1 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
5 people	c491dab35b	feat: add parsing for uv.lock (#3763) ... * feat: add parsing for uv.lock (#3268) Signed-off-by: Joshua Kugler <tek30584@adobe.com> * Still no tests, but much more complete Next up: start writing tests! :) Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore: finish out functionality and write tests Signed-off-by: Joshua Kugler <tek30584@adobe.com> * Merge the .NET deps.json and PE binary catalogers (#3563) * add combined deps.json + pe binary cataloger Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * deprecate pe and deps standalone catalogers Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * parse resource names + add tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * fix integration and CLI tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add some helpful code comments Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * allow for dropping Dep packages that are missing DLLs Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * migrate json schema changes to 24 Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * keep application configuration Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * correct config help Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * [wip] detect claims of dlls within deps.json Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * [wip] fix tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add assembly repack detection Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * .net package count is lower due to dll claim requirement Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * better .NET cpe generation (#3764) Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * Better represent .NET runtime packages (#3768) * clean up .NET runtime packages Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add runtime relationships Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove runtime references from binary package name Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore(deps): update CPE dictionary index (#3769) Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: wagoodman <590471+wagoodman@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore(deps): bump modernc.org/sqlite from 1.36.1 to 1.37.0 (#3771) Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.36.1 to 1.37.0. - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.36.1...v1.37.0) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore(deps): bump 8398a7/action-slack from 3.16.2 to 3.18.0 (#3767) Bumps [8398a7/action-slack](https://github.com/8398a7/action-slack) from 3.16.2 to 3.18.0. - [Release notes](https://github.com/8398a7/action-slack/releases) - [Commits](https://github.com/8398a7/action-slack/compare/28ba43ae48961b90635b50953d216767a6bea486...1750b5085f3ec60384090fb7c52965ef822e869e) --- updated-dependencies: - dependency-name: 8398a7/action-slack dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (#3766) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.37.0 to 0.38.0. - [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore: move/modify code for lint issues Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore: make sure private structs are not exported Signed-off-by: Joshua Kugler <tek30584@adobe.com> * fix tests Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * generate json schema Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * chore: update readme to include uv Signed-off-by: Joshua Kugler <tek30584@adobe.com> * chore: use uv as the package manager name Signed-off-by: Joshua Kugler <tek30584@adobe.com> --------- Signed-off-by: Joshua Kugler <tek30584@adobe.com> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: anchore-actions-token-generator[bot] <102182147+anchore-actions-token-generator[bot]@users.noreply.github.com> Co-authored-by: wagoodman <590471+wagoodman@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-17 18:26:56 +00:00