oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-01 23:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity
330 Commits 65 Branches 273 Tags
cbb7e00a52e7a88b06beca953caade02b1d5d652
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alfredo Deza 4ff330e396 Merge pull request #208 from anchore/non-prerelase 
docs: update the readme to remove pre-release note
 2020-10-08 15:34:06 -04:00
Alfredo Deza 949bf7bc91 docs: update the readme to remove pre-release note 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-10-08 15:30:50 -04:00
Alfredo Deza ae1d99b5a1 Merge pull request #150 from anchore/issue-59 
Add a `setup.py` cataloger
 2020-08-17 17:23:13 -04:00
Alfredo Deza 861806f1dd test: add setup.py integration cases 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 16:00:49 -04:00
Alfredo Deza 9c4024d6fa cataloger: add setup.py support for Python 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 16:00:49 -04:00
Alfredo Deza 27c207bbca pkg: add a new type to identify setup.py packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 10:12:27 -04:00
Alfredo Deza 691e26d3a3 Merge pull request #142 from anchore/args-fix 
cmd: allow no args passed, don't error
 2020-08-11 08:29:28 -04:00
Alfredo Deza 3bcae045cd cmd: allow no args passed, don't error 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-11 08:01:19 -04:00
Alfredo Deza 21aa32c599 Merge pull request #134 from anchore/issue-69 
docs: add contributing guidelines
 2020-08-10 14:46:54 -04:00
Alfredo Deza 2adbe75002 docs: add contributing guidelines 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-10 14:15:07 -04:00
Alfredo Deza c67e17a2cf Merge pull request #114 from anchore/issue-111 
Add another option to fall back on name detection
 2020-07-31 07:50:49 -04:00
Alfredo Deza 04a1c91881 java: fallback to manifest.ImplTitle when there is no name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-31 07:35:43 -04:00
Alfredo Deza bb81c0b9fe tests: java cataloger tests for selecting name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-31 07:35:43 -04:00
Alfredo Deza bc693829a6 Merge pull request #110 from anchore/issue-8 
adds the yarn.lock cataloger
 2020-07-29 11:20:06 -04:00
Alfredo Deza caecce9b41 tests: update integration tests to include yarn packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:35:45 -04:00
Alfredo Deza 713f660528 cataloger: update controller to use javascript (vs. npm) 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:20:11 -04:00
Alfredo Deza d79cecea3e tests: verify new yarn.lock parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:20:11 -04:00
Alfredo Deza 57904743aa pkg: define the Yarn package type 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo Deza 67fb1326e0 cataloger: implement the yarn.lock parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo Deza 146b4bd01f cataloger: rename npm to javascript to accommodate yarn parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo DezaandAlex Goodman f8a5c56191 Fix acceptance tests (#106) 
* test: allow no metadata in packages

Signed-off-by: Alfredo Deza <adeza@anchore.com>

* test: update centos json fixture

Signed-off-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-07-25 06:39:44 -04:00
Alfredo Deza 578952986f Merge pull request #103 from anchore/issue-81 
scope: do not create scope if path is invalid
 2020-07-24 15:33:30 -04:00
Alfredo Deza e1ce040ead scope: do not create scope if path is invalid 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-24 15:25:14 -04:00
Alfredo Deza 3cb7c43dbc Merge pull request #96 from anchore/issue-7 
Add support for analyzing package-lock.json files
 2020-07-23 09:54:39 -04:00
Alfredo Deza f1c14d97f6 integration: validate package-lock.json parsing 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 09:51:05 -04:00
Alfredo Deza 9f314eb493 cataloger: support npm packages from package-lock.json files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 09:51:05 -04:00
Alfredo Deza fb4b83cf3e cataloger: define Javascript (npm) package type 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 09:51:01 -04:00
Alfredo Deza 265516682f Merge pull request #92 from anchore/issue-58 
catalog Python packages from a requirements.txt file
 2020-07-21 16:00:20 -04:00
Alfredo Deza 74d87254ed integration: validate requirements.txt is picked up and parsed 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:49:19 -04:00
Alfredo Deza 50eae46d37 type: add PythonPkg types for requirements-based packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:49:19 -04:00
Alfredo Deza f8a2b7a626 tests: verify requirements.txt captures versions 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:49:19 -04:00
Alfredo Deza 83056a4b6f cataloger: add a requirements.txt parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 15:38:30 -04:00
Alfredo Deza 8747b68b86 cataloger: add a glob path for parsing requirements.txt 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 14:37:06 -04:00
Alfredo Deza 380cd39514 Merge pull request #91 from anchore/issue-75 
Recurse when creating a directory catalog
 2020-07-21 11:26:03 -04:00
Alfredo Deza cea38fcba3 cataloger: use ** for glob patterns 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:19:42 -04:00
Alfredo Deza 03bbcfa08d cataloger: add ability to recurse with doublestar 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:10:02 -04:00
Alfredo Deza 942cd6eb18 dependencies: add doublestar for recursive globbing support 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:10:02 -04:00
Alfredo Deza f02b8cc7bc tests: use the catalog directly instead of via the presenters 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 11:10:02 -04:00
Alfredo Deza fe15c0a08b tests: remove dir_presenters, no longer needed 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-20 15:55:52 -04:00
Alfredo Deza b5a353349f Merge pull request #87 from anchore/unkown-distro 
Add a helper function/constructor for an UnkownDistro
 2020-07-17 13:54:14 -04:00
Alfredo Deza b734623ef0 make: bump test coverage 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza 0534a68ec6 tests for new Identify distro func 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza e2b71184aa when no distros are matched, return an UnkownDistro 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza f51cae2043 distro: add new constructor for getting UnkownDistros 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:32:53 -04:00
Alfredo Deza f03f7b32e9 Merge pull request #85 from anchore/issue-84 
Remove carriage returns from distro files
 2020-07-17 08:31:22 -04:00
Alfredo Deza fb6bc116e0 tests: verify carriage returns are parsed in distro files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 17:20:30 -04:00
Alfredo Deza 5edcae13b3 distro: remove unwanted chars from os distro files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 17:19:57 -04:00
Alfredo Deza aa0693bdc0 Merge pull request #83 from anchore/issue-82 
Do not join paths when returning multiple file contents by ref
 2020-07-16 14:36:30 -04:00
Alfredo Deza a05d58686e resolvers: do not join paths, it is assumed they are already joined 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 13:14:03 -04:00
Alfredo Deza d82a0872c9 tests: verify MultipleFileContentsByRef gets contents from the right path 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-16 13:14:03 -04:00
Alfredo Deza 07b2a1da87 Merge pull request #76 from anchore/issue-73 
Better abstraction for img/dir decision fork
 2020-07-15 10:49:15 -04:00
Alfredo Deza b457d4ebd2 tests: drop coverage requirement to 69% for now 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza d982ad6345 lib: implement a NewScope to produce scopes from inputs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza b2c8685437 integration: use new constructor params for scope from images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza f418c99a3b remove old text support files 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza 45b5fa82c8 presenters: abstract into text only 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 10:15:58 -04:00
Alfredo Deza e7518ad998 tests: move img-based tests and fixtures 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 09:59:40 -04:00
Alfredo Deza a6e1866cdb cmd: do not default for images, handle it specifically 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 09:59:40 -04:00
Alfredo Deza 2f626bf9fd directory resolver should join path and target directory for retrieving contents 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 09:59:40 -04:00
Alfredo Deza 429c28720c integration: update tests to use scope instead of img directly 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza 69b01caba7 update scope tests to use new generic scope 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza c56b82e529 resolvers: add a directory resolver 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza 5cee2668e3 resolvers: satisfy interface with multiple file contents by ref 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:28 -04:00
Alfredo Deza 6e9171e8a6 presenter: use new scoped source 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 4b69758f2c scope: create a new generic Resolver interface 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza b35a412467 scope: use a generic scope struct instead of specific to images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 145bb95a2d lib: use scope instead of requiring images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza d22c1d0838 distro: identify uses the scope resolvers now, not images 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 923d220a90 controller: use new scope.Resolver interface 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 6cbf6d3409 cmd: do not pass img around, use scope 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-15 07:53:27 -04:00
Alfredo Deza 1d711ee06f Merge pull request #71 from anchore/protocol-cleanup 
cmd: replace Printf with a logging statement
 2020-07-07 10:42:26 -04:00
Alfredo Deza 74f339e043 cmd: replace Printf with a logging statement 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-07 10:40:55 -04:00
Alfredo Deza fe338760b0 Merge pull request #68 from anchore/issue-31-1 
Add support for file-based contents
 2020-07-02 17:29:45 -04:00
Alfredo Deza 9baae90c0b integration: add tests for dir-based presenters 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 3548c7b132 tests for scope.go 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 3eedb86a1f tests for protocol.go 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza c35108b00d tests: reorganize text img files to match new layout 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza f49ca8107a tests: add verification for dirs and imgs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 293b7b6ff9 tests: update integration tests to use new cataloger 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 96d86fa214 tests: move existing json tests to json/imgs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 16:09:55 -04:00
Alfredo Deza 7544330bc2 json img presenter needs to degrade nicely when file metadata is not present 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza feef7e28dc cmd: add note about panic when img is nil 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza ec52e91301 scope: create interface for content and file resolvers 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza b2d7bd3b1a scope: add directory-based scoping 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza e38e3e9ff4 create text-based presenters for dirs and imgs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza 268cfef0ee re-organize json-based presenters for dirs and imgs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza 312c8acfbe presenter can pick text-dir, text-img, json-text, or json-img for reporting 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza 69a0376f99 distro: add note to replace with MultipleFileContents in the future 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza 507a6b69cb catalog controller uses scope to determine file resolvers 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza faf21a67a6 lib: return a protocol-based scope (dir or img) 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 15:12:48 -04:00
Alfredo Deza 678a2c1dcb create a protocol-parsing package to distinguish dir,docker, etc... 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-02 13:04:19 -04:00
Alfredo Deza 4d31655908 allow root command to catalog a directory 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-01 07:35:01 -04:00
Alfredo Deza d2e6229b2e Merge pull request #64 from anchore/issue-36 
Create a text presenter, default to it
 2020-06-22 14:05:06 -04:00
Alfredo Deza 0a1f99503f cli: default to the new text presenter 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-06-22 11:09:00 -04:00
Alfredo Deza 2e6aef17e1 implement a text presenter 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-06-22 11:09:00 -04:00
Alfredo Deza 72f9091493 presenter: allow a text presenter option 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-06-19 15:46:31 -04:00
Alfredo Deza acbeea9800 option: add a Text-based presenter 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-06-19 15:45:58 -04:00
Alfredo Deza 812934c964 Merge pull request #57 from anchore/issue-33 
Initial take on distro detection
 2020-06-12 15:58:36 -04:00
Alfredo Deza e460c031b6 distro: add tests and fixtures for identification 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-06-12 15:57:51 -04:00
Alfredo Deza 889fa52b7d lib: update signature to *Distro 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-06-12 10:49:14 -04:00