oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-31 06:26:30 +01:00
Code Issues Packages Projects Releases Wiki Activity
3,552 Commits 65 Branches 273 Tags
a2ed08dfddaa9b36ef31b2bdb0241925c1990730
Commit Graph
157 Commits
Author SHA1 Message Date
Christopher Angelo Phillips f3d3eddc96 update config so on copy paste it works without edits (#762) 
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
 2022-01-21 14:15:22 +00:00
Weston Steimel 46dcc84f1a support .sar for java ecosystem (#748) 
Signed-off-by: Weston Steimel <weston.steimel@gmail.com>
 2022-01-18 09:22:02 -05:00
Keith Zantow 5e5312c72d Add support for multiple output files in different formats (#732) 2022-01-06 17:52:20 -05:00
Alex Goodman 38c4b17847 Add support for searching for jars within archives (#734) 
* add support for searching jars within archives

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add package cataloger config options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address review comments + factor out safeCopy helper

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update config docs regarding package archive search options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* show that unindexed archive cataloging defaults to false

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove lies about -s

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address review comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update search archive note about java

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2022-01-06 21:40:51 +00:00
Keith Zantow 006ba9b557 Add --exclude flag (#695) 2021-12-20 10:35:25 -05:00
Davide Icardi ecbfbe6896 update readme for possible output types (#669) 
Signed-off-by: Davide Icardi <davide.icardi@gmail.com>
 2021-12-14 07:11:48 -05:00
Dan Luhring 7957294b26 Add section for community meetings (#655) 
Signed-off-by: Dan Luhring <dan+github@luhrings.com>
 2021-12-06 12:18:34 -05:00
Dan Luhring ed84e43d67 Remove webinar announcement (#650) 
Signed-off-by: Dan Luhring <dan+github@luhrings.com>
 2021-12-01 19:07:10 +00:00
Dan Luhring f0b2d81599 Announce meetup on 2021-12-01 (#640) 
Signed-off-by: Dan Luhring <dan+github@luhrings.com>
 2021-11-22 10:13:18 -05:00
Alex Goodman 23a67dd729 document file scheme (#613) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-11-02 19:47:25 -04:00
Christopher Angelo Phillips 3e20edee55 update readme with private registry section (#610) 2021-11-02 15:00:56 -04:00
Dan Luhring 7b319e32bb Remove webinar announcement (#582) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-10-22 07:48:36 -04:00
Dan Luhring c0f55866ec Announce upcoming webinar (#553) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-10-15 12:13:28 -04:00
Dan Luhring 10368f6fe8 Add Syft logo (#545) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-10-11 21:06:27 +00:00
Alex Goodman dd2c178085 add --file option to readme (#533) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-10-05 15:34:32 -04:00
Dan Luhring 4b7217f052 Improve documentation (#525) 
* Make installation methods more obvious

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Create linkable section headers

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add badge for joining Slack

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Document requirement for signed commits

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-10-04 09:29:27 -04:00
Dan Luhring d1ac476986 Add announcement for KubeCon meetup (#515) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-09-24 11:42:06 -04:00
Alex Goodman 5de1a0a236 Revert "Add announcement for upcoming OSS meetup (#490)" (#491) 
This reverts commit 035ef03b0c.

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-09-02 10:59:51 -04:00
Dan Luhring 035ef03b0c Add announcement for upcoming OSS meetup (#490) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-08-25 14:35:32 -04:00
Keith Zantow 93b4bf9379 Add option to enable http registry connections (#482) 
Signed-off-by: Keith Zantow <kzantow@gmail.com>
 2021-08-17 12:52:51 -04:00
Alex Goodman dd56450f92 Revert "Add callout for OSS meetup (#446)" (#459) 
This reverts commit 66e71c39e2.

Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2021-07-02 14:29:27 +00:00
Alex Goodman fee74d57b8 Update documentation to show SPDX support (#452) 
* add docs for spdx support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* copy updates for format options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-07-01 14:52:57 +00:00
Dan Luhring 66e71c39e2 Add callout for OSS meetup (#446) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-06-24 11:44:20 -04:00
Alfredo Deza 92c20c885e update readme to point to grype 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-05-06 14:03:38 -04:00
Alex Goodman 8b315367e8 fix validations badge 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 08:59:07 -04:00
Alex Goodman b771d7bfd3 bump go.mod minimum required go version 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-16 08:53:03 -04:00
Alex Goodman c363b2b532 Add ability to pull images directly from a registry (#378) 
* add registry image source

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use explicit source for fetching image + add scheme and registry tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* adjust test variable name and add credential helper function

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 13:30:57 +00:00
Alex Goodman 51b13f8221 rename Contents to FileContents in app config and documentation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:34:54 -04:00
Alex Goodman 44915b435f add documentation for the file contents cataloger config options 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:33:49 -04:00
Alex Goodman f438ee974c add documentation for the file classifier cataloger config options 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-12 17:11:43 -04:00
Alex Goodman 9ec09add67 Add secrets search capability (#367) 
* add initial secrets cataloger

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update ETUI elements with new catalogers (file metadata, digests, and secrets)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update secrets cataloger to read full contents into memory for searching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype of parallelization secret regex search

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype with single aggregated regex

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype for secret search line-by-line

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* quick prototype hybrid secrets search

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add secrets cataloger with line strategy

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* adjust verbiage towards SearchResults instead of Secrets + add tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json schema with secrets cataloger results

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address PR comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update readme with secrets config options

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* ensure file catalogers call AllLocations once

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-01 21:34:15 +00:00
Alex Goodman 68c4bf8bbe update documentation to reflect root vs packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 13:00:25 -04:00
Alex Goodman 46636ccb3c simplify command alias logic + remove deprecation warning for root command 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 15:25:04 -04:00
Alex Goodman f180d1c537 improve config parsing + fix command deprecation warning 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman 4bde850f04 add file-metadata config options to docs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 97f0f83544 add poweruser command and alias root to packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:53 -04:00
Alex Goodman a56292e2e0 Revert "Add the ability to run syft from a scratch image." 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-12-16 16:54:34 -05:00
Toure Dunnon 9365625fc3 added: corrected request from review. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-15 09:27:09 -05:00
Toure Dunnon c626cb1c60 added: update to README.md to indicate on how to use the new feature. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-14 08:10:46 -05:00
Alex Goodman 52bac6e2fd Add enterprise upload capability (#285) 
* add support to upload results to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add package sbom upload

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add dockerfile support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add manifest, index, and dockerfile import functions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* schema version to json output + enhance json schema generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* modify package SBOM shape to be entire syft document + add etui updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add import image config and manifest support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add config options for import to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate final stereoscope and client-go deps

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-09 22:20:53 -05:00
Dan Luhring 501870f89f Update README for secure macOS releases 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 13:40:31 -05:00
Alex Goodman 1cdf2b9151 remove cyclonedx from future plans (already implemented) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 11:05:28 -04:00
Alex Goodman 1fc46291a6 update install script arguments for proper argument processing (#211) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 11:04:53 -04:00
Alex Goodman 0d3e153959 replace circle ci badge with GHA (#209) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 15:45:26 -04:00
Alfredo Deza 949bf7bc91 docs: update the readme to remove pre-release note 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-10-08 15:30:50 -04:00
Alex Goodman 3d91a66536 Add OCI support + use URI schemes for user image input (#178) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update docs to reflect OCI image sources + URI scheme change

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope pin

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:24:24 -04:00
Alex Goodman afce14388b replace in-repo asset 2020-08-14 13:58:45 -04:00
Alex Goodman f17feeb6ed Add demo gif + slack channel links (#145) 
* add demo gif

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add slack channels to issue template selection

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* github is picky about the issue template file extension

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 14:57:22 -04:00
Ross Turk d7695aeae1 Add beta warning and todos (#136) 
* Add future ideas + beta warning to README

Signed-off-by: Ross Turk <ross@rossturk.com>

* Update link

Signed-off-by: Ross Turk <ross@rossturk.com>
 2020-08-11 07:07:55 -04:00
Dan Luhring 73ec35f513 Update installation method (#139) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 19:29:19 -04:00