oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 14:02:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
450 Commits 65 Branches 273 Tags
c1fa701602c1f7824fd82d199db060bcf46b185d
Commit Graph
450 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dan Luhring c1fa701602 Apply lint fix 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-12-22 17:46:33 -05:00
Dan Luhring 183b8f79d0 Handle site packages based on which egg file is parsed 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-12-22 17:41:27 -05:00
Alex Goodman 558781eed6 Merge pull request #302 from anchore/add-manual-cache-buster 
add manual cache buster to the pipeline
 2020-12-22 16:32:59 -05:00
Alex Goodman 60f525af18 add manual cache buster to the pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-22 16:22:42 -05:00
Alfredo Deza 8dbb095fc6 Merge pull request #301 from anchore/issue-300 
catalogers: Python runtime is not a Python package itself, ignore it
 2020-12-22 15:18:56 -05:00
Alfredo Deza d0d7e849c9 catalogers: Python runtime is not a Python package itself, ignore it 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-12-22 10:59:43 -05:00
Alex Goodman 6aaf9ee712 Incorporate import changes + add image overwrite option (#294) 
* incorporate import changes + add image overwrite option

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update import tests to account for arbitrary json shape

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
v0.11.0 		2020-12-18 16:59:30 -05:00
Alex Goodman 75d89293ce fix acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 14:32:29 -05:00
Zach HillDan LuhringAlex Goodman
 		7962002f81 Split dpk source into name and version (#297) 
* Split dpk source into name and version

Signed-off-by: Zach Hill <zach@anchore.com>

* update dpkg status source name parsing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Dan Luhring <luhring@users.noreply.github.com>
Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 14:08:19 -05:00
Alex GoodmanandDan Luhring ea162f87f4 update dpkg license to include single-word entries (#298) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Dan Luhring <luhring@users.noreply.github.com>
 2020-12-18 12:54:09 -05:00
Zach HillandDan Luhring 9adb57bcb5 Adds globs for .egg-info file for python detection as well as tests (#296) 
* Adds globs for .egg-info file for python detection as well as tests

Signed-off-by: Zach Hill <zach@anchore.com>

* Fix lint error

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

Co-authored-by: Dan Luhring <dan.luhring@anchore.com>
 2020-12-18 12:36:25 -05:00
Alex Goodman 0891faa756 Merge pull request #293 from anchore/revert-288-syft_docker_image 
Revert "Add the ability to run syft from a scratch image."
 2020-12-16 16:55:26 -05:00
Alex Goodman a56292e2e0 Revert "Add the ability to run syft from a scratch image." 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-12-16 16:54:34 -05:00
Toure Dunnon 688aa2e832 Merge pull request #288 from anchore/syft_docker_image 
Add the ability to run syft from a scratch image.
 2020-12-16 10:39:30 -05:00
Toure Dunnon 2c90ec84b9 Merge branch 'main' into syft_docker_image 2020-12-15 19:52:55 -05:00
Alex Goodman d1d7471f2f Merge pull request #290 from anchore/improve-python-cataloger 
Improve performance of the python cataloger
 2020-12-15 12:41:58 -05:00
Toure Dunnon a19496b846 added: Docker login github action to publish new images 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-15 11:07:14 -05:00
Alex Goodman d94d7a7d80 add tests for content requester object 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:15 -05:00
Alex Goodman 45fed7c69b break out packageEntry into a separate file 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman e4a3e433b6 add content requested and refactor python cataloger to use it 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman 82c8a8e17b add mem profile option and refactor python cataloger for batch requests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman be5917a058 add profiler dev option 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:13 -05:00
Toure Dunnon 9365625fc3 added: corrected request from review. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-15 09:27:09 -05:00
Toure Dunnon c626cb1c60 added: update to README.md to indicate on how to use the new feature. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-14 08:10:46 -05:00
Toure Dunnon 07f2c2f702 Add the ability to run syft from a scratch image. 
This change will allow endusers or CI to run syft from a
minimum image which will simplify CI deployment.

Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-14 08:10:46 -05:00
Dan Luhring 737a81c38c Sort generated CPEs by specificity (#289) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-12-11 12:08:39 -05:00
Alex Goodman 52bac6e2fd Add enterprise upload capability (#285) 
* add support to upload results to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add package sbom upload

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add dockerfile support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add manifest, index, and dockerfile import functions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* schema version to json output + enhance json schema generation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* modify package SBOM shape to be entire syft document + add etui updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add import image config and manifest support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add config options for import to enterprise

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate final stereoscope and client-go deps

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
v0.10.0 		2020-12-09 22:20:53 -05:00
Toure Dunnon 2d0c127419 Merge pull request #282 from anchore/issue_270 
Corrected syft cyclonedx generated bom to adhere to the specifications found in CycloneDX 1.2
 2020-12-04 13:48:55 -05:00
Toure Dunnon 1a124bd77b added: regenerated new test fixtures to reflect change in specification. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-04 11:48:20 -05:00
Toure Dunnon a5fd83b21d added: correct the bom descriptor to meet the cyclonedx 1.2 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-12-04 11:48:20 -05:00
Alex Goodman f87c59b4eb Merge pull request #286 from anchore/rm-tree-catalog-sync-check 
Bump stereoscope to remove tree-catalog syft check
v0.9.2 		2020-12-03 16:32:24 -05:00
Alex Goodman 3ce7eabc98 bump stereoscope to remove tree-catalog syft check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-03 16:20:17 -05:00
Alex Goodman 6f9ded60ed Merge pull request #279 from anchore/enhance-java-cpe-by-group-id 
Include CPEs with elements from POM GroupId fields
v0.9.1 		2020-12-02 07:50:31 -05:00
Dan Luhring 65cbacd135 Clarify python wheel parsing process (#281) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-12-01 16:30:30 -05:00
Alex Goodman 2989d3d975 include CPEs with elementds from POM GroupId fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-01 08:00:49 -05:00
Dan Luhring ae71b8832d Update stereoscope version to fix opaque directory merge issue (#278) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
v0.9.0 		2020-11-30 11:37:44 -05:00
Alex Goodman c42b036f46 Merge pull request #276 from anchore/generate-json-schema 
Generate json schema from struct definitions
 2020-11-23 11:22:33 -05:00
Alex Goodman 8a17bfb69f generate json schema from struct definitions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-20 15:47:10 -05:00
Alex Goodman 0ed30138c4 Merge pull request #271 from anchore/cpe-generation 
Move package PURL and CPEs to Package definition
 2020-11-19 12:38:20 -05:00
Alex Goodman 3aaa0e5566 move package purl and cpes (identities) to pkg.Package 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-19 11:25:51 -05:00
Alex Goodman 71939557e6 Merge pull request #266 from anchore/document-import 
Add JSON document import
v0.8.0 		2020-11-17 13:21:57 -05:00
Alex Goodman 030427bb33 rename json artifact to package + update resolver integrity checks 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 569a598df7 minimize pointer usage & order return types consistently 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Dan Luhring 0ad8c53ec2 Fix cyclonedx test fixture usage of dynamic digest value 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman c892c3609e improve doc comments 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 62b03f3a91 dont export structs used for unmarshaling 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 4b45c42f5a make cyclonedx presenter generally reusable (for grype) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman f46de19c6b migrate scope option to image metadata (from source) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 91baabe5a1 add image metadata as catalogFromJSON return 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 6f7a4fd3e4 move source metadata upstream and fix tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00