Commit Graph

  • 9b98785aab
    chore: setup release task before calling go releaser (#2297) v0.95.0 Christopher Angelo Phillips 2023-11-07 08:33:06 -08:00
  • ad977ee0a1
    chore(deps): update tools to latest versions (#2296) anchore-actions-token-generator[bot] 2023-11-07 06:44:39 -08:00
  • 9eac737fe2
    chore(deps): update tools to latest versions (#2289) anchore-actions-token-generator[bot] 2023-11-06 09:23:46 -05:00
  • 4ba92ac43b
    chore(deps): update CPE dictionary index (#2290) anchore-actions-token-generator[bot] 2023-11-06 09:23:24 -05:00
  • a4b895d31f
    chore(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 (#2292) dependabot[bot] 2023-11-06 14:12:40 +00:00
  • 9fa11f2339
    Wire though maven-url to java config (#2291) Colm O hEigeartaigh 2023-11-06 14:08:03 +00:00
  • 1470abaded
    Use case-insensitive matching for Go license files (#2286) Mark Severson 2023-11-03 12:47:09 -06:00
  • 2d582f78a1
    Add a new Java configuration option to recursively search parent poms… (#2274) Colm O hEigeartaigh 2023-11-03 14:33:02 +00:00
  • 793cef5086
    chore(deps): update tools to latest versions (#2280) anchore-actions-token-generator[bot] 2023-11-02 09:20:27 -04:00
  • b2f4d7eda2
    Follow convention for naming catalogers (#2277) Alex Goodman 2023-11-02 08:39:42 -04:00
  • 6c41f15975
    change dir resolver to include virtual path (#2259) Alex Goodman 2023-11-02 08:20:00 -04:00
  • 26cdbfc299
    fix: syft does not handle the case of parsing a jar with multiple poms (#2231) Colm O hEigeartaigh 2023-11-01 17:10:17 +00:00
  • dc9bc58480
    add PURLs when scanning Gradle lock files (#2278) Robbie Vanbrabant 2023-11-01 17:09:31 +00:00
  • a6d73e5659
    chore(deps): bump modernc.org/sqlite from 1.26.0 to 1.27.0 (#2279) dependabot[bot] 2023-11-01 10:35:20 -04:00
  • ee4e69285a test: remove dll files and updates tests to use versionResources (#2276) Christopher Angelo Phillips 2023-10-31 15:33:52 -04:00
  • 59c56a5666 fix: update dot net binary parsing logic to remove empty space (#2273) Christopher Angelo Phillips 2023-10-31 10:43:29 -04:00
  • 78ac2f9797
    Read a license from a parent pom stored in Maven Central (#2228) Colm O hEigeartaigh 2023-10-30 21:48:16 +00:00
  • 262423b1e8
    Update README.md to use canonical output format names (fixes #2269) (#2272) Tim Gerla 2023-10-30 17:25:30 -04:00
  • 1aaa644007
    Remove MetadataType from core package object and normalize JSON metadataType values (#1983) Alex Goodman 2023-10-30 12:12:04 -04:00
  • f442586ec9
    chore(deps): bump github.com/docker/docker (#2263) dependabot[bot] 2023-10-30 09:55:19 -04:00
  • 12877ed863
    chore(deps): update stereoscope to 5909e353ee88d7809f0e646c79f110a0e6b1d80d (#2265) anchore-actions-token-generator[bot] 2023-10-30 09:51:37 -04:00
  • 629aafc323
    chore(deps): update CPE dictionary index (#2271) anchore-actions-token-generator[bot] 2023-10-30 09:48:03 -04:00
  • f430788099
    chore: fix cpe generation task (#2270) William Murphy 2023-10-30 08:51:26 -04:00
  • 58850d3258
    chore(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0 (#2262) dependabot[bot] 2023-10-27 09:55:04 -04:00
  • 2428d704e1
    chore(deps): bump github/codeql-action from 2.22.4 to 2.22.5 (#2261) dependabot[bot] 2023-10-27 09:54:23 -04:00
  • da07520121
    chore(deps): update tools to latest versions (#2258) anchore-actions-token-generator[bot] 2023-10-26 10:15:13 -04:00
  • ae27dcdfa9
    chore(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 (#2256) dependabot[bot] 2023-10-25 10:45:27 -04:00
  • 1daf18fee9
    feat: Perform case insensitive matching on Java license files (#2235) Colm O hEigeartaigh 2023-10-25 14:51:59 +01:00
  • 7392d607b6
    Split the sbom.Format interface by encode and decode use cases (#2186) Alex Goodman 2023-10-25 09:43:06 -04:00
  • 7315f83f9d
    Upgrade tool management (#2188) Alex Goodman 2023-10-25 09:08:43 -04:00
  • cd530924d0
    fix: 2179 jar chokes empty lines (#2254) Christopher Angelo Phillips 2023-10-24 14:03:47 -04:00
  • 73d5852119
    chore(deps): update CPE dictionary index (#2253) anchore-actions-token-generator[bot] 2023-10-24 13:22:02 -04:00
  • c4b464e616
    fix CPE workflow (#2252) Alex Goodman 2023-10-24 11:07:49 -04:00
  • 234ce4e1f3
    feat: add conaninfo.txt parser to detect conan packages in docker images (#2234) Stefan Profanter 2023-10-23 22:17:50 +02:00
  • f9433e7f9b
    chore(deps): update bootstrap tools to latest versions (#2245) anchore-actions-token-generator[bot] 2023-10-23 10:48:07 -04:00
  • 5a4778093d
    chore(deps): bump github.com/bmatcuk/doublestar/v4 from 4.6.0 to 4.6.1 (#2248) dependabot[bot] 2023-10-23 10:42:17 -04:00
  • bdbf927847
    chore(deps): bump github/codeql-action from 2.22.3 to 2.22.4 (#2249) dependabot[bot] 2023-10-23 10:41:54 -04:00
  • f3d95aa3a9
    fill version info from release and git directly (#2244) Alex Goodman 2023-10-23 09:05:43 -04:00
  • 671ff39933
    Add ruby.NewGemSpecCataloger to DirectoryCatalogers. (#1971) Chao Li 2023-10-23 20:49:57 +08:00
  • 263be01faa
    change homebrew release trigger (#2242) Alex Goodman 2023-10-20 14:31:41 -04:00
  • 8f6bdde666
    Label PRs when the json schema changes (#2240) v0.94.0 Alex Goodman 2023-10-20 13:00:15 -04:00
  • ef43294d0e
    Add download location when cataloging directory npm package lock (#2238) Christopher Angelo Phillips 2023-10-20 11:40:38 -04:00
  • e1ad340c2d
    fix: allow packages to be captured from DIST/EGG case (#2239) Christopher Angelo Phillips 2023-10-20 11:29:13 -04:00
  • 07f13049da
    Account for maven bundle plugin and fix filename matching (#2220) Alex Goodman 2023-10-19 17:57:23 -04:00
  • 6c7900f5b8
    chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#2236) dependabot[bot] 2023-10-18 09:54:26 -04:00
  • 7018573bf7
    Remove internal string set (#2219) Alex Goodman 2023-10-17 12:52:11 -04:00
  • f3ad8cf250
    bump clio to get stderr reporting fix (#2232) Alex Goodman 2023-10-16 12:47:48 -04:00
  • 31f1d7dbf0
    Fix panic for empty input to Swift cataloger (#2226) Alex Goodman 2023-10-16 11:04:33 -04:00
  • 144ed725a7
    Add additional license filenames (#2227) Colm O hEigeartaigh 2023-10-16 14:20:00 +01:00
  • dcec2bc352
    chore(deps): bump github/codeql-action from 2.22.2 to 2.22.3 (#2229) dependabot[bot] 2023-10-16 08:59:39 -04:00
  • a8ceb73220
    chore: continue building snapshots for acceptance tests chore/build-syft-for-cli-tests Keith Zantow 2023-10-13 15:38:46 -04:00
  • 1b5e76977e
    chore: continue building snapshots for acceptance tests Keith Zantow 2023-10-13 15:04:16 -04:00
  • 2fc2588030
    chore: workaround goreleaser single-target running multiple hooks bug Keith Zantow 2023-10-13 11:37:47 -04:00
  • ecfba80ca7
    chore: snapshot cmd Keith Zantow 2023-10-13 10:32:35 -04:00
  • 8104163bb8
    chore: bootstrap environments for acceptance tests Keith Zantow 2023-10-13 10:19:42 -04:00
  • bd9b39d370
    Merge remote-tracking branch 'origin/main' into chore/build-syft-for-cli-tests Keith Zantow 2023-10-13 09:18:40 -04:00
  • 42aca2d7ad
    chore: cleanup Keith Zantow 2023-10-13 09:13:37 -04:00
  • 6c3755fbbe
    chore: attempt to avoid full snapshot build Keith Zantow 2023-10-13 09:13:01 -04:00
  • 1fe0921a5b
    chore(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (#2222) dependabot[bot] 2023-10-12 11:10:56 -04:00
  • 538fe5ee1d
    chore(deps): bump github/codeql-action from 2.22.1 to 2.22.2 (#2224) dependabot[bot] 2023-10-12 11:10:45 -04:00
  • 2687100e6a
    Detect a license file in the root directory or META-INF of a jar (#2213) Colm O hEigeartaigh 2023-10-12 16:09:53 +01:00
  • fe7a417fb2
    Parse donet dependency trees (#2143) Benji Visser 2023-10-11 14:01:24 -04:00
  • 7732cd3b48
    chore(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#2214) dependabot[bot] 2023-10-11 13:52:07 -04:00
  • 0302fc5b48
    chore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#2215) dependabot[bot] 2023-10-11 09:53:00 -04:00
  • b899536814
    chore(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0 (#2216) dependabot[bot] 2023-10-11 09:52:42 -04:00
  • d1120ad56e
    chore: add automated homebrew action (#2164) Christopher Angelo Phillips 2023-10-11 09:52:22 -04:00
  • ef759038f5
    Add relationships for dpkg packages (#2212) Alex Goodman 2023-10-11 08:56:26 -04:00
  • 0748945c83
    Parse the Maven license from the pom.xml if not contained in the mani… (#2115) v0.93.0 Colm O hEigeartaigh 2023-10-10 18:09:44 +01:00
  • 185d0d1bfa
    Refine the docs for building a cataloger (#2175) Alex Goodman 2023-10-09 13:44:38 -04:00
  • d16ecdf715
    Fix algo lookup by converting key to lower case (#2207) Mohammad Sharief Baig 2023-10-09 22:37:18 +05:30
  • 68cf57ed03
    chore(deps): bump github/codeql-action from 2.22.0 to 2.22.1 (#2208) dependabot[bot] 2023-10-09 13:05:57 -04:00
  • f6c8057977
    feat: add package for go compiler given binary detection (#2195) Christopher Angelo Phillips 2023-10-06 13:15:50 -04:00
  • 87e57aa925
    chore(deps): bump github.com/docker/distribution from 2.8.2+incompatible to 2.8.3+incompatible (#2193) dependabot[bot] 2023-10-06 12:54:19 -04:00
  • eed35ec9ce
    chore(deps): bump github/codeql-action from 2.21.9 to 2.22.0 (#2202) dependabot[bot] 2023-10-06 12:02:34 -04:00
  • b23879fd37
    chore(deps): bump golang.org/x/net from 0.15.0 to 0.16.0 (#2204) dependabot[bot] 2023-10-06 12:01:38 -04:00
  • 30f0686353
    chore: update license list to 3.22 (#2201) Christopher Angelo Phillips 2023-10-06 10:56:47 -04:00
  • 235ad2e749
    Add exact syntax of the conversion formats (#2196) Marc-Etienne Vargenau 2023-10-05 20:48:30 +02:00
  • 127fac8ca9
    chore(deps): bump github.com/saferwall/pe from 1.4.6 to 1.4.7 (#2198) dependabot[bot] 2023-10-05 13:02:30 -04:00
  • 37bb95f5c9
    chore(deps): bump golang.org/x/mod from 0.12.0 to 0.13.0 (#2199) dependabot[bot] 2023-10-05 11:50:05 -04:00
  • 1067dc2ce9
    chore: removes unnecessary conditional (#2194) chavacava 2023-10-04 20:06:12 +02:00
  • 21878784a8
    chore: improve --output help text and deprecate --file (#2187) Mohammad Sharief Baig 2023-10-03 20:43:07 +05:30
  • 86005d1593
    chore(deps): bump modernc.org/sqlite from 1.25.0 to 1.26.0 (#2189) dependabot[bot] 2023-10-02 12:34:59 -04:00
  • 45625dae94
    chore(deps): bump github.com/gkampitakis/go-snaps from 0.4.10 to 0.4.11 (#2191) dependabot[bot] 2023-10-02 12:33:42 -04:00
  • 38d5ef2c84
    chore(deps): bump github/codeql-action from 2.21.8 to 2.21.9 (#2182) dependabot[bot] 2023-09-28 10:56:08 -04:00
  • 1217ed2307 WIP: possible improvement to group ID guessing possibly-better-group-id-guessing Will Murphy 2023-09-27 17:24:08 -04:00
  • 44e5480238
    chore(deps): update bootstrap tools to latest versions (#2178) anchore-actions-token-generator[bot] 2023-09-27 15:05:15 -04:00
  • 7b1af8721d
    chore(deps): bump github.com/saferwall/pe from 1.4.5 to 1.4.6 (#2180) dependabot[bot] 2023-09-27 15:04:52 -04:00
  • 8f57d22f63
    chore(deps): update bootstrap tools to latest versions (#2171) v0.92.0 anchore-actions-token-generator[bot] 2023-09-26 11:14:25 -04:00
  • 351c683cb4
    chore(deps): bump actions/checkout from 4.0.0 to 4.1.0 (#2172) dependabot[bot] 2023-09-26 07:49:13 -04:00
  • 534a5f54b0
    chore(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 (#2174) dependabot[bot] 2023-09-25 15:07:19 -04:00
  • 8a414b5366
    chore: bump stereoscope to fix data race in UI code (#2173) William Murphy 2023-09-25 10:29:56 -04:00
  • e34adea749
    fix: deterministic java purls (#2170) William Murphy 2023-09-25 09:28:18 -04:00
  • 8314c0d2cb
    Correcting behavior based on Syft release v0.91.0 run (#2162) Alex Goodman 2023-09-20 16:18:44 -04:00
  • b7fa75d7f8
    chore: switch to stdlib's slices pkg (#2148) v0.91.0 Đỗ Trọng Hải 2023-09-21 01:38:37 +07:00
  • 7d0d3e1977
    fix: prevent errors from clobbering terminal (#2161) Keith Zantow 2023-09-20 14:35:41 -04:00
  • 58f8c852df
    Require ordering of relationships when comparing parser output (#2160) Alex Goodman 2023-09-20 13:39:18 -04:00
  • b8f52d570e
    chore: stop unit test switch on host arch (#2156) William Murphy 2023-09-20 11:45:13 -04:00
  • ba00f3328d
    chore(deps): bump github.com/github/go-spdx/v2 from 2.1.2 to 2.2.0 (#2158) dependabot[bot] 2023-09-20 10:12:33 -04:00
  • 962ff1ec49
    chore(deps): bump tibdex/github-app-token from 2.0.0 to 2.1.0 (#2157) dependabot[bot] 2023-09-20 10:12:13 -04:00
  • 40899adb87
    use annotated tags, update chronicle, fix cache keys (#2154) Alex Goodman 2023-09-20 10:11:44 -04:00