oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2025-11-22 02:43:19 +01:00
Code Issues Packages Projects Releases Wiki Activity
461 Commits 63 Branches 244 Tags
Commit Graph

97 Commits

Author SHA1 Message Date
Alex Goodman
8bcba7d830
update json schema and test for java virtualPath 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 15:25:30 -04:00
Alex Goodman
76c8f24090
add java virtual path 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-28 13:53:44 -04:00
Toure Dunnon
94ffc2caa8 Merge branch 'main' into javascript_parser_fix_author 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-23 12:05:30 -04:00
Alex Goodman
7d55bca0a0
allow for python metadata fields to be optional 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 10:29:52 -04:00
Toure
48c7dee9da included additional support for older npm spec. 
Signed-off-by: Toure <tdunnon@gmail.com>
 2020-10-23 08:50:38 -04:00
Toure Dunnon
15379d1075 Fix for errors+failures parsing package.json 
closes: #230

Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-22 13:58:18 -04:00
Alex Goodman
2e5ff4a995
add top_level.txt processing to python package cataloger 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 12:39:03 -04:00
Alex Goodman
1414d1fbc3
add test coverage for python pacakge cataloger and update catalog interface 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman
7fc926d40d
add python author and emil fields + add metadata type 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-22 09:51:29 -04:00
Alex Goodman
0ce8701e73
split python package catalogers by image vs directory 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:48:26 -04:00
Alex Goodman
d4ca0ab167
expand the resolver to include content requests for a single reference 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 11:40:14 -04:00
Alex Goodman
6cd9c2b771
upgrade cataloger interface to use full resolver (remove SelectFiles function) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-21 10:49:33 -04:00
Alex Goodman
931c796158
add dynamic package.json parsing of author field 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-20 15:23:04 -04:00
Alex Goodman
bb14f3b45b
reduce number of open files while processing nested java archives (#227) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-16 17:22:14 -04:00
Toure Dunnon
27c62e34f2 Add support for package.json #200 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-16 11:28:54 -04:00
Jason Williams
1f64b3cd49 Fixes #212 by increasing buffer size for scanner 
Signed-off-by: Jason Williams <jasonw@jhu.edu>
 2020-10-13 11:00:55 -04:00
Toure Dunnon
8d25d44ea9
Add homepage field as output to the gemspec metadata (#215) 
https://github.com/anchore/syft/issues/214

Signed-off-by: Toure <tdunnon@gmail.com>
 2020-10-12 18:59:56 -04:00
Alex Goodman
335a6b022f
add acceptance test to cover gem cataloger + fix gem cataloger parent dir (#207) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 13:13:31 -04:00
Alex Goodman
9edbc65bce
move unicode regex to static space 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:55:57 -04:00
Alex Goodman
398d8903e7 finalize gemspec parser + update json schema to match 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman
46c74865e5 add render unicode in gemspec parser 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:14 -04:00
Alex Goodman
1f0f6fa3e5 more gemspec tests 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:52:03 -04:00
Alex Goodman
abdd00cd24 rename gem parsers and catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman
10b44f5311 split catalogers into two sets, one for images another for directory scans 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Alex Goodman
1c320a8382 defer to GenericCataloger instances for pkg catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-08 10:23:24 -04:00
Toure
7a8a5419b8 adding ruby gemspec support. 
Signed-off-by: Toure Dunnon <toure.dunnon@anchore.com>
 2020-10-08 10:19:33 -04:00
Dan Luhring
b6dfdf16b6
Remove and update TODOs (#194) 
* Remove and update TODOs

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update TODO with link

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-09-29 11:53:19 -04:00
Alex Goodman
b5ce187ba7
replace modfile with stdlib (#187) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:25:04 -04:00
Alex Goodman
26855a2a9e
ignore apk xattr file checksum + remove log.Errorf error wraps (#192) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:22:17 -04:00
Sam Dacanay
11334b632e
Expand matching of requirements.txt file to include any prefixes or suffixes (#168) 
* Expand matching of requirements.txt file to include any prefixes or suffixes

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

* Add some test cases to integration test (ensure syft can pick up multiple requirements files)

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>

* Run lint-fix

Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com>
 2020-09-08 10:23:37 -07:00
Alex Goodman
8a4886ec0e
Add package URL support to the CycloneDX presenter (#164) 
* add package URL support to the CycloneDX presenter

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* wrap license tags with licenses

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-30 21:40:19 -04:00
Alfredo Deza
9c4024d6fa cataloger: add setup.py support for Python 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 16:00:49 -04:00
Alex Goodman
95517d131a Improve overall documentation (#148) 
* improve overall documentation

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix tests to use scope.Resolver over scope

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-13 16:34:32 -04:00
Alex Goodman
51b9c73c31
Add documentation around catalogers, UI elements, and the event bus (#143) 
* add basic documentation for catalogers (with refactoring for simplification)

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add docs for catalog parsers, UI, and event bus

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update bus phrasing

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:04:39 -04:00
Alex Goodman
5042d371cf
migrate to anchore/go-rpmdb (#144) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-11 15:32:51 -04:00
Alex Goodman
2d452bf59e
Add inline-comparison as acceptance test (#130) 
* add inline-compare as acceptance test

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add additional RPM metadata

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments and doc strings to the compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 10:33:44 -04:00
Dan Luhring
70e673204c
Add poetry cataloger (#121) 
* Minor cleanup

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update pkg Type definition to string

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Implement poetry.lock parsing

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Address CI issues

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Integrate Alex's changes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-04 18:22:43 -04:00
Alex Goodman
e2a874a277
finalize json output & add schema (#118) 2020-08-04 16:05:53 -04:00
Alex Goodman
2560266e38
Initial README (#120) 
* initial readme + logging and output fixes to support descriptions

* minor tweaks to README descriptions

* simplify phrasing

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* add comment for example gif

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* spelling fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* update phrasing

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* simplify TODO note

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* grammar fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* phrase fix

Co-authored-by: Alfredo Deza <adeza@anchore.com>

* rm readme bash block indicators

* clarify config examples are default values

* rm value

Co-authored-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-08-04 15:22:34 -04:00
Alfredo Deza
04a1c91881 java: fallback to manifest.ImplTitle when there is no name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-31 07:35:43 -04:00
Alfredo Deza
bb81c0b9fe tests: java cataloger tests for selecting name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-31 07:35:43 -04:00
Alfredo Deza
713f660528 cataloger: update controller to use javascript (vs. npm) 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:20:11 -04:00
Alfredo Deza
d79cecea3e tests: verify new yarn.lock parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:20:11 -04:00
Alfredo Deza
67fb1326e0 cataloger: implement the yarn.lock parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alfredo Deza
146b4bd01f cataloger: rename npm to javascript to accommodate yarn parser 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-28 15:18:47 -04:00
Alex Goodman
9ec5da24dd
fix py globs to include partial matches (#101) 2020-07-24 08:22:56 -04:00
Alex Goodman
a4016d35ce
rename to syft 2020-07-23 20:54:04 -04:00