link destination to file metadata
 2021-03-30 09:36:10 -04:00
Alex Goodman 772613647c Merge pull request #364 from anchore/allow-for-failures-of-benchmark-sticky-note 
Ignore failures on benchmark sticky comment
 2021-03-29 12:03:10 -04:00
Alex Goodman 0f26681ac5 Merge pull request #356 from anchore/dedup-pkg-index 
Ensure pkg.Catalog path index deduplicates real vs virtual paths
 2021-03-28 14:06:25 -04:00
Alex Goodman 44cf7ccb44 Merge pull request #355 from anchore/move-docker-login-after-keychain-step 
Move docker login to after keychain creation
 2021-03-26 11:05:47 -04:00
Alex Goodman cedf8cd6d7 Merge pull request #352 from anchore/enable-release-environment 
Enable manual release approval
 2021-03-25 12:13:41 -04:00
Alex Goodman 7b25237cea Merge pull request #354 from anchore/fix-benchmark-sticky-comment 
Fix sticky benchmark comment on PRs
 2021-03-25 12:00:32 -04:00
Alex Goodman 8464d9766a Merge pull request #353 from anchore/fix-docker-login 
Manually login to docker via cli during release
 2021-03-25 11:49:10 -04:00
Alex Goodman e256e86888 Merge pull request #339 from anchore/add-file-metadata-indexer-invert-control 
Add file metadata cataloger
 2021-03-23 17:02:10 -04:00
Alex Goodman cb5e7d0e08 Merge pull request #345 from westonsteimel/rust-cargo-cataloger 
add cataloger for rust crates from Cargo.lock files
 2021-03-22 09:51:57 -04:00
Alex Goodman 26a4dd36a8 Merge pull request #348 from anchore/fix-java-pom-properties-parse-delimiter 
Allow for multiple pom.properties delimiters
 2021-03-20 12:23:57 -04:00
Alex Goodman c828e47765 Merge pull request #346 from anchore/fix-snapshot-build 
Run snapshot build on ubuntu
 2021-03-19 09:40:37 -04:00
Alex Goodman a5ae8e9668 Merge pull request #344 from anchore/add-docker-image 
Add Docker image to release process
 2021-03-18 16:45:22 -04:00
Alex Goodman a83d79f330 Merge pull request #341 from octarinesec/add_photon_to_list_of_distros 
Added Photon OS to the list of distros
 2021-03-16 07:29:18 -04:00
Alex Goodman 0c2a51554a Merge pull request #343 from anchore/revert-310-add-docker-image-and-refactor-release-pipeline 
Revert "Add docker image and refactor release pipeline"
 2021-03-11 12:47:49 -05:00
Alex Goodman 5e62bca72f Revert "Add docker image and refactor release pipeline (#310)" 
This reverts commit 6195002ae5.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2021-03-11 12:42:18 -05:00
Alex Goodman 8c4370b7cc Merge pull request #332 from westonsteimel/detect-distroless-packages 
allow ability to catalog packages from /var/lib/dpkg/status.d/
 2021-03-09 10:37:22 -05:00
Alex Goodman 40e9c4b146 Merge pull request #334 from anchore/ignore-ownership 
Ignore ownership for shared copyright resources
 2021-02-26 15:59:49 -05:00
Alex Goodman 6d5ff0fd8e Mark package relations by file ownership (#329) 
* add marking package relations by file ownership

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* correct json schema version; ensure fileOwners dont return dups; pin test pkg versions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* extract package relationships into separate section

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* pull in client-go features for import of PackageRelationships

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* move unit test for ownership by files relationship further down

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* rename relationship to "ownership-by-file-overlap"

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-02-25 13:47:13 -05:00
Alex Goodman 0f6288881b Merge pull request #308 from anchore/prefer-real-paths-on-glob-results 
Prefer real paths over those with links for glob results
 2021-01-05 21:32:24 -05:00
Alex Goodman 0030880e74 Merge pull request #307 from anchore/dup-readers-on-bulk-fetch 
Duplicate reference readers for duplicate location resolutions
 2021-01-05 14:12:42 -05:00
Alex Goodman bb70b0b43e Merge pull request #305 from anchore/add-has-path-to-resolver 
Add HasPath() to Resolver interface for existence check
 2021-01-04 19:45:03 -05:00
Alex Goodman ee0a02621a Merge pull request #306 from anchore/update-gemspec-glob 
Update gemspec glob to include named nested specification directories
 2021-01-04 19:42:26 -05:00
Alex Goodman 7f4e8ab97d Fix symlink resolutions for constituent paths (#304) 
* bump stereoscope to pull in content API refactors

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate symlink fixes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* with filetree.File() adjustments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* regress all-layers scope to not include dead-links + default tests to squashed scope

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* restore all layers resolver glob behavior (custom + lazy link resolution)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate filetree link resolution options and restore no-follow dead link option for resolvers

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* removed path from lower-level FileTree.File() calls

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump stereoscope to pull in latest link resolution fixes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump doublestar to v2 for directory resolver

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 16:41:45 -05:00
Alex Goodman 558781eed6 Merge pull request #302 from anchore/add-manual-cache-buster 
add manual cache buster to the pipeline
 2020-12-22 16:32:59 -05:00
Alex Goodman 6aaf9ee712 Incorporate import changes + add image overwrite option (#294) 
* incorporate import changes + add image overwrite option

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update import tests to account for arbitrary json shape

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 16:59:30 -05:00
Alex GoodmanandDan Luhring ea162f87f4 update dpkg license to include single-word entries (#298) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Dan Luhring <luhring@users.noreply.github.com>
 2020-12-18 12:54:09 -05:00
Alex Goodman 0891faa756 Merge pull request #293 from anchore/revert-288-syft_docker_image 
Revert "Add the ability to run syft from a scratch image."
 2020-12-16 16:55:26 -05:00
Alex Goodman a56292e2e0 Revert "Add the ability to run syft from a scratch image." 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-12-16 16:54:34 -05:00
Alex Goodman d1d7471f2f Merge pull request #290 from anchore/improve-python-cataloger 
Improve performance of the python cataloger
 2020-12-15 12:41:58 -05:00
Alex Goodman 52bac6e2fd Add enterprise upload capability (#285) 
* add support to upload results to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add package sbom upload

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add dockerfile support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add manifest, index, and dockerfile import functions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* schema version to json output + enhance json schema generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* modify package SBOM shape to be entire syft document + add etui updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add import image config and manifest support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add config options for import to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate final stereoscope and client-go deps

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-09 22:20:53 -05:00
Alex Goodman f87c59b4eb Merge pull request #286 from anchore/rm-tree-catalog-sync-check 
Bump stereoscope to remove tree-catalog syft check
 2020-12-03 16:32:24 -05:00
Alex Goodman 6f9ded60ed Merge pull request #279 from anchore/enhance-java-cpe-by-group-id 
Include CPEs with elements from POM GroupId fields
 2020-12-02 07:50:31 -05:00
Alex Goodman c42b036f46 Merge pull request #276 from anchore/generate-json-schema 
Generate json schema from struct definitions
 2020-11-23 11:22:33 -05:00
Alex Goodman 0ed30138c4 Merge pull request #271 from anchore/cpe-generation 
Move package PURL and CPEs to Package definition
 2020-11-19 12:38:20 -05:00
Alex Goodman 71939557e6 Merge pull request #266 from anchore/document-import 
Add JSON document import
 2020-11-17 13:21:57 -05:00
Alex Goodman dad1d9691c Merge pull request #263 from anchore/add-source-to-rpmdb-cataloger 
Add source to packages found by RPMdb cataloger
 2020-11-12 09:36:20 -05:00
Alex Goodman 9581a0309b Merge pull request #262 from anchore/fix-release 
Fix release process
 2020-11-11 15:15:12 -05:00
Alex Goodman 2c82c7c0f0 Merge pull request #257 from anchore/enhance-deb-support 
Enhance dpkg support
 2020-11-11 13:12:29 -05:00
Alex Goodman db98fba3b4 Merge pull request #260 from anchore/add-warning-levels 
Add warning log level
 2020-11-11 11:13:51 -05:00
Alex Goodman b6eb589b78 Merge pull request #251 from anchore/add-rpm-file-info 
Add RPM file info sourced from the RPM DB
 2020-11-06 11:06:34 -05:00
Alex Goodman a52750bdd3 enhance alpine file discovery (#248) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-04 09:56:52 -05:00
Alex Goodman 6e98752c6b Merge pull request #247 from anchore/syft-java-cataloger-integration 
General Java cataloger enhancements
 2020-10-30 13:55:16 -04:00
Alex Goodman 452426d1d6 Merge pull request #245 from anchore/update-java-cataloger-for-engine 
Java cataloger miscellaneous fixes
 2020-10-28 17:36:44 -04:00
Alex Goodman f9407d0ce4 Add java/npm to inline comparison (#235) 
* Adds java and npm package comparison
* Adds probable matching of extra packages syft found and missing packages that syft did not find (but inline did). This way there is a section of output that fuzzy-matches the package names to get a better sense of "real" problems (actual missing packages) vs slightly mismatched metadata during troubleshooting.
* Adds a set or probable missing packages to the report based on the probable matches (again, to aid in troubleshooting)
* Fixes image reference clean function to support references with registries
* Only shows metadata differences when the package was found by both inline and syft
* Splits the inline-compare code into more manageable pieces

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-27 13:43:36 -04:00
Alex Goodman 15e2e32103 Merge pull request #237 from anchore/update-future-plans 
Remove CycloneDX from future plans
 2020-10-23 11:06:51 -04:00
Alex Goodman fd65f363ce Merge pull request #236 from anchore/fix-acceptance-test-pipeline 
Bootstrap cached dependencies and CI dependencies separately for acceptance tests
 2020-10-23 10:55:24 -04:00
Alex Goodman de2e6a13b8 Merge pull request #234 from anchore/split-python-cataloger-with-cataloger-addition 
Split python cataloger by image/directory scanning + add more metadata
 2020-10-23 10:37:01 -04:00
Alex Goodman beb6afff36 Merge pull request #232 from anchore/cataloger-interface-upgrade 
Upgrade cataloger interface to use full resolver
 2020-10-21 11:47:52 -04:00
Alex Goodman bb14f3b45b reduce number of open files while processing nested java archives (#227) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-16 17:22:14 -04:00
Alex Goodman 4c751cb1d4 Merge pull request #222 from VinodAnandan/main 
Enable CodeQL Security Scan
 2020-10-15 23:11:01 -04:00
Alex Goodman 3ba67a6bcc update json schema to account for optional gemspec fields (#225) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 13:56:59 -04:00
Alex Goodman dcb5d6d08e remove greeter action since it is broken for forked PRs (#223) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 10:20:09 -04:00
Alex Goodman b3387807c1 allow for gemspec metadata fields to be optional (#218) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 09:57:58 -04:00
Alex Goodman 24c4c025e1 Merge pull request #217 from jhujasonw/main 
Fixes #212 by increasing buffer size for scanner
 2020-10-14 07:29:00 -04:00
Alex Goodman 1fc46291a6 update install script arguments for proper argument processing (#211) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 11:04:53 -04:00
Alex Goodman 2b932f8d65 run tests on fork PRs (#210) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 07:45:05 -04:00
Alex Goodman 0d3e153959 replace circle ci badge with GHA (#209) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 15:45:26 -04:00
Alex Goodman 335a6b022f add acceptance test to cover gem cataloger + fix gem cataloger parent dir (#207) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 13:13:31 -04:00
Alex Goodman da0eb6f20f fix acceptance tests & add notification upon failures (#204) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 11:07:00 -04:00
Alex Goodman 16b23e7994 add gha pipeline to replace circlei pipeline (#202) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-07 12:20:51 -04:00
Alex Goodman e6b71486b0 modify version command to match grype (#196) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-06 13:13:52 -04:00
Alex Goodman b5ce187ba7 replace modfile with stdlib (#187) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:25:04 -04:00
Alex Goodman 26855a2a9e ignore apk xattr file checksum + remove log.Errorf error wraps (#192) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:22:17 -04:00
Alex Goodman 4b78d9a1c0 support home dir expansion (#188) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 15:02:21 -04:00
Alex Goodman f4502fc824 Add notifications around the release process (#184) 
* add pipeline notification upon release

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add pending notification to release pipeline

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:58:56 -04:00
Alex Goodman 03378e976c always return a cleanup function from scope (#183) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:20:06 -04:00
Alex Goodman 576fbc898b rm stereoscope from testutils (#181) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:53:05 -04:00
Alex Goodman 49800b6747 Normalize the json image/dir source (#180) 
* normalize the json image/dir source

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json image presenter golden file

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:07:38 -04:00
Alex Goodman c46d004a3b remove duplicate rows from the summary table (#179) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:32:37 -04:00
Alex Goodman 3d91a66536 Add OCI support + use URI schemes for user image input (#178) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update docs to reflect OCI image sources + URI scheme change

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope pin

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:24:24 -04:00
Alex Goodman 45b5cab49a unpin skopeo during mac acceptance tests (#176) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-18 13:54:40 -04:00
Alex GoodmanandAlfredo Deza f3076c3905 Add docs around the main execution path (#172) 
* add docs around the main execution path of syft

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/lib.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/lib.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap line

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-09-17 06:02:51 -04:00
Alex Goodman df7c83c9b0 use xml encoder (#165) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-31 08:06:56 -04:00
Alex Goodman 8a4886ec0e Add package URL support to the CycloneDX presenter (#164) 
* add package URL support to the CycloneDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap license tags with licenses

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-30 21:40:19 -04:00