oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-20 18:03:16 +01:00
Code Issues Packages Projects Releases Wiki Activity
454 Commits 63 Branches 244 Tags
Commit Graph

45 Commits

Author SHA1 Message Date
Zach Hill
7962002f81
Split dpk source into name and version (#297) 
* Split dpk source into name and version

Signed-off-by: Zach Hill <zach@anchore.com>

* update dpkg status source name parsing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Dan Luhring <luhring@users.noreply.github.com>
Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-18 14:08:19 -05:00
Alex Goodman
3aaa0e5566
move package purl and cpes (identities) to pkg.Package 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-19 11:25:51 -05:00
Alex Goodman
c892c3609e
improve doc comments 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:13 -05:00
Alex Goodman
6f7a4fd3e4
move source metadata upstream and fix tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman
aa0d444fd4
fix tests to use location instead of file.Reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:12 -05:00
Alex Goodman
9668341a14
rename scope to source 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:37:11 -05:00
Alex Goodman
495fb0a45f
add sbom document import lib helper function 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 12:36:51 -05:00
Alex Goodman
2a329002b8
enhance dpkg support by parsing md5sum and copyright file sources 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-11 11:06:34 -05:00
Alex Goodman
8095cd9980
add rpmdb file info to cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-06 07:21:23 -05:00
Alex Goodman
a52750bdd3
enhance alpine file discovery (#248) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-04 09:56:52 -05:00
Alex Goodman
03dbfb8dfb
improve java name and version extraction as well as parent pkg pairing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-30 08:12:25 -04:00
Alex Goodman
a5cba13ddf
enable more flexible java manifest structure (closer to the spec) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 16:26:04 -04:00
Alex Goodman
1230650771
allow for java manifest data to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-29 11:28:27 -04:00
Alex Goodman
2675891110
remove parent java package from json && add java manifest section parsing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 17:19:06 -04:00
Alex Goodman
62f6146c37
do not include optional fields 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:58:54 -04:00
Alex Goodman
8bcba7d830
update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman
76c8f24090
add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Alex Goodman
6eb36bc3c8
allow for optional fields in npm metadata 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 15:00:55 -04:00
Toure Dunnon
94ffc2caa8 Merge branch 'main' into javascript_parser_fix_author 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-23 12:05:30 -04:00
Alex Goodman
7d55bca0a0
allow for python metadata fields to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:29:52 -04:00
Toure Dunnon
15379d1075 Fix for errors+failures parsing package.json 
closes: #230

Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-22 13:58:18 -04:00
Alex Goodman
2e5ff4a995
add top_level.txt processing to python package cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 12:39:03 -04:00
Alex Goodman
1414d1fbc3
add test coverage for python pacakge cataloger and update catalog interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman
7fc926d40d
add python author and emil fields + add metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman
0ce8701e73
split python package catalogers by image vs directory 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:48:26 -04:00
Alex Goodman
931c796158
add dynamic package.json parsing of author field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-20 15:23:04 -04:00
Toure Dunnon
27c62e34f2 Add support for package.json #200 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-16 11:28:54 -04:00
Alex Goodman
b3387807c1
allow for gemspec metadata fields to be optional (#218) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 09:57:58 -04:00
Toure Dunnon
8d25d44ea9
Add homepage field as output to the gemspec metadata (#215) 
https://github.com/anchore/syft/issues/214

Signed-off-by: Toure <tdunnon@gmail.com>
 2020-10-12 18:59:56 -04:00
Alex Goodman
398d8903e7 finalize gemspec parser + update json schema to match 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman
1f0f6fa3e5 more gemspec tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:03 -04:00
Alex Goodman
10b44f5311 split catalogers into two sets, one for images another for directory scans 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Toure
7a8a5419b8 adding ruby gemspec support. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-08 10:19:33 -04:00
Dan Luhring
b6dfdf16b6
Remove and update TODOs (#194) 
* Remove and update TODOs

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update TODO with link

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-09-29 11:53:19 -04:00
Alex Goodman
26855a2a9e
ignore apk xattr file checksum + remove log.Errorf error wraps (#192) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:22:17 -04:00
Samuel Dacanay
0567206b38 Change kebab case to camelCase in json keys throughout app 
Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-18 08:55:17 -07:00
Alex Goodman
8a4886ec0e
Add package URL support to the CycloneDX presenter (#164) 
* add package URL support to the CycloneDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap license tags with licenses

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-30 21:40:19 -04:00
Alfredo Deza
27c207bbca pkg: add a new type to identify setup.py packages 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 10:12:27 -04:00
Alex Goodman
95517d131a Improve overall documentation (#148) 
* improve overall documentation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix tests to use scope.Resolver over scope

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-13 16:34:32 -04:00
Alex Goodman
51b9c73c31
Add documentation around catalogers, UI elements, and the event bus (#143) 
* add basic documentation for catalogers (with refactoring for simplification)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add docs for catalog parsers, UI, and event bus

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update bus phrasing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:04:39 -04:00
Alex Goodman
2d452bf59e
Add inline-comparison as acceptance test (#130) 
* add inline-compare as acceptance test

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add additional RPM metadata

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments and doc strings to the compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 10:33:44 -04:00
Dan Luhring
70e673204c
Add poetry cataloger (#121) 
* Minor cleanup

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update pkg Type definition to string

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Implement poetry.lock parsing

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Address CI issues

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Integrate Alex's changes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-04 18:22:43 -04:00
Alex Goodman
e2a874a277
finalize json output & add schema (#118) 2020-08-04 16:05:53 -04:00
Alfredo Deza
57904743aa pkg: define the Yarn package type 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alex Goodman
a4016d35ce
rename to syft 2020-07-23 20:54:04 -04:00