oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-19 17:33:18 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,788 Commits 64 Branches 244 Tags
Commit Graph

777 Commits

Author SHA1 Message Date
Alex Goodman
ab45be98b8
append java nested package names to the virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:34 -04:00
Alex Goodman
1230650771
allow for java manifest data to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 11:28:27 -04:00
Alex Goodman
452426d1d6
Merge pull request #245 from anchore/update-java-cataloger-for-engine 
Java cataloger miscellaneous fixes
 2020-10-28 17:36:44 -04:00
Alex Goodman
2675891110
remove parent java package from json && add java manifest section parsing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 17:19:06 -04:00
Dan Luhring
bffc4713a7
Update zip archive handling to match globs as expected (#244) 
* Refactor zip file tests

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Add glob support for leading slashes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update zip testing to account for glob matching

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Ignore .DS_STORE

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Improve normalization of zip entry names

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Rename zip test helpers file

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-10-28 16:50:40 -04:00
Alex Goodman
62f6146c37
do not include optional fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:58:54 -04:00
Alex Goodman
8bcba7d830
update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman
76c8f24090
add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Alex Goodman
6eb36bc3c8
allow for optional fields in npm metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 15:00:55 -04:00
Toure Dunnon
94ffc2caa8 Merge branch 'main' into javascript_parser_fix_author 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-23 12:05:30 -04:00
Alex Goodman
7d55bca0a0
allow for python metadata fields to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:29:52 -04:00
Toure
48c7dee9da included additional support for older npm spec. 
Signed-off-by: Toure <tdunnon@gmail.com>
 2020-10-23 08:50:38 -04:00
Toure Dunnon
15379d1075 Fix for errors+failures parsing package.json 
closes: #230

Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-22 13:58:18 -04:00
Alex Goodman
2e5ff4a995
add top_level.txt processing to python package cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 12:39:03 -04:00
Alex Goodman
1414d1fbc3
add test coverage for python pacakge cataloger and update catalog interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman
7fc926d40d
add python author and emil fields + add metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman
0ce8701e73
split python package catalogers by image vs directory 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:48:26 -04:00
Alex Goodman
d4ca0ab167
expand the resolver to include content requests for a single reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:40:14 -04:00
Alex Goodman
6cd9c2b771
upgrade cataloger interface to use full resolver (remove SelectFiles function) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 10:49:33 -04:00
Alex Goodman
931c796158
add dynamic package.json parsing of author field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-20 15:23:04 -04:00
Alex Goodman
bb14f3b45b
reduce number of open files while processing nested java archives (#227) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-16 17:22:14 -04:00
Toure Dunnon
27c62e34f2 Add support for package.json #200 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-16 11:28:54 -04:00
Alex Goodman
b3387807c1
allow for gemspec metadata fields to be optional (#218) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 09:57:58 -04:00
Jason Williams
1f64b3cd49 Fixes #212 by increasing buffer size for scanner 
Signed-off-by: Jason Williams <jasonw@jhu.edu>
 2020-10-13 11:00:55 -04:00
Toure Dunnon
8d25d44ea9
Add homepage field as output to the gemspec metadata (#215) 
https://github.com/anchore/syft/issues/214

Signed-off-by: Toure <tdunnon@gmail.com>
 2020-10-12 18:59:56 -04:00
Alex Goodman
335a6b022f
add acceptance test to cover gem cataloger + fix gem cataloger parent dir (#207) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 13:13:31 -04:00
Alex Goodman
9edbc65bce
move unicode regex to static space 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:55:57 -04:00
Alex Goodman
398d8903e7 finalize gemspec parser + update json schema to match 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman
46c74865e5 add render unicode in gemspec parser 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman
1f0f6fa3e5 more gemspec tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:03 -04:00
Alex Goodman
abdd00cd24 rename gem parsers and catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman
10b44f5311 split catalogers into two sets, one for images another for directory scans 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman
1c320a8382 defer to GenericCataloger instances for pkg catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Toure
7a8a5419b8 adding ruby gemspec support. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-08 10:19:33 -04:00
Dan Luhring
b6dfdf16b6
Remove and update TODOs (#194) 
* Remove and update TODOs

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update TODO with link

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-09-29 11:53:19 -04:00
Alex Goodman
b5ce187ba7
replace modfile with stdlib (#187) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:25:04 -04:00
Alex Goodman
26855a2a9e
ignore apk xattr file checksum + remove log.Errorf error wraps (#192) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:22:17 -04:00
Alex Goodman
4b78d9a1c0
support home dir expansion (#188) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 15:02:21 -04:00
Alex Goodman
03378e976c
always return a cleanup function from scope (#183) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:20:06 -04:00
Alex Goodman
49800b6747
Normalize the json image/dir source (#180) 
* normalize the json image/dir source

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json image presenter golden file

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:07:38 -04:00
Alex Goodman
c46d004a3b
remove duplicate rows from the summary table (#179) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:32:37 -04:00
Alex Goodman
3d91a66536
Add OCI support + use URI schemes for user image input (#178) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update docs to reflect OCI image sources + URI scheme change

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope pin

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:24:24 -04:00
Samuel Dacanay
0567206b38 Change kebab case to camelCase in json keys throughout app 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-18 08:55:17 -07:00
Alex Goodman
f3076c3905
Add docs around the main execution path (#172) 
* add docs around the main execution path of syft

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/lib.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/lib.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap line

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-09-17 06:02:51 -04:00
Praveen Mylavarapu
e26627d8b6
remove accessing tag when not available (#174) 
Signed-off-by: praveenmylavarapu <saipraveenmylavarapu@gmail.com>
 2020-09-15 07:55:08 -04:00
Samuel Dacanay
329b080a37 Add support for Arch (which doesnt return a version) and Open Suse Leap 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

remove bad-version test fixture (no longer relevant since it is now an expected case) and add cases for arch and opensuse-leap

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

Reduce nesting, simplify empty version logic

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-13 13:50:56 -07:00
Sam Dacanay
11334b632e
Expand matching of requirements.txt file to include any prefixes or suffixes (#168) 
* Expand matching of requirements.txt file to include any prefixes or suffixes

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

* Add some test cases to integration test (ensure syft can pick up multiple requirements files)

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

* Run lint-fix

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-08 10:23:37 -07:00
Alex Goodman
df7c83c9b0
use xml encoder (#165) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-31 08:06:56 -04:00
Alex Goodman
8a4886ec0e
Add package URL support to the CycloneDX presenter (#164) 
* add package URL support to the CycloneDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap license tags with licenses

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-30 21:40:19 -04:00
Alex Goodman
eda0f8c774
add bom descriptor schema + test against xml schemas in pipeline (#163) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-27 19:12:45 -04:00