Christopher Angelo Phillips
9ea6330ebc
update split in py package_cataloger to cap at 2 ( #549 )
...
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-10-14 12:32:06 -04:00
Christopher Angelo Phillips
7d13fbf0d4
540 add additional go package metadata ( #546 )
...
* update with distinct golang metadata types
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-10-13 11:00:28 -04:00
Christopher Angelo Phillips
b25f5b664b
(464) - remove mod and cargo from image cataloger ( #539 )
...
* remove mod and cargo from image cataloger
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* update test error messages for clear failures
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-10-07 15:18:20 -04:00
Christopher Angelo Phillips and Alex Goodman
3462e18af3
478 identify go binaries and extract mod information ( #534 )
...
* add query by MIME type to source.FileResolver
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* import stereoscope lib changes to find mime type
- add bin cataloger
- add bin parser
- add mime type go utils
- import new resolver
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* add go std library code to unpack bin
- keep them in their own (original) files
- add note for "this code was copied from"
- comment the lines the required changing
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
Co-authored-by: Alex Goodman <alex.goodman@anchore.com >
2021-10-07 12:16:38 -04:00
Christopher Angelo Phillips
f47a6a88b1
( #495 ) Update documentNamespace uniqueness for spdx-json output ( #528 )
...
* add unique namespace identifier
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-10-05 13:10:49 -04:00
Christopher Angelo Phillips
5e4b668e5a
497 stable sorted CPE array (JSON and SPDX) ( #522 )
...
* add small sorting change to our specificity
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-10-01 15:31:17 -04:00
Christopher Angelo Phillips
75aed5f3ec
( #460 ) Extend license mapping for common SPDX license names ( #509 )
...
Fixes #460
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-09-30 16:54:36 -04:00
Christopher Angelo Phillips
3e8afc5274
update log file permissions to 0644 ( #511 )
...
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-09-21 10:34:10 -04:00
Christopher Angelo Phillips
93d00dc340
Populate Files and Relationship fields for spdx-json output ( #507 )
...
* update spdx22 Document model to include relationships field
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* update document and relationship to match current JSON spec
https://github.com/spdx/spdx-spec/blob/development/v2.2.1/schemas/spdx-schema.json
https://github.com/spdx/spdx-spec/pull/528
https://github.com/spdx/spdx-spec/pull/528#issuecomment-904180177
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* update File struct based on SPDX schema
Required fields:
[ "SPDXID", "fileName", "copyrightText", "licenseConcluded" ]
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-09-17 09:06:12 -04:00
Christopher Angelo Phillips
95df7dd035
Add command examples to release documentation ( #503 )
...
* update release document with commands run
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* small edits
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-09-14 09:08:37 -04:00
Christopher Angelo Phillips
3f305aa6cd
( #342 ) - remove strong distro check ( #496 )
...
* add Type conversion to remove strong distro type limit
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
* update signatures to be correct variable from os-release
Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com >
2021-09-09 13:05:22 -04:00