25 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Rez Moss	c935b71c9e	fixed java-archive-cataloger returns unknown ver for uber-jars , fixed #5163 (#5164) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-09-03 16:09:20 -04:00
Rez Moss	138d9ce2a0	added bun binary classifier (#5103) ... * added bun binary classifier Signed-off-by: Rez Moss <hi@rezmoss.com> * added bun binary classifier Signed-off-by: Rez Moss <hi@rezmoss.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-07-27 10:18:50 -04:00
Rez Moss	8ed534c32b	fix: NPM redis.js CPE (#5012) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-07-15 20:55:42 -04:00
Rez Moss	ad828d659f	fix: conan libxml2 CPE (#5016) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-07-15 15:29:03 -04:00
Rez MossandAlex Goodman	148fe572bc	added macOS .app cataloger (#4490) ... * added macOS .app cataloger, fixed #4010 Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * added macOS .app cataloger, fixed #4010 Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * added macOS .app cataloger, fixed #4010 Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address review comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * bump schema to 16.1.7 Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address static analysis failures Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * migrate to testdata Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * expand fields and improve test coverage Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2026-06-30 10:32:57 -04:00
3 people	e7f1a803e7	fixed dotnet cataloger can't find packages from deps.json in linux el… (#4517) ... * fixed dotnet cataloger can't find packages from deps.json in linux elf, fixed #4514 Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * split bundle and PE concerns Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * limit resource usage of readall call Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * removed duplicat Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * make sure the first 4 bytes in elf arent lostt Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * revert readelfbundle func, check size of readdeps json Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * revert readelfbundle func, check size of readdeps json, fixed #4514 Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * move dotnet net8 linux fixture to testdata convention Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address malformed elf size claims + add tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * dont key off of cataloger name in testing Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2026-06-29 13:52:55 -04:00
Rez MossandChristopher Phillips	fea4a50124	feat: deno cataloger #4417 (#4523) ... Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2026-06-23 10:58:22 -04:00
Rez Moss	1f4f9332c5	feat: support envoy bin classifier ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-06-22 13:16:33 -04:00
Rez Moss	52a4c3b594	feat: elastic beats bin classifier (#4969) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-06-22 11:49:44 -04:00
Rez Moss	58e4dbbf01	feat: added bin classifier elastic-agent (#4968) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-06-17 15:29:07 +00:00
Rez Moss	92ae4d44c5	fix: .net deps.json cataloger no longer shows phantom pkgs (#4971) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-06-16 12:02:42 -04:00
Rez Moss	3cb838eacf	fixed pe dotnet wrong ver , fixed #4813 (#4814) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-04-22 20:55:56 -04:00
Rez Moss	722e3f267b	added deno bin classifiers (#4677) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-04-14 11:33:26 -04:00
Rez MossandChristopher Phillips	c185657d71	feat: add yarn lock dev dep detection; fixed #4548 ... --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2026-02-05 22:27:17 +00:00
Rez MossandChristopher Phillips	94c8088542	feat: add Qt6 binary detection (#4550) ... --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2026-01-30 15:35:33 +00:00
Rez Moss	2f3a504acf	Feat/catalog mongodb bin (#4541) ... * fixed #4550, catalog mongodb bin Signed-off-by: Rez Moss <hi@rezmoss.com> * fixed #4550, catalog mongodb bin Signed-off-by: Rez Moss <hi@rezmoss.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-01-08 12:18:51 -05:00
Rez MossandAlex Goodman	3a3a86eb01	fixed #4430 exclude dev pnpm pkg (#4487) ... * fixed #4430 exclude dev pnpm pkg Signed-off-by: Rez Moss <hi@rezmoss.com> * use existing dev deps option Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fixed #4430 exclude dev pnpm pkg, add test Signed-off-by: Rez Moss <hi@rezmoss.com> * fixed #4430 exclude dev pnpm pkg, add test Signed-off-by: Rez Moss <hi@rezmoss.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2026-01-07 10:39:16 -05:00
Rez Moss	7f1d57d06f	feat: detect older bitnami img packages (#4532) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-01-07 10:07:33 -05:00
Rez Moss	2c96279df9	fix: traefik binary classifier (#4499) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2026-01-05 11:14:00 -05:00
Rez MossandChristopher Phillips	74c9380248	fix: 4423 dotnet-deps cataloger skips project type by def ... --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Signed-off-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2025-12-18 13:38:47 -05:00
Rez MossandAlex Goodman	c79a57b6a1	Detect embedded deps.json in .NET binaries (#4375) ... * syft detect embedded deps.json,dotnet , fixed #4344 Signed-off-by: Rez Moss <hi@rezmoss.com> * [wip] have pe utils process embedded dep.json Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * [wip] add PoC bundler processing Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * [wip] search for bundle marker within pe sections Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * put bundle parsing for multiple .net versions under test Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-12-16 08:35:19 -05:00
Rez MossandKeith Zantow	e0b61a3ae3	fix: golang PURL should include full module (#4395) ... * fixed #4316 go mod with ver purl Signed-off-by: Rez Moss <hi@rezmoss.com> * go mod purl fixed, added func to handle go.mod Signed-off-by: Rez Moss <hi@rezmoss.com> * fix: use module name in PURL string everywhere Signed-off-by: Keith Zantow <kzantow@gmail.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Keith Zantow <kzantow@gmail.com> Co-authored-by: Keith Zantow <kzantow@gmail.com>	2025-12-12 14:19:26 -05:00
Rez Moss	f69b1db099	feat: detect elixir bin (#4334) ... * Elixir detection, fixed #4333 --------- Signed-off-by: Rez Moss <hi@rezmoss.com>	2025-11-06 16:02:02 -05:00
Rez Moss	45bf8b14ab	fix: omit records with empty PURL in GitHub format (#4312) ... Signed-off-by: Rez Moss <hi@rezmoss.com>	2025-10-28 18:34:10 -04:00
Rez MossandAlex Goodman	12d91f47dc	Add a homebrew cataloger (#3724) ... * Cataloger homebrew (#4) * homebrew cataloger * uptd * fixed test * fixed test * fixed tests * fixed lint * inc schema ver * upt schema * fixed integration test * fixed integration tst * fixed test Signed-off-by: Rez Moss <hi@rezmoss.com> * Update parse_homebrew_test.go Signed-off-by: Rez Moss <hi@rezmoss.com> * Update parse_homebrew_test.go fixed DCO Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Rez Moss <hi@rezmoss.com> * Update parse_homebrew_test.go add evd anno to test Signed-off-by: Rez Moss <hi@rezmoss.com> * lint Signed-off-by: Rez Moss <hi@rezmoss.com> * fixed test Signed-off-by: Rez Moss <hi@rezmoss.com> * with PR refactors Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * regenerate json schema Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * regenerate jsonschema Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * refactor homebrew parser + add tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * more resiliant variable extraction Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-05-13 13:01:41 -04:00