Alex Goodman
d61af0abab
Port to go-make ( #4923 )
...
* port to go-make
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* refresh fixtures on running unit tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* address refresh cache issues with old now-gitignored files
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2026-05-18 11:59:55 -04:00
Alex Goodman
ae1a247f3d
Unpin fixture dependencies that will always float ( #4495 )
...
* unpin dependencies for package dedup case
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* prevent make from blocking tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add check
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-12-22 19:17:58 +00:00
Alex Goodman
8a7302c5cf
migrate to get.anchore.io ( #4095 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2025-07-30 10:54:22 -04:00
Alex Goodman
0a3f513f92
Slim down docker cache size ( #3190 )
...
* slim down docker cache size
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* remove old centos images
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* troubleshoot test failure
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix wget version ref
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* refactor caching mechanisms
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add cache cleanup steps
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* simplify deleting cache
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fix first clone issue
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add tool dep
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2024-09-09 11:15:13 -04:00
Alex Goodman
7315f83f9d
Upgrade tool management ( #2188 )
...
* migrate to binny and taskfile
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* update binny to not require github token
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* added support for automatically building snapshots
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* detect source changes for snapshot builds
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* fail workflow explicitly when snapshot cache restoral fails
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* match snapshot restoral paths
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-10-25 09:08:43 -04:00
anchore-actions-token-generator[bot] and spiffcs
f9433e7f9b
chore(deps): update bootstrap tools to latest versions ( #2245 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-10-23 10:48:07 -04:00
Alex Goodman
8f6bdde666
Label PRs when the json schema changes ( #2240 )
...
* label PRs when the json schema changes
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* moderate pr comments
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* be more strict about processing file names
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-10-20 13:00:15 -04:00
anchore-actions-token-generator[bot] and spiffcs
44e5480238
chore(deps): update bootstrap tools to latest versions ( #2178 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-09-27 15:05:15 -04:00
anchore-actions-token-generator[bot] and spiffcs
8f57d22f63
chore(deps): update bootstrap tools to latest versions ( #2171 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-09-26 11:14:25 -04:00
Alex Goodman
40899adb87
use annotated tags, update chronicle, fix cache keys ( #2154 )
...
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-09-20 10:11:44 -04:00
William Murphy
9de4129638
chore: enforce race detector ( #2122 )
...
Previously, there were some data races in syft. Right now, none are
detected, so check for data races on the overall command, and on unit
tests. (Checking for races on integration tests triples the time needed
for those tests, from ~1 minute to ~3 minutes on my workstation, so that
was not done at this time.)
Signed-off-by: Will Murphy <will.murphy@anchore.com >
2023-09-12 13:09:18 -04:00
anchore-actions-token-generator[bot] and spiffcs
46e4ac1474
chore(deps): update bootstrap tools to latest versions ( #2086 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-09-07 09:30:44 -04:00
Keith Zantow
dd09e0362e
chore: update quill to the latest version ( #2065 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-08-25 20:45:04 +00:00
anchore-actions-token-generator[bot] and spiffcs
ee656fe088
chore(deps): update bootstrap tools to latest versions ( #2048 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-22 08:48:42 -04:00
anchore-actions-token-generator[bot] and spiffcs
c7fe58683d
chore(deps): update bootstrap tools to latest versions ( #2022 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-14 11:36:15 -04:00
anchore-actions-token-generator[bot] and spiffcs
a90cff1cd2
chore(deps): update bootstrap tools to latest versions ( #2012 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-10 13:20:09 -04:00
anchore-actions-token-generator[bot] and spiffcs
c2b4231cc3
chore(deps): update bootstrap tools to latest versions ( #1991 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-08-03 10:53:29 -04:00
Dan Luhring and Alex Goodman
99d172f0d1
Introduce indexed embedded CPE dictionary ( #1897 )
...
* Introduce indexed embedded CPE dictionary
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
* Don't generate cpe-index on make snapshot
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
* Add unit tests for individual addEntry funcs
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
* migrate CPE index build to go generate and add periodic workflow
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* add test to ensure generated cpe index is wired up to function that uses it
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Dan Luhring <dluhring@chainguard.dev >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-07-21 13:54:19 +00:00
Christopher Angelo Phillips
204b790012
docs: update docs with new docker specific instructions ( #1941 )
...
* docs: update docs with new docker specific instructions
---------
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Former-commit-id: c67c76e84df84e3e24aa307637d884ca8b7e3eea
2023-07-17 18:19:21 +00:00
anchore-actions-token-generator[bot] and spiffcs
d5d95da3b6
chore(deps): update bootstrap tools to latest versions ( #1922 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-07-10 11:03:09 -04:00
anchore-actions-token-generator[bot] and spiffcs
6280146c81
chore(deps): update bootstrap tools to latest versions ( #1908 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-07-05 11:06:22 -04:00
Alex Goodman
4da3be864f
Refactor source API ( #1846 )
...
* refactor source API and syft json source block
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update source detection and format test utils
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* generate list of all source metadata types
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* extract base and root normalization into helper functions
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* preserve syftjson model package name import ref
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
* alias should not be a pointer
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com >
2023-06-30 14:19:16 +00:00
anchore-actions-token-generator[bot] and spiffcs
608dbded06
chore(deps): update bootstrap tools to latest versions ( #1905 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-06-29 14:10:30 -04:00
anchore-actions-token-generator[bot] and spiffcs
e5e97b5c4e
chore(deps): update bootstrap tools to latest versions ( #1902 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-06-28 12:04:39 -04:00
anchore-actions-token-generator[bot] and spiffcs
38b47e484c
chore(deps): update bootstrap tools to latest versions ( #1894 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-06-26 13:58:17 -04:00
anchore-actions-token-generator[bot]
269006bf04
chore(deps): update bootstrap tools to latest versions ( #1880 )
2023-06-20 10:22:18 -04:00
anchore-actions-token-generator[bot] and Christopher Phillips
7d1b292ad0
chore(deps): update bootstrap tools to latest versions ( #1857 )
...
* chore(deps): update bootstrap tools to latest versions
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-06-05 18:56:04 +00:00
Alex Goodman
74013d7da7
Add test to ensure package metadata is represented in the JSON schema ( #1841 )
...
* [wip] try to reflect metadata types... probably wont work
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* refactor to add unit test to ensure there is coverage in the schema
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* [wip] generate metadata container
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add generation of metadata container struct for JSON schema generation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* fix linting
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update linter script to account for code generation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-05-25 13:26:56 -04:00
Bob Callaway
0580328ad9
update cosign to v2 release (different go module) ( #1805 )
...
Signed-off-by: Bob Callaway <bcallaway@google.com >
2023-05-10 11:12:37 -04:00
anchore-actions-token-generator[bot]
8a3cbf2fdd
chore(deps): update bootstrap tools to latest versions ( #1807 )
2023-05-10 08:25:36 -04:00
anchore-actions-token-generator[bot]
3f19aa589c
chore(deps): update bootstrap tools to latest versions ( #1792 )
2023-05-07 13:23:41 -04:00
anchore-actions-token-generator[bot]
1860bab24b
chore(deps): update bootstrap tools to latest versions ( #1786 )
2023-05-05 14:57:02 -04:00
Christopher Angelo Phillips
55a90a2ee0
fix: update cache.fingerprint file to java-builds dir ( #1748 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-04-19 12:17:07 -04:00
anchore-actions-token-generator[bot] and spiffcs
52b54bbad9
chore(deps): update bootstrap tools to latest versions ( #1744 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-04-18 10:25:02 -04:00
95176d7e0c
chore(deps): update bootstrap tools to latest versions ( #1740 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-04-17 12:06:35 -04:00
Alex Goodman
5a7bab972c
Fix kernel cataloger test fixtures ( #1742 )
...
* pin kernel and modules version for kernel fixtures
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* cache kernel fixtures in CI
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update CLI test image with pinned kernel deps
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update the kernel version found in integration tests
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-04-17 11:44:46 -04:00
Alex Goodman
05715489c4
add format make target ( #1733 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-04-12 14:36:38 -04:00
anchore-actions-token-generator[bot] and spiffcs
dd30c99bc2
chore(deps): update bootstrap tools to latest versions ( #1728 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-04-11 10:13:14 -04:00
anchore-actions-token-generator[bot] and spiffcs
63bbd1e3ed
chore(deps): update bootstrap tools to latest versions ( #1697 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-03-27 09:17:34 -04:00
anchore-actions-token-generator[bot]
829a71cd92
chore(deps): update bootstrap tools to latest versions ( #1686 )
2023-03-22 09:01:24 -04:00
anchore-actions-token-generator[bot]
434aa7fd46
chore: Update syft bootstrap tools to latest versions. ( #1682 )
...
Signed-off-by: Keith Zantow <kzantow@gmail.com >
2023-03-20 13:20:48 -04:00
Keith Zantow
cc0a376aba
fix: more python matching support ( #1667 )
2023-03-13 13:26:43 -04:00
anchore-actions-token-generator[bot] and spiffcs
b379dd9f27
Update syft bootstrap tools to latest versions. ( #1666 )
...
Signed-off-by: GitHub <noreply@github.com >
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com >
2023-03-13 10:40:13 -04:00
anchore-actions-token-generator[bot]
41cbbe09b2
Update syft bootstrap tools to latest versions. ( #1658 )
2023-03-07 12:54:32 -05:00
Keith Zantow
7714bc0521
fix: improved Python binary detection ( #1648 )
2023-03-07 10:52:29 -05:00
Christopher Angelo Phillips
98e737fc27
chore: update deprecated release flag ( #1629 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com >
2023-02-27 15:57:56 -05:00
anchore-actions-token-generator[bot]
d339ffdcb5
chore: update syft bootstrap tools to latest versions. ( #1593 )
2023-02-22 10:16:14 -05:00
Alex Goodman
88c81d33ed
switch from trigger-release target to release target ( #1560 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-02-09 16:35:11 +00:00
anchore-actions-token-generator[bot]
550e2fc7c3
Update syft bootstrap tools to latest versions. ( #1549 )
2023-02-09 10:10:35 -05:00
Alex Goodman
8847ba5d0b
Add release trigger ( #1501 )
...
* add release trigger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* deduplicate version and changelog calls + add gh checks
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add more chronicle verbosity, but not when triggering releases
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* bump chronicle version to get --version-file feature
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* update bootstrap tool workflow to include glow
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
* add version prefix check on tags in release quality gate
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
---------
Signed-off-by: Alex Goodman <alex.goodman@anchore.com >
2023-02-08 11:38:27 -05:00
