oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 14:02:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
385 Commits 65 Branches 273 Tags
bd4c784a6424ca3ff6ba4182ca80adff82125abb
Commit Graph
385 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dan Luhring bd4c784a64 Add test for package.json multiple license objects 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-14 11:01:59 -05:00
Dan Luhring 624a090631 Add test for package.json license object 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-14 09:50:17 -05:00
Alex Goodman dad1d9691c Merge pull request #263 from anchore/add-source-to-rpmdb-cataloger 
Add source to packages found by RPMdb cataloger
v0.7.1 		2020-11-12 09:36:20 -05:00
Alex Goodman 7964c27bd8 add source to packages found by rpmdb cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 09:27:08 -05:00
Alex Goodman 9581a0309b Merge pull request #262 from anchore/fix-release 
Fix release process
v0.7.0 		2020-11-11 15:15:12 -05:00
Alex Goodman 7e270bf76c restore the checksum file during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 15:11:51 -05:00
Alex Goodman fde37b4b56 provide goreleaser asset version via env var 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 14:36:24 -05:00
Dan Luhring 8627ea88ce Fix usage of goreleaser's artifact pipeline 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-11 14:29:55 -05:00
Alex Goodman 2c82c7c0f0 Merge pull request #257 from anchore/enhance-deb-support 
Enhance dpkg support
 2020-11-11 13:12:29 -05:00
Dan Luhring 4c38ea595d Merge pull request #261 from anchore/fix-brew 
Add signed and notarized ZIP release asset
 2020-11-11 13:09:45 -05:00
Dan Luhring 6fe5ad0739 Avoid Finder window flash during install 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-11 12:38:11 -05:00
Dan Luhring 7bced775c4 Add zip to gon outputs 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-11 12:30:29 -05:00
Alex Goodman db98fba3b4 Merge pull request #260 from anchore/add-warning-levels 
Add warning log level
 2020-11-11 11:13:51 -05:00
Alfredo Deza 29d464c38a Merge pull request #258 from anchore/distro-like 
Report the ID_LIKE value in the JSON presenter
 2020-11-11 11:11:13 -05:00
Alex Goodman 2a329002b8 enhance dpkg support by parsing md5sum and copyright file sources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 11:06:34 -05:00
Alex Goodman a6365886ad add warning log level 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-10 15:09:41 -05:00
Alfredo Deza 6ae3b47959 tests: update all tests to pass the IDLike value 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-10 12:40:50 -05:00
Alfredo Deza 10b55311df presenter: provide ID_LIKE information in json 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-10 12:40:17 -05:00
Alfredo Deza 64d5554144 include ID_LIKE in distro detection 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-10 12:37:35 -05:00
Alfredo Deza b3098f3423 Merge pull request #250 from anchore/issue-169 
Add distro information to JSON presenter
v0.6.0 		2020-11-09 14:18:48 -05:00
Alfredo Deza c2cf4eb7b0 update tests for the new distro information 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-09 12:16:00 -05:00
Alfredo Deza 1e79986188 json: update the document to include distro information 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-11-09 12:16:00 -05:00
Dan Luhring 3699a917fd Merge pull request #254 from anchore/updates-to-mac-releases 
Updates for macOS release process
 2020-11-06 13:49:54 -05:00
Dan Luhring 501870f89f Update README for secure macOS releases 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 13:40:31 -05:00
Dan Luhring c878cc361c Update install.sh to handle new macOS releases 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 13:39:26 -05:00
Dan Luhring 8fb5b17dbd Use .Version in place of .Tag for release asset name 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 13:36:02 -05:00
Alex Goodman b6eb589b78 Merge pull request #251 from anchore/add-rpm-file-info 
Add RPM file info sourced from the RPM DB
 2020-11-06 11:06:34 -05:00
Alex Goodman 6aba2f48d4 split out rpmdb file processing to helper + lint fixes 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 10:44:27 -05:00
Alex Goodman 0205e72be9 ensure resolvers ignore directories for "FilesBy*" methods 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:38 -05:00
Alex Goodman 8095cd9980 add rpmdb file info to cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:23 -05:00
Dan Luhring ecfc471ce5 Resolve security warning for macOS users (#249) 
* Add support for macOS signing and notarization

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Use Docker to run the changelog generator locally

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
v0.5.1 		2020-11-04 15:47:55 -05:00
Alex Goodman a52750bdd3 enhance alpine file discovery (#248) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-04 09:56:52 -05:00
Alex Goodman 773581704c bump threshold for inline compare for jenkins image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
v0.5.0 		2020-10-30 15:14:32 -04:00
Alex Goodman 6e98752c6b Merge pull request #247 from anchore/syft-java-cataloger-integration 
General Java cataloger enhancements
 2020-10-30 13:55:16 -04:00
Alex Goodman e2593cd6b7 remove extra fields from the compare script metadata namedtuple 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:59:53 -04:00
Alex Goodman 232cd13035 update tests for enhanced java pkg pairings 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:44:45 -04:00
Alex Goodman 2532928afa bump java compare testing thresholds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:06:47 -04:00
Alex Goodman 03dbfb8dfb improve java name and version extraction as well as parent pkg pairing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 08:12:25 -04:00
Alex Goodman a5cba13ddf enable more flexible java manifest structure (closer to the spec) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 16:26:04 -04:00
Alex Goodman a4f22e65fc expand compare testing images 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:51 -04:00
Alex Goodman ab45be98b8 append java nested package names to the virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:34 -04:00
Alex Goodman fc991bc62e partial java comparison with extra metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 12:40:49 -04:00
Alex Goodman 1230650771 allow for java manifest data to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 11:28:27 -04:00
Alex Goodman 452426d1d6 Merge pull request #245 from anchore/update-java-cataloger-for-engine 
Java cataloger miscellaneous fixes
 2020-10-28 17:36:44 -04:00
Alex Goodman 2675891110 remove parent java package from json && add java manifest section parsing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 17:19:06 -04:00
Dan Luhring bffc4713a7 Update zip archive handling to match globs as expected (#244) 
* Refactor zip file tests

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add glob support for leading slashes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update zip testing to account for glob matching

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Ignore .DS_STORE

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Improve normalization of zip entry names

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Rename zip test helpers file

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-10-28 16:50:40 -04:00
Alex Goodman 62f6146c37 do not include optional fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:58:54 -04:00
Alex Goodman 8bcba7d830 update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman 76c8f24090 add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Alex Goodman cc466e47da bump python version for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-27 14:53:52 -04:00