Alex Goodman
d22914baf5
add docs to configs ( #4281 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-10-14 13:58:31 -04:00
Alex Goodman
e0e1c4ba0a
Internalize majority of cmd package ( #2533 )
...
* internalize majority of cmd package and migrate integration tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add internal api encoder
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* create internal representation of all formats
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* export capability to get default encoders
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* restore test fixtures
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-01-24 13:29:51 -05:00
Alex Goodman
7315f83f9d
Upgrade tool management ( #2188 )
...
* migrate to binny and taskfile
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* update binny to not require github token
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* added support for automatically building snapshots
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* detect source changes for snapshot builds
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fail workflow explicitly when snapshot cache restoral fails
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* match snapshot restoral paths
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-10-25 09:08:43 -04:00
Alex Goodman
8f6bdde666
Label PRs when the json schema changes ( #2240 )
...
* label PRs when the json schema changes
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* moderate pr comments
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* be more strict about processing file names
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-10-20 13:00:15 -04:00
Alex Goodman
58f8c852df
Require ordering of relationships when comparing parser output ( #2160 )
...
* require ordering of relationships when comparing parser output
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* [wip] fix cataloger test
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* change method of relationship sort to simple string dump
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-09-20 17:39:18 +00:00
Alex Goodman
b454160549
tidy gomod and gitignore ( #2082 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-08-31 14:50:32 +00:00
b03e9c6868
Add registry certificate verification support ( #1734 )
...
* add registry certificate verification support
* replace stereoscope version
* modify go.mod
* pull in stereoscope update
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* rename registry cert options, add docs, and add test
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* update to account for changes in anchore/stereoscope#195
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix cli tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: lishituo <24578666@qq.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-08-29 11:45:20 -04:00
Keith Zantow
9480f10ccd
feat: support top-level SPDX package and graph ( #1934 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-07-26 13:54:32 -04:00
Alex Goodman
88b3d1e9bb
remove build binary and add explicit git ignore
...
Former-commit-id: 6455f2d8a5f1910b4a8b681ddef79919886d638d
2023-07-18 14:06:34 -04:00
Alex Goodman
f8b832e6c3
Switch UI to bubbletea ( #1888 )
...
* add bubbletea UI
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* swap pipeline to go 1.20.x and add attest guard for cosign binary
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* update note in developing.md about the required golang version
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix merge conflict for windows path handling
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* temp test for attest handler
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add addtional test iterations for background reader
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-07-06 09:00:46 -04:00
Alex Goodman
cfbb9f703b
add file source digest support ( #1914 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-07-05 13:47:13 -04:00
Alex Goodman
4da3be864f
Refactor source API ( #1846 )
...
* refactor source API and syft json source block
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update source detection and format test utils
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* generate list of all source metadata types
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* extract base and root normalization into helper functions
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* preserve syftjson model package name import ref
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* alias should not be a pointer
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-06-30 14:19:16 +00:00
Alex Goodman
8847ba5d0b
Add release trigger ( #1501 )
...
* add release trigger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* deduplicate version and changelog calls + add gh checks
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add more chronicle verbosity, but not when triggering releases
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* bump chronicle version to get --version-file feature
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update bootstrap tool workflow to include glow
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add version prefix check on tags in release quality gate
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-02-08 11:38:27 -05:00
Alex Goodman
d2f28e0eb1
Restore single goreleaser file ( #853 )
2022-02-28 14:46:41 +00:00
Alex Goodman
24cd39089a
Share import mac code signing certificate steps for release ( #851 )
2022-02-25 20:07:03 -05:00
Christopher Angelo Phillips
256e85bc12
510 - SBOM attestation stdout ( #785 )
...
add syft attest command to produce an attestation as application/vnd.in-toto+json to standard out using on disk PKI
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2022-02-22 21:45:12 -05:00
Alex Goodman
f38b0b7256
Refactor install.sh ( #765 )
...
* [wip] get assets based on gh api
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* put install.sh download_asset fn under test
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* put install.sh install_asset fn under test
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* use zip for darwin installs
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* fix install.sh negative test cases
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* allow errors to propagate in install.sh
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* remove exit on error from install.sh tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add more docs around install.sh helpers
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add integration tests for install.sh
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add install.sh testing to pipeline
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add install test cache to CI
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* make colors globally available
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* test download against github release
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* always test release-based install against latest release
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* use better install.sh test names
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2022-02-01 16:58:47 -05:00
Alex Goodman
1d87f07da1
update pipeline with new levels of testing
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2021-03-22 10:58:07 -04:00
Alex Goodman
82c8a8e17b
add mem profile option and refactor python cataloger for batch requests
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2020-12-15 10:59:14 -05:00
Alex Goodman
52bac6e2fd
Add enterprise upload capability ( #285 )
...
* add support to upload results to enterprise
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add package sbom upload
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add dockerfile support
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add manifest, index, and dockerfile import functions
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* schema version to json output + enhance json schema generation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* modify package SBOM shape to be entire syft document + add etui updates
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add import image config and manifest support
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add config options for import to enterprise
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* incorporate final stereoscope and client-go deps
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2020-12-09 22:20:53 -05:00
Dan Luhring
bffc4713a7
Update zip archive handling to match globs as expected ( #244 )
...
* Refactor zip file tests
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Add glob support for leading slashes
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Update zip testing to account for glob matching
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Ignore .DS_STORE
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Improve normalization of zip entry names
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
* Rename zip test helpers file
Signed-off-by: Dan Luhring <dan.luhring@anchore.com >
2020-10-28 16:50:40 -04:00
Alex Goodman
d85d0ac418
add changelog generation ( #162 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2020-08-27 08:10:56 -04:00
Alex Goodman
2d452bf59e
Add inline-comparison as acceptance test ( #130 )
...
* add inline-compare as acceptance test
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add additional RPM metadata
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add comments and doc strings to the compare-* make targets
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2020-08-10 10:33:44 -04:00
Alex Goodman and Alfredo Deza
ba4f63099d
Add release process ( #89 )
...
* add check for app update; fix ETUI error handling
* validate user args
* add goreleaser support
* replace cgo dependencies (go-rpm) with go equivalents
* add acceptance tests against build snapshot
* add brew tap + acceptance test pipeline
* add mac acceptance tests
* fix compare makefile
* fix mac acceptance tests
* add release pipeline with wait checks
* add token to release step
* rm dir presenters int test
* enforce dpkg to be non interactive
Co-authored-by: Alfredo Deza <adeza@anchore.com >
* pin brew formulae
* pin skopeo to formulae url
* only run acceptance tests
Co-authored-by: Alfredo Deza <adeza@anchore.com >
2020-07-23 10:52:44 -04:00
Alex Goodman
7ebb9f4e0b
Add check for app update ( #88 )
...
* add check for app update; fix ETUI error handling
* validate user args
2020-07-21 12:02:03 -04:00
Alex Goodman
e55db9247e
add java cataloger
2020-07-08 16:16:01 -04:00
Alex Goodman
cd94179985
add symlink content fetching support
2020-06-16 11:37:37 -04:00
Alex Goodman
1e5c7bb5c7
initial project structure
2020-05-12 10:45:18 -04:00
Alex Goodman
fcddceb965
Initial commit
2020-05-07 14:19:31 -04:00