Commit Graph

  • d1635971a1
    fix: inconsistent removal of binaries by overlap (#2036) Keith Zantow 2023-08-17 11:27:31 -04:00
  • 9467bd66c2
    fix: CycloneDX relationships not output or decoded properly (#1974) Mark Galpin 2023-08-17 08:02:12 -07:00
  • 59107324ce
    chore: restore cataloger.DefaultConfig (#2028) Keith Zantow 2023-08-14 16:28:07 -04:00
  • b3d7ba569b
    fix: read direct package files when decoding SPDX tag-value (#2014) v0.87.0 Keith Zantow 2023-08-14 11:37:24 -04:00
  • c7fe58683d
    chore(deps): update bootstrap tools to latest versions (#2022) anchore-actions-token-generator[bot] 2023-08-14 11:36:15 -04:00
  • 28b06dae25
    chore(deps): update CPE dictionary index (#2025) anchore-actions-token-generator[bot] 2023-08-14 11:35:57 -04:00
  • 99344f506d
    chore: update snapshot verison Keith Zantow 2023-08-11 13:46:22 -04:00
  • fea371e36f
    chore: ensure syft binary is up-to-date when running CLI tests locally Keith Zantow 2023-08-10 17:49:28 -04:00
  • a90cff1cd2
    chore(deps): update bootstrap tools to latest versions (#2012) anchore-actions-token-generator[bot] 2023-08-10 13:20:09 -04:00
  • 82eafeaf4a
    chore(deps): bump github.com/vifraa/gopom from 0.2.2 to 1.0.0 (#2008) dependabot[bot] 2023-08-09 17:22:51 -04:00
  • 541c8d339b
    1948-filter-pkg-by-type (#2011) Christopher Angelo Phillips 2023-08-09 16:05:52 -04:00
  • 6bf6f85584
    chore(deps): bump github.com/dave/jennifer from 1.6.1 to 1.7.0 (#2009) dependabot[bot] 2023-08-09 14:46:11 -04:00
  • c7272fd6a5
    fix: SPDX license values and download location (#2007) Keith Zantow 2023-08-08 15:55:50 -04:00
  • 466da7cbda
    931: binary cataloger exclusion defaults for ownership by overlap (#1948) Christopher Angelo Phillips 2023-08-08 13:00:52 -04:00
  • 2fc65094b7
    chore(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 (#2004) dependabot[bot] 2023-08-07 10:34:00 -04:00
  • d7ff77072a
    chore(deps): bump modernc.org/sqlite from 1.24.0 to 1.25.0 (#1998) dependabot[bot] 2023-08-04 14:24:31 -04:00
  • 78660022bf
    test: add coverage for new rpmdb paths (#1999) Christopher Angelo Phillips 2023-08-04 13:04:36 -04:00
  • aaf767f8d3
    chore: improve spdx purl decoding (#1996) Keith Zantow 2023-08-04 11:43:21 -04:00
  • 79014ed8c8
    fix: gradle lockfile parser groupId handling (#1995) Keith Zantow 2023-08-04 11:42:26 -04:00
  • e774006052
    fix: update glob to use newer usr/lib/sysimage path (#1997) Christopher Angelo Phillips 2023-08-03 19:23:50 -04:00
  • 1d6d5f7f5f
    fix: opkg search glob (#1994) Nicholas R. Smith 2023-08-03 12:33:11 -07:00
  • 433a7b8a42
    feat: nginx binary classifier (#1988) Sem Provoost 2023-08-03 19:09:31 +02:00
  • e55277f26d
    Expand deb cataloger to include opkg (#1985) Nicholas R. Smith 2023-08-03 09:33:14 -07:00
  • c2b4231cc3
    chore(deps): update bootstrap tools to latest versions (#1991) anchore-actions-token-generator[bot] 2023-08-03 10:53:29 -04:00
  • c150b4e358
    chore(deps): bump github.com/google/go-containerregistry (#1993) dependabot[bot] 2023-08-03 10:53:09 -04:00
  • 3f0475efb7
    chore: update bubbly to fix hanging (#1990) Keith Zantow 2023-08-02 10:28:35 -04:00
  • 2e376d067f
    chore(deps): bump golang.org/x/net from 0.12.0 to 0.13.0 (#1989) dependabot[bot] 2023-08-02 14:16:49 +00:00
  • 8e893dfc20
    feat: use originator logic to fill supplier (#1980) Christopher Angelo Phillips 2023-08-01 17:19:49 -04:00
  • 756d0f29af
    add metadata types to all cpe test fixtures (#1982) Alex Goodman 2023-07-31 16:35:09 -04:00
  • e2f7befbfb
    fix: default image source name to user input (#1979) v0.86.1 Keith Zantow 2023-07-31 13:29:18 -04:00
  • f14742b3f3
    chore(deps): update stereoscope to d1f3d766295ed3c8362ac1be68070e2a1dba4d03 (#1975) v0.86.0 anchore-actions-token-generator[bot] 2023-07-31 12:02:33 -04:00
  • 4fb9970481 Prevent hang if stderr is tty but stdout is not fix-tty-selection Will Murphy 2023-07-29 13:36:27 -04:00
  • 3aae316456
    chore: update to latest commit in tools-golang (#1969) Christopher Angelo Phillips 2023-07-27 15:29:22 -04:00
  • 063e9da65d
    Guess unpinned versions in python requirements.txt (#1966) Alex Goodman 2023-07-27 14:26:59 -04:00
  • bf1102c3f1
    chore(deps): bump github.com/vifraa/gopom from 0.2.1 to 0.2.2 (#1965) dependabot[bot] 2023-07-27 13:28:42 -04:00
  • bbd2d42dbb
    Fix panic condition on docker pull failure (#1968) Alex Goodman 2023-07-27 11:32:02 -04:00
  • d84120f499
    bump JSON schema to account for simplified python env markers (#1967) Alex Goodman 2023-07-27 10:13:17 -04:00
  • 9480f10ccd
    feat: support top-level SPDX package and graph (#1934) Keith Zantow 2023-07-26 13:54:32 -04:00
  • 1e4d26f526
    chore(deps): bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 (#1959) dependabot[bot] 2023-07-26 13:34:03 +00:00
  • e1c1832f84
    Add cataloger for Swift Package Manager. (#1919) Tristan Farkas 2023-07-25 20:35:21 +02:00
  • 9a73380f29
    chore(deps): update stereoscope to d515761c6ca2743a67d7d08053db69235ae76d1d (#1953) anchore-actions-token-generator[bot] 2023-07-25 10:49:21 -04:00
  • 2e718cf865
    chore(deps): bump github.com/docker/docker (#1955) dependabot[bot] 2023-07-25 10:37:16 -04:00
  • 4000a84624
    chore(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 (#1951) dependabot[bot] 2023-07-24 11:28:54 -04:00
  • 99d172f0d1
    Introduce indexed embedded CPE dictionary (#1897) Dan Luhring 2023-07-21 09:54:19 -04:00
  • 3f5c601620
    chore(deps): bump github.com/gookit/color from 1.5.3 to 1.5.4 (#1949) dependabot[bot] 2023-07-21 08:50:47 -04:00
  • 8478e0bef7
    Add support for parsing .NET assemblies (#1943) Dan Luhring 2023-07-19 15:34:07 -04:00
  • 0327fdc88a
    docs: capture artifactory dev settings from 1895 (#1947) Christopher Angelo Phillips 2023-07-19 12:54:18 -04:00
  • 88b3d1e9bb remove build binary and add explicit git ignore Alex Goodman 2023-07-18 14:06:34 -04:00
  • 204b790012 docs: update docs with new docker specific instructions (#1941) Christopher Angelo Phillips 2023-07-17 14:19:21 -04:00
  • 35699f6fdc
    remove jotframe UI (#1932) Alex Goodman 2023-07-13 13:21:52 -04:00
  • 2e7fd031d4
    fix: remove indirect dependency of circl v1.1.0 (#1940) Christopher Angelo Phillips 2023-07-13 12:30:37 -04:00
  • 32296f5943
    chore: move wait before iteration to guarantee read before tea (#1931) Christopher Angelo Phillips 2023-07-12 13:59:31 -04:00
  • 4fc17edd14
    implement ui handle waiter (#1930) v0.85.0 Alex Goodman 2023-07-12 13:14:54 -04:00
  • 38efe4ec5f
    fix: background reader apart from global handler for testing (#1929) Christopher Angelo Phillips 2023-07-12 12:37:19 -04:00
  • 05a61897f2
    chore(deps): bump modernc.org/sqlite from 1.23.1 to 1.24.0 (#1928) dependabot[bot] 2023-07-11 14:01:48 -04:00
  • 5a7c200911
    fix: allow valid cyclonedx input with no components (#1873) James Neate 2023-07-11 18:56:36 +01:00
  • 72616db81f
    fix: "or-later" suffix updated to consider deprecated "+" operator (#1907) Christopher Angelo Phillips 2023-07-11 12:21:29 -04:00
  • 4ab9f393fc
    feat: CLI flag for directory base (#1867) Avi Deitcher 2023-07-10 20:36:41 +03:00
  • 9744f4c009
    Fix CPE gen for k8s python client (#1921) Dan Luhring 2023-07-10 11:54:19 -04:00
  • d21fa84335
    chore: update iterations to protect against race (#1927) Christopher Angelo Phillips 2023-07-10 11:44:54 -04:00
  • d5d95da3b6
    chore(deps): update bootstrap tools to latest versions (#1922) anchore-actions-token-generator[bot] 2023-07-10 11:03:09 -04:00
  • c0c089ffd5
    fix: Don't use the actual redis or grpc CPEs for gems (#1926) Dan Luhring 2023-07-10 10:24:42 -04:00
  • 376c42893b
    fix(install): return with right error code (#1915) Lorenzo Orsatti 2023-07-06 22:56:07 +02:00
  • 81d8019207
    Remove erroneous Java CPEs from generation (#1918) Dan Luhring 2023-07-06 16:12:55 -04:00
  • 8ce88e11fd
    chore(deps): bump golang.org/x/net from 0.11.0 to 0.12.0 (#1916) dependabot[bot] 2023-07-06 16:02:44 -04:00
  • f8b832e6c3
    Switch UI to bubbletea (#1888) Alex Goodman 2023-07-06 09:00:46 -04:00
  • a00a3df10c
    fix: use filepath.EvalSymlinks if os.Readlink fails to evaluate the link (#1884) DD (Devdatta) Deshpande 2023-07-06 00:19:22 +05:30
  • cfbb9f703b
    add file source digest support (#1914) Alex Goodman 2023-07-05 13:47:13 -04:00
  • 6280146c81
    chore(deps): update bootstrap tools to latest versions (#1908) anchore-actions-token-generator[bot] 2023-07-05 11:06:22 -04:00
  • e8f7108e6e
    chore(deps): bump golang.org/x/mod from 0.11.0 to 0.12.0 (#1912) dependabot[bot] 2023-07-05 11:06:05 -04:00
  • 023ca1be32
    chore(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 (#1913) dependabot[bot] 2023-07-05 11:05:46 -04:00
  • 2e3c7fa158
    doc(readme): add installation section with scoop (#1909) Marco Damiani 2023-07-03 19:50:01 +02:00
  • 4da3be864f
    Refactor source API (#1846) Alex Goodman 2023-06-30 10:19:16 -04:00
  • 608dbded06
    chore(deps): update bootstrap tools to latest versions (#1905) anchore-actions-token-generator[bot] 2023-06-29 14:10:30 -04:00
  • 791d1f9552
    chore(deps): update stereoscope to cd49355d934e9e09339e0b690398afe7bd9f63f1 (#1903) v0.84.1 anchore-actions-token-generator[bot] 2023-06-28 12:05:12 -04:00
  • e5e97b5c4e
    chore(deps): update bootstrap tools to latest versions (#1902) anchore-actions-token-generator[bot] 2023-06-28 12:04:39 -04:00
  • 8219f8d55b
    fix: discover deb file relationships in distroless images (#1901) Weston Steimel 2023-06-28 13:28:20 +01:00
  • 026be3c0f1
    add oss community board auto-add workflow (#1898) Alex Goodman 2023-06-27 15:53:59 -04:00
  • 0d4f19043e
    chore(deps): update stereoscope to 8c7173ebcf69187d480d4d8b0c6cafaa7aef7024 (#1890) anchore-actions-token-generator[bot] 2023-06-26 13:58:44 -04:00
  • 38b47e484c
    chore(deps): update bootstrap tools to latest versions (#1894) anchore-actions-token-generator[bot] 2023-06-26 13:58:17 -04:00
  • 7943c73d3f
    fix: add support for Dart SDK package dependencies (#1891) Stephane Rufer 2023-06-23 09:40:46 -07:00
  • 25ce245c03
    Simplify the SBOM writer interface (#1892) Alex Goodman 2023-06-23 11:21:22 -04:00
  • 7de7a7990a
    fix: improve version detection in Java archive name parsing (#1889) Dan Luhring 2023-06-22 14:42:10 -04:00
  • f79cb9587f
    fix: only output valid cyclonedx license choices (#1879) Keith Zantow 2023-06-22 12:05:38 -04:00
  • c27d5b11d4
    docs: clarify reasoning of default catalogers for images or directories (#1887) Tim Gerla 2023-06-20 15:47:50 -04:00
  • 5d54e6e847
    Configure chronicle to pre-1.0 mode (#1886) v0.84.0 William Murphy 2023-06-20 12:08:35 -04:00
  • 631d50d038
    chore: update SPDX license list to 3.21 (#1885) Keith Zantow 2023-06-20 11:47:02 -04:00
  • 269006bf04
    chore(deps): update bootstrap tools to latest versions (#1880) anchore-actions-token-generator[bot] 2023-06-20 10:22:18 -04:00
  • e2ed89f700
    Pad artifact IDs (#1882) William Murphy 2023-06-16 13:26:18 -04:00
  • badb957888
    chore(deps): bump golang.org/x/mod from 0.10.0 to 0.11.0 (#1878) dependabot[bot] 2023-06-15 14:10:11 -04:00
  • a1bba36d51
    chore(deps): bump modernc.org/sqlite from 1.23.0 to 1.23.1 (#1874) v0.83.1 dependabot[bot] 2023-06-14 11:45:39 -04:00
  • c019cd51da
    chore(deps): update stereoscope to 5b5049bf4d3a99df9a2b1c31d5d52ddff7b5cec2 (#1871) anchore-actions-token-generator[bot] 2023-06-14 11:29:39 -04:00
  • 5406d8a366
    chore(deps): bump golang.org/x/net from 0.10.0 to 0.11.0 (#1876) dependabot[bot] 2023-06-14 10:30:19 -04:00
  • 098c255a2d
    fix: pom properties not setting artifact id (#1870) James Neate 2023-06-12 14:59:14 +01:00
  • 2c5d64ac9e
    chore(deps): bump github.com/spdx/tools-golang from 0.5.1 to 0.5.2 (#1868) dependabot[bot] 2023-06-08 17:01:19 -04:00
  • 1764e1c3f6
    fix: handle invalid symlinks (#1861) v0.83.0 Avi Deitcher 2023-06-05 22:04:14 +03:00
  • c560ffd811
    chore(deps): bump github.com/spdx/tools-golang from 0.5.0 to 0.5.1 (#1850) dependabot[bot] 2023-06-05 15:01:06 -04:00
  • 7d1b292ad0
    chore(deps): update bootstrap tools to latest versions (#1857) anchore-actions-token-generator[bot] 2023-06-05 18:56:04 +00:00
  • f07581f504
    Pr 1825 (#1865) Christopher Angelo Phillips 2023-06-05 13:01:00 -04:00
  • d676e5e781
    chore(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#1862) dependabot[bot] 2023-06-05 10:48:18 -04:00