oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-10-30 14:02:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
330 Commits 65 Branches 273 Tags
cbb7e00a52e7a88b06beca953caade02b1d5d652
Commit Graph
96 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman 15e2e32103 Merge pull request #237 from anchore/update-future-plans 
Remove CycloneDX from future plans
 2020-10-23 11:06:51 -04:00
Alex Goodman fd65f363ce Merge pull request #236 from anchore/fix-acceptance-test-pipeline 
Bootstrap cached dependencies and CI dependencies separately for acceptance tests
 2020-10-23 10:55:24 -04:00
Alex Goodman de2e6a13b8 Merge pull request #234 from anchore/split-python-cataloger-with-cataloger-addition 
Split python cataloger by image/directory scanning + add more metadata
 2020-10-23 10:37:01 -04:00
Alex Goodman beb6afff36 Merge pull request #232 from anchore/cataloger-interface-upgrade 
Upgrade cataloger interface to use full resolver
 2020-10-21 11:47:52 -04:00
Alex Goodman bb14f3b45b reduce number of open files while processing nested java archives (#227) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-16 17:22:14 -04:00
Alex Goodman 4c751cb1d4 Merge pull request #222 from VinodAnandan/main 
Enable CodeQL Security Scan
 2020-10-15 23:11:01 -04:00
Alex Goodman 3ba67a6bcc update json schema to account for optional gemspec fields (#225) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 13:56:59 -04:00
Alex Goodman dcb5d6d08e remove greeter action since it is broken for forked PRs (#223) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 10:20:09 -04:00
Alex Goodman b3387807c1 allow for gemspec metadata fields to be optional (#218) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 09:57:58 -04:00
Alex Goodman 24c4c025e1 Merge pull request #217 from jhujasonw/main 
Fixes #212 by increasing buffer size for scanner
 2020-10-14 07:29:00 -04:00
Alex Goodman 1fc46291a6 update install script arguments for proper argument processing (#211) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 11:04:53 -04:00
Alex Goodman 2b932f8d65 run tests on fork PRs (#210) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 07:45:05 -04:00
Alex Goodman 0d3e153959 replace circle ci badge with GHA (#209) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 15:45:26 -04:00
Alex Goodman 335a6b022f add acceptance test to cover gem cataloger + fix gem cataloger parent dir (#207) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 13:13:31 -04:00
Alex Goodman da0eb6f20f fix acceptance tests & add notification upon failures (#204) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 11:07:00 -04:00
Alex Goodman 16b23e7994 add gha pipeline to replace circlei pipeline (#202) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-07 12:20:51 -04:00
Alex Goodman e6b71486b0 modify version command to match grype (#196) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-06 13:13:52 -04:00
Alex Goodman b5ce187ba7 replace modfile with stdlib (#187) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:25:04 -04:00
Alex Goodman 26855a2a9e ignore apk xattr file checksum + remove log.Errorf error wraps (#192) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:22:17 -04:00
Alex Goodman 4b78d9a1c0 support home dir expansion (#188) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 15:02:21 -04:00
Alex Goodman f4502fc824 Add notifications around the release process (#184) 
* add pipeline notification upon release

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add pending notification to release pipeline

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:58:56 -04:00
Alex Goodman 03378e976c always return a cleanup function from scope (#183) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:20:06 -04:00
Alex Goodman 576fbc898b rm stereoscope from testutils (#181) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:53:05 -04:00
Alex Goodman 49800b6747 Normalize the json image/dir source (#180) 
* normalize the json image/dir source

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json image presenter golden file

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:07:38 -04:00
Alex Goodman c46d004a3b remove duplicate rows from the summary table (#179) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:32:37 -04:00
Alex Goodman 3d91a66536 Add OCI support + use URI schemes for user image input (#178) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update docs to reflect OCI image sources + URI scheme change

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope pin

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:24:24 -04:00
Alex Goodman 45b5cab49a unpin skopeo during mac acceptance tests (#176) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-18 13:54:40 -04:00
Alex GoodmanandAlfredo Deza f3076c3905 Add docs around the main execution path (#172) 
* add docs around the main execution path of syft

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/lib.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/lib.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap line

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-09-17 06:02:51 -04:00
Alex Goodman df7c83c9b0 use xml encoder (#165) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-31 08:06:56 -04:00
Alex Goodman 8a4886ec0e Add package URL support to the CycloneDX presenter (#164) 
* add package URL support to the CycloneDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap license tags with licenses

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-30 21:40:19 -04:00
Alex Goodman eda0f8c774 add bom descriptor schema + test against xml schemas in pipeline (#163) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-27 19:12:45 -04:00
Alex Goodman d85d0ac418 add changelog generation (#162) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-27 08:10:56 -04:00
Alex Goodman 63661da377 Fix acceptance tests (#158) 
* ensure acceptance tests fail when results are piped

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix spelling in inline-compare python script

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-24 21:28:07 -04:00
Alex Goodman f892289e7c Add CycloneDX presenter (#157) 
* add CycloneDX presenter + BOM Descriptor extension

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add docstrings to cyclonedx presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-24 20:43:29 -04:00
Alex Goodman 6b65cb6d7d add release process docs (#153) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-24 14:38:31 -04:00
Alex Goodman 95517d131a Improve overall documentation (#148) 
* improve overall documentation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix tests to use scope.Resolver over scope

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-13 16:34:32 -04:00
Alex Goodman f17feeb6ed Add demo gif + slack channel links (#145) 
* add demo gif

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add slack channels to issue template selection

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* github is picky about the issue template file extension

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 14:57:22 -04:00
Alex Goodman 51b9c73c31 Add documentation around catalogers, UI elements, and the event bus (#143) 
* add basic documentation for catalogers (with refactoring for simplification)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add docs for catalog parsers, UI, and event bus

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update bus phrasing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:04:39 -04:00
Alex Goodman 5042d371cf migrate to anchore/go-rpmdb (#144) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-11 15:32:51 -04:00
Alex Goodman 90bd68e44c Disable prerelease version update check (#140) 
* disable prerelease version update check

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use prerelease flag as source of truth for user notifications

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-11 09:54:04 -04:00
Alex Goodman 647c806ee4 Add install script + brew tap (#138) 
* add install script

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add brew tap

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* rm install warning

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* force non-prereleases

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 17:15:00 -04:00
Alex Goodman ac9141e2ad add issue template (#135) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 14:47:32 -04:00
Alex Goodman 2d452bf59e Add inline-comparison as acceptance test (#130) 
* add inline-compare as acceptance test

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add additional RPM metadata

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments and doc strings to the compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 10:33:44 -04:00
Alex Goodman a3a3e3848f replace master with main (#128) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 13:27:11 -04:00
Alex Goodman 817ce61036 Add detailed location info to json artifact (#127) 
* add detailed location info to json artifact

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* decompose json presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 10:05:16 -04:00
Alex Goodman dc8dfc8457 fix panic on top-level log (#125) 2020-08-06 08:29:52 -04:00
Alex Goodman f855a38a01 pull all commits on checkout for release to build changelog (#126) 2020-08-06 08:28:01 -04:00
Alex Goodman bfc5dd87af replace fetching->loading and reading->parsing in UI (#124) 2020-08-06 08:19:03 -04:00
Alex Goodman e2a874a277 finalize json output & add schema (#118) 2020-08-04 16:05:53 -04:00
Alex GoodmanandAlfredo Deza 2560266e38 Initial README (#120) 
* initial readme + logging and output fixes to support descriptions

* minor tweaks to README descriptions

* simplify phrasing

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* add comment for example gif

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* spelling fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* update phrasing

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* simplify TODO note

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* grammar fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* phrase fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* rm readme bash block indicators

* clarify config examples are default values

* rm value

Co-authored-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-08-04 15:22:34 -04:00
Alex Goodman 8fe59c6f1a bump stereoscope for docker pull + add UI elements for pull status (#117) 2020-08-03 16:03:47 -04:00
Alex Goodman 78515da285 replace zap logger with logrus (#116) 2020-08-01 11:56:38 -04:00
Alex Goodman 5320280216 show message when no packages are discovered (#115) 2020-07-31 08:30:35 -04:00
Alex Goodman 271ba35c85 Export UI handlers for reuse in other tools (#113) 
* export UI handlers for reuse in other tools

* bump jotframe to fix cursor issues at frame close
 2020-07-30 15:16:58 -04:00
Alex Goodman 857f41b04b Merge pull request #112 from anchore/ignore-prerelease-versions 
Ignore prerelease versions when uploading version file on release
 2020-07-30 12:37:25 -04:00
Alex Goodman 50b50a50b2 Merge pull request #108 from anchore/upload-version 
Upload version check file on release
 2020-07-27 09:33:52 -04:00
Alex Goodman 08ea496544 Merge pull request #94 from anchore/table-output 
Add default table presenter
 2020-07-25 08:49:14 -04:00
Alex Goodman 6b0ab2de4a Merge pull request #107 from anchore/fix-acceptance-compare 
Fix acceptance test compare script & persist results
 2020-07-24 17:53:02 -04:00
Alex Goodman 9ec5da24dd fix py globs to include partial matches (#101) 2020-07-24 08:22:56 -04:00
Alex Goodman 2132700198 add apk/alpine support (#98) 2020-07-23 20:35:57 -04:00
Alex Goodman 63ba7ae47d add remaining debian & el distro support (#99) 2020-07-23 20:35:40 -04:00
Alex Goodman 5ccd6d5f6a check for unsupported "go get" chars (#100) 2020-07-23 13:08:31 -04:00
Alex GoodmanandAlfredo Deza ba4f63099d Add release process (#89) 
* add check for app update; fix ETUI error handling

* validate user args

* add goreleaser support

* replace cgo dependencies (go-rpm) with go equivalents

* add acceptance tests against build snapshot

* add brew tap + acceptance test pipeline

* add mac acceptance tests

* fix compare makefile

* fix mac acceptance tests

* add release pipeline with wait checks

* add token to release step

* rm dir presenters int test

* enforce dpkg to be non interactive

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* pin brew formulae

* pin skopeo to formulae url

* only run acceptance tests

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-07-23 10:52:44 -04:00
Alex Goodman 44c69f1f91 add go.mod cataloger (#97) 2020-07-23 08:17:30 -04:00
Alex Goodman 7ebb9f4e0b Add check for app update (#88) 
* add check for app update; fix ETUI error handling

* validate user args
 2020-07-21 12:02:03 -04:00
Alex Goodman 4fa391b4cb remove metadata from text presenter (#90) 2020-07-20 15:28:26 -04:00
Alex Goodman 9e285fd0e2 use common entry point for integration tests; refactor cmd pkg (#86) 2020-07-17 15:16:33 -04:00
Alex Goodman 66a16a67fd Add support for detecting nested java archives (#77) 
* with sb build app

* test nested jar support

* pin jdk version during parse test (but dont compare version)
 2020-07-15 07:42:35 -04:00
Alex Goodman e8d11eec69 add license validation (#80) 2020-07-13 13:07:20 -04:00
Alex GoodmanandAlfredo Deza 61f51d80bb Add comparative analysis with anchore-engine (#78) 
* add comparative analysis

* remove extra comma from compare script tuple

Co-authored-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-07-13 12:12:00 -04:00
Alex Goodman 3f090f9647 fix java cache key for CI; fix circle docker api version (#79) 2020-07-13 12:11:11 -04:00
Alex Goodman ef8c215772 Merge pull request #74 from anchore/add-java-cataloger 
Adds java cataloger
 2020-07-09 17:05:29 -04:00
Alex GoodmanandAlfredo Deza 0f8dcf3f17 Update imgbom/cataloger/java/pom_properties.go 
Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-07-09 11:38:02 -04:00
Alex GoodmanandAlfredo Deza c9bfc0aecd Update imgbom/cataloger/java/pom_properties.go 
Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-07-09 11:37:45 -04:00
Alex GoodmanandAlfredo Deza 40f8e3a7de Update imgbom/cataloger/java/java_manifest.go 
Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-07-09 11:31:23 -04:00
Alex Goodman e040fc8930 Merge pull request #72 from anchore/add-rpm-cataloger 
Add RPM DB support
 2020-07-07 09:06:54 -04:00
Alex Goodman 7cd16d05b8 Merge pull request #70 from anchore/add-coverage 
Add test coverage (+ makefile improvements)
 2020-07-06 12:45:52 -04:00
Alex Goodman 466169e8d7 Merge pull request #65 from anchore/add-an-event-bus 
Add and use event bus for UI progress
 2020-06-25 11:04:45 -04:00
Alex Goodman 2e9e969c5f Merge pull request #66 from anchore/add-license 
Add apache v2 license
 2020-06-24 14:51:51 -04:00
Alex Goodman 1569a85820 add apache v2 license 2020-06-24 14:37:00 -04:00
Alex Goodman 2cb7dad967 Merge pull request #63 from anchore/add-symlink-suport 
Add symlink support
 2020-06-16 13:10:24 -04:00
Alex Goodman 778754dd59 Merge pull request #62 from anchore/add-simple-pipeline 
Add basic pipeline
 2020-06-15 13:53:49 -04:00
Alex Goodman 0d66cb8a1c Merge pull request #60 from anchore/rename-analyzers 
Rename analyzers to catalogers
 2020-06-15 13:18:07 -04:00
Alex Goodman 64a9125895 Merge pull request #53 from anchore/add-python-wheel-egg-analyzers 
Add python wheel and egg analyzer support
 2020-06-05 09:59:27 -04:00
Alex Goodman e88669c536 Merge pull request #52 from anchore/add-gem-analyzer 
Add gem analyzer
 2020-06-04 14:43:52 -04:00
Alex Goodman 033c91a233 Merge pull request #35 from anchore/use-filetree-reader 
Utilize filetree reader
 2020-06-04 14:36:40 -04:00
Alex Goodman f0b8aaacda Merge pull request #34 from anchore/focus-dkpg-metadata 
Add dpkg source field to metadata
 2020-06-01 17:42:18 -04:00
Alex Goodman 83e486d6ca Merge pull request #29 from anchore/add-os-types 
Start of distro identification support
 2020-06-01 10:47:31 -04:00
Alex Goodman 1f272c2bda Merge pull request #27 from anchore/add-package-id 
Add package id
 2020-06-01 08:55:22 -04:00
Alex Goodman dcba50eaa8 Merge pull request #25 from anchore/add-logging-and-app-config 
Add logging and app configuration
 2020-05-26 09:20:12 -04:00
Alex Goodman 9676f99b86 Merge pull request #24 from anchore/add-first-presenter 
Add JSON presenter
 2020-05-21 10:20:16 -04:00
Alex Goodman 28cc9b3dc1 Merge pull request #22 from anchore/dpkg-analyzer 
add dpkg analyzer
 2020-05-19 16:49:16 -04:00
Alex Goodman 45a3f6354f Merge pull request #20 from anchore/add-analysis-driver-logic 
Add analysis coordination
 2020-05-18 13:16:50 -04:00
Alex Goodman 44d081040f Merge pull request #18 from anchore/add-analyzer-base 
Add analyzer infrastructure
 2020-05-14 10:10:25 -04:00
Alex Goodman 3c0ef63dee Merge pull request #16 from anchore/add-scope 
Add image selection scoping
 2020-05-14 10:10:14 -04:00
Alex Goodman fcddceb965 Initial commit 2020-05-07 14:19:31 -04:00