683 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Alex Goodman	309cbf5264	add missing file classification test fixtures + gitignore adjustment ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:43 -04:00
Alex Goodman	46fffe5c6f	update json schema + presenter snapshots with file classification section ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:11:40 -04:00
Alex Goodman	080057b217	add file classifications to power-user json presenter ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	870a676a5d	wire up file classifier to power-user cmd ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	46bfb68113	add file classifier + tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	5743e32e02	add tests around MatchNamedCaptureGroups + rename ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-12 17:08:50 -04:00
Alex Goodman	66ebe49a04	Merge pull request #375 from anchore/package-verification-fields-dpkg ... Update package verification fields for DPKG	2021-04-12 16:35:45 -04:00
Alex Goodman	0511972dfa	clarify default collection value + fix appending conffiles location ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 11:41:44 -04:00
Alex Goodman	c56690fc52	fix DpkgMetadata.Files test to ensure it is never nil ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 08:46:59 -04:00
Alex Goodman	ba3407a767	add dpkg conffile update to json schema + json test snapshots ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-09 08:37:28 -04:00
Alex Goodman	269832ce8d	add conffile listing to dpkg metadata + normalize digests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-08 14:21:23 -04:00
Alex Goodman	7a10cbae0c	Merge pull request #368 from anchore/fix-registry-auth-encode-issue ... Ensure credentials are not HTML encoded	2021-04-05 14:25:57 -04:00
Alex Goodman	7ec0e3785f	bump stereoscope ; pull in fix to ensure credentials are not HTML encoded ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-05 14:20:49 -04:00
Alex Goodman	9ec09add67	Add secrets search capability (#367) ... * add initial secrets cataloger Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update ETUI elements with new catalogers (file metadata, digests, and secrets) Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update secrets cataloger to read full contents into memory for searching Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype of parallelization secret regex search Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype with single aggregated regex Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype for secret search line-by-line Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * quick prototype hybrid secrets search Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add secrets cataloger with line strategy Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust verbiage towards SearchResults instead of Secrets + add tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update json schema with secrets cataloger results Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * address PR comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update readme with secrets config options Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure file catalogers call AllLocations once Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-04-01 21:34:15 +00:00
Alex Goodman	557ad8be49	Merge pull request #366 from zhill/issue-331 ... Use sorted artifacts for consistent SBoM output in table, cyclonedx, and json presenters	2021-04-01 11:04:34 -04:00
Zach Hill	c332ba0867	Use cataloger Sorted() output instead of Enumerate() for stable result sorting in presenters. Fixes #331 ... Also adds artifact location to sort key for Sorted() to ensure consistent sorts when artifacts of same name, version, and type are found in different locations in the image. Location should be sufficient since we assume only one package of a given name and version can exist in one location, even if that location is an package-db like rpmdb. Signed-off-by: Zach Hill <zach@anchore.com>	2021-04-01 01:40:41 -07:00
Alex Goodman	485caa1ea3	Merge pull request #357 from anchore/enhance-file-metadata ... Add link destination to file metadata	2021-03-30 09:36:10 -04:00
Alex Goodman	cd925e5664	account for repoDigests data in power-user json testing ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-30 08:46:42 -04:00
Alex Goodman	db35186c7d	allow file metadata digests to be optional + add link destination ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-29 12:07:42 -04:00
Alex Goodman	8551168702	capitalize file type strings ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-29 12:07:41 -04:00
Alex Goodman	772613647c	Merge pull request #364 from anchore/allow-for-failures-of-benchmark-sticky-note ... Ignore failures on benchmark sticky comment	2021-03-29 12:03:10 -04:00
Alex Goodman	8658abc8c4	ignore failures on benchmark sticky comment ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-29 11:59:49 -04:00
Robert Prince	ab83b7f840	Merge pull request #350 from octarinesec/repo-digests ... Add repo digests if available from Stereoscope to the image metadata	2021-03-29 08:47:50 -07:00
Alex Goodman	0f26681ac5	Merge pull request #356 from anchore/dedup-pkg-index ... Ensure pkg.Catalog path index deduplicates real vs virtual paths	2021-03-28 14:06:25 -04:00
Alex Goodman	9abdb174d5	ensure pkg.Catalog path index deduplicates real vs virtual paths ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-26 13:27:24 -04:00
Alex Goodman	44cf7ccb44	Merge pull request #355 from anchore/move-docker-login-after-keychain-step ... Move docker login to after keychain creation	2021-03-26 11:05:47 -04:00
Alex Goodman	2a9b1b2680	move docker login after keychain creation ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-26 10:41:44 -04:00
Alex Goodman	cedf8cd6d7	Merge pull request #352 from anchore/enable-release-environment ... Enable manual release approval	2021-03-25 12:13:41 -04:00
Alex Goodman	cfec812804	enable release environment (manual approval for releases) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-25 12:01:20 -04:00
Alex Goodman	7b25237cea	Merge pull request #354 from anchore/fix-benchmark-sticky-comment ... Fix sticky benchmark comment on PRs	2021-03-25 12:00:32 -04:00
Alex Goodman	ac4b653721	fix sticky benchmark comment on PRs ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-25 11:53:05 -04:00
Alex Goodman	8464d9766a	Merge pull request #353 from anchore/fix-docker-login ... Manually login to docker via cli during release	2021-03-25 11:49:10 -04:00
Haim Helman	13a066ea18	Add repo digests if available from Stereoscope to the image metadata ... Signed-off-by: Haim Helman <hhelman@vmware.com>	2021-03-25 05:57:23 -07:00
Alex Goodman	51bf9f9e05	manually login to docker via cli during release ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 17:57:41 -04:00
Alex Goodman	e256e86888	Merge pull request #339 from anchore/add-file-metadata-indexer-invert-control ... Add file metadata cataloger	2021-03-23 17:02:10 -04:00
Alex Goodman	1b7c755536	add file-type mix as golden image ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 16:50:57 -04:00
Alex Goodman	8854d83934	cache mac acceptance image ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 15:03:25 -04:00
Alex Goodman	3ef30f99be	pull in stereoscope cache fix + add test cache makefile target helpers ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 14:31:59 -04:00
Alex Goodman	12f419111e	remove docker layer cache from validation pipeline ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 13:04:13 -04:00
Alex Goodman	68c4bf8bbe	update documentation to reflect root vs packages subcommand ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 13:00:25 -04:00
Alex Goodman	929b78efbf	remove prealloc nolint rule in catalogers ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 12:56:00 -04:00
Alex Goodman	d420368ba9	add tests around new file metadata cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 11:00:59 -04:00
Alex Goodman	40199096e9	stabilize json file metadata presenter order ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 11:00:36 -04:00
Alex Goodman	0e9c1c1d86	arrange power-user tasks ahead of parsing the source image ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 10:29:38 -04:00
Alex Goodman	77e4c89a5a	bump coverage threshold + use ubuntu for snapshot builds ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 10:28:57 -04:00
Alex Goodman	e3b1522394	upgrade goreleaser + constrain pipeline tool cache ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-23 06:58:30 -04:00
Alex Goodman	46636ccb3c	simplify command alias logic + remove deprecation warning for root command ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-22 15:25:04 -04:00
Alex Goodman	36e4af1953	adjust jsom schema version + adopt java pom properies test fixtures ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-22 11:27:01 -04:00
Alex Goodman	abca2c5f0b	remove token usage from benchmark sticky comment action ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-22 10:58:09 -04:00
Alex Goodman	f180d1c537	improve config parsing + fix command deprecation warning ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-03-22 10:58:09 -04:00