oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-04 08:26:38 +01:00
Code Issues Packages Projects Releases Wiki Activity
542 Commits 66 Branches 274 Tags
d420368ba9db3dda5d1f41b0348048ef95ff9fd3
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alex Goodman d420368ba9 add tests around new file metadata cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 11:00:59 -04:00
Alex Goodman 40199096e9 stabilize json file metadata presenter order 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 11:00:36 -04:00
Alex Goodman 0e9c1c1d86 arrange power-user tasks ahead of parsing the source image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:29:38 -04:00
Alex Goodman 77e4c89a5a bump coverage threshold + use ubuntu for snapshot builds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:28:57 -04:00
Alex Goodman e3b1522394 upgrade goreleaser + constrain pipeline tool cache 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 06:58:30 -04:00
Alex Goodman 46636ccb3c simplify command alias logic + remove deprecation warning for root command 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 15:25:04 -04:00
Alex Goodman 36e4af1953 adjust jsom schema version + adopt java pom properies test fixtures 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 11:27:01 -04:00
Alex Goodman abca2c5f0b remove token usage from benchmark sticky comment action 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman f180d1c537 improve config parsing + fix command deprecation warning 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:09 -04:00
Alex Goodman b1b57f6ba6 remove benchmark test event filter in validations pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 4bde850f04 add file-metadata config options to docs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:08 -04:00
Alex Goodman 1d87f07da1 update pipeline with new levels of testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:58:07 -04:00
Alex Goodman cf516add95 add cli testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 68d698e9f2 remove inline-compare testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman efcd8a8b9a update integration and acceptance tests for new resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman ae32942a18 update import to require patching image metadata source field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 18dd2950ac update event handlers relative to new command structure 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:18 -04:00
Alex Goodman 6a960ec1f3 update json schema with optional poweruser data shape 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:56:16 -04:00
Alex Goodman 97f0f83544 add poweruser command and alias root to packages subcommand 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:53 -04:00
Alex Goodman a6cba5d9db remove multi* content fetching from resolvers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:53:51 -04:00
Alex Goodman f22d7d23c1 add poweruser concerns to the application config 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:52:37 -04:00
Alex Goodman ff4ed40d50 migrate syft/presenter to internal/presenter 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:52:33 -04:00
Alex Goodman 4666ca8469 migrate syft/cataloger to syft/pkg/cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 10:46:51 -04:00
Alex Goodman 48a1d4711a update presenter tests with json schema 1.0.3 examples + rename rust metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-22 09:44:55 -04:00
Alex Goodman e9e9fe6d9c prefer warnings over errors when parsing java manifests and pom properties 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-20 08:08:46 -04:00
Alex Goodman 2f8a568d4f check for multiple delimiters when parsing pom properties 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-20 08:00:08 -04:00
Alex Goodman 83778677c1 run snapshot build on ubuntu 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-19 08:42:27 -04:00
Alex Goodman 9f57e17887 add labels to the docker image + pin the docker pipeline install version 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-18 16:28:03 -04:00
Alex Goodman e9105c180a add dockerfile + docker build step 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 16:45:20 -05:00
Alex Goodman c7b26c55ac add docker to mac instance 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-11 14:01:00 -05:00
Alex Goodman 1aa8a10f6b ignore ownership for shared copyright resources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-02-26 12:30:24 -05:00
Alex Goodman bb1facbf81 ensure java parent pkg ref isnt nil when looking for parent matches 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-27 10:12:41 -05:00
Alex Goodman 6a49717314 add VirtualPath to source.Location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 21:16:42 -05:00
Alex Goodman 06641cfda2 prefer real paths for glob results 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 18:48:28 -05:00
Alex Goodman a5537943fa keep original dpkg md5sum location 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 14:30:05 -05:00
Alex Goodman fc8b431ea6 duplicate reference readers for duplicate location resolutions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-05 13:54:39 -05:00
Alex Goodman 33c27c4f3d add HasPath() to Resolver interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 19:39:49 -05:00
Alex Goodman 133d180eec update gemspec glob to include named spec dirs 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 19:33:52 -05:00
Alex Goodman 37b96a241b ensure acceptance tests use existing snapshot dir 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 16:50:35 -05:00
Alex Goodman d475e6280a bump stereoscope to pull in content API refactors 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-01-04 14:07:14 -05:00
Alex Goodman 60f525af18 add manual cache buster to the pipeline 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-22 16:22:42 -05:00
Alex Goodman 75d89293ce fix acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 14:32:29 -05:00
Alex Goodman d94d7a7d80 add tests for content requester object 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:15 -05:00
Alex Goodman 45fed7c69b break out packageEntry into a separate file 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman e4a3e433b6 add content requested and refactor python cataloger to use it 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman 82c8a8e17b add mem profile option and refactor python cataloger for batch requests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:14 -05:00
Alex Goodman be5917a058 add profiler dev option 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-15 10:59:13 -05:00
Alex Goodman 3ce7eabc98 bump stereoscope to remove tree-catalog syft check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-03 16:20:17 -05:00
Alex Goodman 2989d3d975 include CPEs with elementds from POM GroupId fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-01 08:00:49 -05:00
Alex Goodman 8a17bfb69f generate json schema from struct definitions 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-20 15:47:10 -05:00
Alex Goodman 3aaa0e5566 move package purl and cpes (identities) to pkg.Package 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-19 11:25:51 -05:00
Alex Goodman 030427bb33 rename json artifact to package + update resolver integrity checks 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 569a598df7 minimize pointer usage & order return types consistently 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman c892c3609e improve doc comments 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman 62b03f3a91 dont export structs used for unmarshaling 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 4b45c42f5a make cyclonedx presenter generally reusable (for grype) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman f46de19c6b migrate scope option to image metadata (from source) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 91baabe5a1 add image metadata as catalogFromJSON return 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman 6f7a4fd3e4 move source metadata upstream and fix tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman aa0d444fd4 fix tests to use location instead of file.Reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman b694dacb21 add source.Location + reorient Resolvers to use it 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman 9668341a14 rename scope to source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman 495fb0a45f add sbom document import lib helper function 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:36:51 -05:00
Alex Goodman 7964c27bd8 add source to packages found by rpmdb cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 09:27:08 -05:00
Alex Goodman 7e270bf76c restore the checksum file during release 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 15:11:51 -05:00
Alex Goodman fde37b4b56 provide goreleaser asset version via env var 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 14:36:24 -05:00
Alex Goodman 2a329002b8 enhance dpkg support by parsing md5sum and copyright file sources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 11:06:34 -05:00
Alex Goodman a6365886ad add warning log level 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-10 15:09:41 -05:00
Alex Goodman 6aba2f48d4 split out rpmdb file processing to helper + lint fixes 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 10:44:27 -05:00
Alex Goodman 0205e72be9 ensure resolvers ignore directories for "FilesBy*" methods 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:38 -05:00
Alex Goodman 8095cd9980 add rpmdb file info to cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:23 -05:00
Alex Goodman 773581704c bump threshold for inline compare for jenkins image 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 15:14:32 -04:00
Alex Goodman e2593cd6b7 remove extra fields from the compare script metadata namedtuple 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:59:53 -04:00
Alex Goodman 232cd13035 update tests for enhanced java pkg pairings 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:44:45 -04:00
Alex Goodman 2532928afa bump java compare testing thresholds 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 10:06:47 -04:00
Alex Goodman 03dbfb8dfb improve java name and version extraction as well as parent pkg pairing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 08:12:25 -04:00
Alex Goodman a5cba13ddf enable more flexible java manifest structure (closer to the spec) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 16:26:04 -04:00
Alex Goodman a4f22e65fc expand compare testing images 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:51 -04:00
Alex Goodman ab45be98b8 append java nested package names to the virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 13:52:34 -04:00
Alex Goodman fc991bc62e partial java comparison with extra metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 12:40:49 -04:00
Alex Goodman 1230650771 allow for java manifest data to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 11:28:27 -04:00
Alex Goodman 2675891110 remove parent java package from json && add java manifest section parsing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 17:19:06 -04:00
Alex Goodman 62f6146c37 do not include optional fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:58:54 -04:00
Alex Goodman 8bcba7d830 update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman 76c8f24090 add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Alex Goodman cc466e47da bump python version for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-27 14:53:52 -04:00
Alex Goodman 6eb36bc3c8 allow for optional fields in npm metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 15:00:55 -04:00
Alex Goodman 1cdf2b9151 remove cyclonedx from future plans (already implemented) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 11:05:28 -04:00
Alex Goodman 103f0617f5 bootstrap cached deps and ci deps separately for acceptance tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:42:57 -04:00
Alex Goodman 7d55bca0a0 allow for python metadata fields to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:29:52 -04:00
Alex Goodman 2e5ff4a995 add top_level.txt processing to python package cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 12:39:03 -04:00
Alex Goodman 1414d1fbc3 add test coverage for python pacakge cataloger and update catalog interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman 7fc926d40d add python author and emil fields + add metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman 0ce8701e73 split python package catalogers by image vs directory 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:48:26 -04:00
Alex Goodman d4ca0ab167 expand the resolver to include content requests for a single reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:40:14 -04:00
Alex Goodman 6cd9c2b771 upgrade cataloger interface to use full resolver (remove SelectFiles function) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 10:49:33 -04:00
Alex Goodman 931c796158 add dynamic package.json parsing of author field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-20 15:23:04 -04:00
Alex Goodman 1bf1e643eb restore original release token 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 14:41:28 -04:00
Alex Goodman 4a8ee15e87 fix syft version verbiage 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 11:50:23 -04:00
Alex Goodman 5d0909f31e add regression test to cover issue #212 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-14 07:22:19 -04:00