777 Commits

Author	SHA1	Message	Date
Alex Goodman	82c8a8e17b	add mem profile option and refactor python cataloger for batch requests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-15 10:59:14 -05:00
Dan Luhring	737a81c38c	Sort generated CPEs by specificity (#289) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-11 12:08:39 -05:00
Alex Goodman	52bac6e2fd	Add enterprise upload capability (#285) ... * add support to upload results to enterprise Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add package sbom upload Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add dockerfile support Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add manifest, index, and dockerfile import functions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * schema version to json output + enhance json schema generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * modify package SBOM shape to be entire syft document + add etui updates Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add import image config and manifest support Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add config options for import to enterprise Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * incorporate final stereoscope and client-go deps Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-09 22:20:53 -05:00
Toure Dunnon	1a124bd77b	added: regenerated new test fixtures to reflect change in specification. ... Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>	2020-12-04 11:48:20 -05:00
Toure Dunnon	a5fd83b21d	added: correct the bom descriptor to meet the cyclonedx 1.2 ... Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>	2020-12-04 11:48:20 -05:00
Alex Goodman	6f9ded60ed	Merge pull request #279 from anchore/enhance-java-cpe-by-group-id ... Include CPEs with elements from POM GroupId fields	2020-12-02 07:50:31 -05:00
Dan Luhring	65cbacd135	Clarify python wheel parsing process (#281) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-12-01 16:30:30 -05:00
Alex Goodman	2989d3d975	include CPEs with elementds from POM GroupId fields ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-12-01 08:00:49 -05:00
Alex Goodman	8a17bfb69f	generate json schema from struct definitions ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-20 15:47:10 -05:00
Alex Goodman	3aaa0e5566	move package purl and cpes (identities) to pkg.Package ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-19 11:25:51 -05:00
Alex Goodman	030427bb33	rename json artifact to package + update resolver integrity checks ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	569a598df7	minimize pointer usage & order return types consistently ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Dan Luhring	0ad8c53ec2	Fix cyclonedx test fixture usage of dynamic digest value ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	c892c3609e	improve doc comments ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:13 -05:00
Alex Goodman	62b03f3a91	dont export structs used for unmarshaling ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	4b45c42f5a	make cyclonedx presenter generally reusable (for grype) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	f46de19c6b	migrate scope option to image metadata (from source) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	91baabe5a1	add image metadata as catalogFromJSON return ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	6f7a4fd3e4	move source metadata upstream and fix tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	aa0d444fd4	fix tests to use location instead of file.Reference ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:12 -05:00
Alex Goodman	b694dacb21	add source.Location + reorient Resolvers to use it ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:11 -05:00
Alex Goodman	9668341a14	rename scope to source ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:37:11 -05:00
Alex Goodman	495fb0a45f	add sbom document import lib helper function ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-17 12:36:51 -05:00
Dan Luhring	3e8bca6911	Rework Java archive name and version detection and clean up tests ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 08:35:10 -05:00
Dan Luhring	5afdd574a8	Update existing archive test cases to correct names and versions ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 08:35:10 -05:00
Dan Luhring	0ebe791acd	Add archive filename test case for failing example from #255 ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-17 08:35:10 -05:00
Dan Luhring	6bde075cd3	Remove unused argument value ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:20:06 -05:00
Dan Luhring	f7be73dbcc	Fix package.json parsing for no licenses ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:12:13 -05:00
Dan Luhring	fc99538d78	Fix package.json parsing for multiple licenses objects ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:12:13 -05:00
Dan Luhring	4d4e242251	Fix package.json parsing for license object ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:12:12 -05:00
Dan Luhring	416afa015e	Add test for package.json with no licenses ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:11:46 -05:00
Dan Luhring	bd4c784a64	Add test for package.json multiple license objects ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 11:01:59 -05:00
Dan Luhring	624a090631	Add test for package.json license object ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2020-11-14 09:50:17 -05:00
Alex Goodman	7964c27bd8	add source to packages found by rpmdb cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-12 09:27:08 -05:00
Alex Goodman	2c82c7c0f0	Merge pull request #257 from anchore/enhance-deb-support ... Enhance dpkg support	2020-11-11 13:12:29 -05:00
Alex Goodman	db98fba3b4	Merge pull request #260 from anchore/add-warning-levels ... Add warning log level	2020-11-11 11:13:51 -05:00
Alex Goodman	2a329002b8	enhance dpkg support by parsing md5sum and copyright file sources ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-11 11:06:34 -05:00
Alex Goodman	a6365886ad	add warning log level ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-10 15:09:41 -05:00
Alfredo Deza	6ae3b47959	tests: update all tests to pass the IDLike value ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-10 12:40:50 -05:00
Alfredo Deza	10b55311df	presenter: provide ID_LIKE information in json ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-10 12:40:17 -05:00
Alfredo Deza	64d5554144	include ID_LIKE in distro detection ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-10 12:37:35 -05:00
Alfredo Deza	c2cf4eb7b0	update tests for the new distro information ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-09 12:16:00 -05:00
Alfredo Deza	1e79986188	json: update the document to include distro information ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-11-09 12:16:00 -05:00
Alex Goodman	6aba2f48d4	split out rpmdb file processing to helper + lint fixes ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 10:44:27 -05:00
Alex Goodman	0205e72be9	ensure resolvers ignore directories for "FilesBy*" methods ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 07:21:38 -05:00
Alex Goodman	8095cd9980	add rpmdb file info to cataloger ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-06 07:21:23 -05:00
Alex Goodman	a52750bdd3	enhance alpine file discovery (#248) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-11-04 09:56:52 -05:00
Alex Goodman	232cd13035	update tests for enhanced java pkg pairings ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-30 10:44:45 -04:00
Alex Goodman	03dbfb8dfb	improve java name and version extraction as well as parent pkg pairing ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-30 08:12:25 -04:00
Alex Goodman	a5cba13ddf	enable more flexible java manifest structure (closer to the spec) ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2020-10-29 16:26:04 -04:00