Commit Graph

  • f1457f2554
    pin php apache fixture to debian snapshot (#5043) Alex Goodman 2026-07-06 11:01:44 -04:00
  • e4f5df936c
    chore(deps): bump anchore/workflows/.github/workflows/release-install-script.yaml (#5031) dependabot[bot] 2026-07-06 10:59:47 -04:00
  • 8c0d21e147
    chore(deps): update CPE dictionary index (#5042) anchore-oss-update-bot 2026-07-06 10:56:45 -04:00
  • 6f5c83a558
    chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#5024) dependabot[bot] 2026-07-03 13:42:48 +00:00
  • ee48c01c06
    chore(deps): bump actions/cache/restore in /.github/actions/bootstrap (#5037) dependabot[bot] 2026-07-03 13:31:51 +00:00
  • f6bf15bb3c
    chore(deps): bump golang.org/x/tools from 0.46.0 to 0.47.0 (#5038) dependabot[bot] 2026-07-03 13:31:03 +00:00
  • 312f2532d0
    chore(deps): bump modernc.org/sqlite from 1.51.0 to 1.53.0 (#5039) dependabot[bot] 2026-07-03 13:30:45 +00:00
  • f2c9463e76
    chore(deps): bump anchore/go-make/.github/actions/setup (#5036) dependabot[bot] 2026-07-03 13:30:15 +00:00
  • 4eb61fc104
    chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (#5034) dependabot[bot] 2026-07-03 13:26:50 +00:00
  • 832d96c1dd
    chore(deps): bump actions/cache in /.github/actions/bootstrap (#5035) dependabot[bot] 2026-07-03 13:26:37 +00:00
  • 5a7a72b53e
    chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#5030) dependabot[bot] 2026-07-03 13:26:27 +00:00
  • df1fc98e7a
    chore(deps): bump anchore/workflows/.github/workflows/codeql.yaml (#5032) dependabot[bot] 2026-07-03 13:26:04 +00:00
  • 656a4d46d7
    Vcpkg Cataloger (#4081) gab 2026-07-01 08:11:33 -05:00
  • 148fe572bc
    added macOS .app cataloger (#4490) Rez Moss 2026-06-30 10:32:57 -04:00
  • deee79411a
    fix: composite action version parsing (#4616) Keith Zantow 2026-06-29 15:23:47 -04:00
  • e7f1a803e7
    fixed dotnet cataloger can't find packages from deps.json in linux el… (#4517) Rez Moss 2026-06-29 13:52:55 -04:00
  • a34f86fba1
    fix(template): expose sprig date/time functions in Go templates (#4644) sputnik-mac 2026-06-29 22:55:51 +07:00
  • e388b5249d
    Add support for MIT and Heimdal Kerberos 5 library detection (#4781) nadimz 2026-06-29 17:54:44 +02:00
  • 1746e96ad3
    fix: correct typos and update examples README (#4703) Archy 2026-06-29 17:16:50 +02:00
  • 956858fc11
    ruby/gemspec: resolve simple #{s.name}/#{s.version} interpolation (#4782) Sai Asish Y 2026-06-29 08:00:48 -07:00
  • 37fee88b5c
    feat(elixir): emit dependency relationships from mix.lock (#4985) Chris Greeno 2026-06-29 15:22:38 +01:00
  • 1143c12a97
    fix: add .bpl file extension support to PE/DLL cataloger (closes #4664) (#4688) sputnik-mac 2026-06-29 21:17:52 +07:00
  • b15c5dbfe2
    chore(deps): update anchore dependencies (#4960) v1.46.0 anchore-oss-update-bot 2026-06-25 15:26:14 -04:00
  • 35d56bfb99
    Update go-make to v0.8.0 (#5010) Alex Goodman 2026-06-25 15:01:40 -04:00
  • abf6d78dfc
    fixes the wrapped taskfile-tasks (#5013) Alex Goodman 2026-06-24 11:22:16 -04:00
  • fe42bcec38
    fix(purl-backfill): respect arch qualifier (#4987) Will Murphy 2026-06-23 15:23:46 -04:00
  • fea4a50124
    feat: deno cataloger #4417 (#4523) Rez Moss 2026-06-23 10:58:22 -04:00
  • 5eefd73ac7
    chore(deps): bump golang.org/x/tools from 0.45.0 to 0.46.0 (#5008) dependabot[bot] 2026-06-22 18:50:24 +00:00
  • 684c7018be
    chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 (#5004) dependabot[bot] 2026-06-22 18:34:47 +00:00
  • f827f91ec1
    chore(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 (#5007) dependabot[bot] 2026-06-22 18:19:47 +00:00
  • e9af7d218c
    chore(deps): bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.1 (#5006) dependabot[bot] 2026-06-22 18:18:54 +00:00
  • 506ad5d6a7
    refactor release pipeline: TAG_TOKEN, skip-checks gate, dependabot/zizmor cleanup (#5003) Alex Goodman 2026-06-22 14:04:48 -04:00
  • 1f4f9332c5
    feat: support envoy bin classifier Rez Moss 2026-06-22 13:16:33 -04:00
  • 52a4c3b594
    feat: elastic beats bin classifier (#4969) Rez Moss 2026-06-22 11:49:44 -04:00
  • 9c321691d4
    feat: SPDX 3 (#4269) Keith Zantow 2026-06-22 10:59:34 -04:00
  • 0e8d6deabe
    require tmpdir to exist for fingerprints (#5002) Alex Goodman 2026-06-22 10:54:26 -04:00
  • deb2fd92ef
    chore(deps): bump github.com/containerd/containerd/v2 (#5001) dependabot[bot] 2026-06-22 14:12:11 +00:00
  • 80d3b62de4
    bump go-make to v0.7.0 (#4999) Alex Goodman 2026-06-22 09:47:58 -04:00
  • b71afc87fc
    chore(deps): update tool versions (#4994) anchore-oss-update-bot 2026-06-19 07:51:05 -04:00
  • efe3174b5f
    Preserve dependency edges when a compliance stub changes a package ID (#4993) Alex Goodman 2026-06-18 19:50:30 -04:00
  • 1c72d03da3
    add file-based toolchain detection add-file-based-toolchain-detector Alex Goodman 2025-12-09 11:31:48 -05:00
  • 58e4dbbf01
    feat: added bin classifier elastic-agent (#4968) Rez Moss 2026-06-17 11:29:07 -04:00
  • b70fa899cb
    golangci-lint: enable gci formatter (#4828) Sebastiaan van Stijn 2026-06-17 16:34:22 +02:00
  • 951fbd454a
    add purl types to cataloger info cmd (#4984) Alex Goodman 2026-06-16 12:13:34 -04:00
  • 92ae4d44c5
    fix: .net deps.json cataloger no longer shows phantom pkgs (#4971) Rez Moss 2026-06-16 12:02:42 -04:00
  • 8d48a8b8c2
    ensure we have a snapshot build for cli tests (#4981) Alex Goodman 2026-06-16 10:41:33 -04:00
  • cff5a05681
    fix(dpkg): extract License field for opkg/ipkg entries (#4963) David Dashti 2026-06-15 22:15:32 +02:00
  • 00ca43d24a
    fix: catalog uv PEP 723 script lockfiles (*.py.lock) (#4950) Kursat Topcuoglu 2026-06-15 18:34:02 +03:00
  • 6a27678036
    chore(deps): bump the actions-minor-patch group across 2 directories with 6 updates (#4975) dependabot[bot] 2026-06-12 13:29:23 +00:00
  • 89773c0a12
    fix: support CycloneDX 1.7 (#4967) Keith Zantow 2026-06-11 09:40:42 -04:00
  • b08d3c2970
    feat: add support for Bun lockfile (#4625) Yoonho Hann 2026-06-10 02:22:43 +09:00
  • 63232bf725
    fix: local version identifiers in python requirements parsing (#4959) Keith Zantow 2026-06-08 11:12:47 -04:00
  • 908eb57890
    feat: add .bpl extension to PE cataloger (#4954) Marcus 2026-06-08 14:07:15 +00:00
  • c5c423ab37
    fix: detect mariadb version from RHEL build path (#4952) Arpit Jain 2026-06-08 02:28:18 +09:00
  • d4496b05aa
    chore(deps): update anchore dependencies (#4934) v1.45.1 anchore-oss-update-bot 2026-06-05 09:55:57 -04:00
  • adc55cdb3a
    chore(deps): bump the go-minor-patch group across 1 directory with 3 updates (#4957) dependabot[bot] 2026-06-05 13:28:05 +00:00
  • 00d0bb59cc
    chore(deps): update tool versions (#4724) anchore-oss-update-bot 2026-06-05 07:22:28 -04:00
  • f474308783
    chore(deps): bump the go-minor-patch group across 2 directories with 14 updates (#4947) dependabot[bot] 2026-06-04 17:06:25 -04:00
  • bf67072246
    chore: bump golang.org/x/crypto (#4955) Will Murphy 2026-06-04 16:06:08 -04:00
  • 9673f867e5
    Pass contents: read to check-gate (#4951) v1.45.0 Will Murphy 2026-06-02 16:05:42 -04:00
  • a4fb2c0396
    perf(python): hoist name normalization regexp to package level (#4926) Matias Insaurralde 2026-06-02 03:17:43 +02:00
  • cf2ce643c3
    update helm classifier (#4922) witchcraze 2026-06-01 23:21:57 +09:00
  • 524a44b70d
    chore(deps): bump the actions-minor-patch group across 1 directory with 6 updates (#4946) dependabot[bot] 2026-05-29 16:35:04 +00:00
  • 4e86715c1a
    fix: improve julia classifier to find shared libs and beta versions (#4945) witchcraze 2026-05-30 01:05:46 +09:00
  • e8c6b7151e
    swap postgres signature check for rocky linux baseline rpm (#4941) Alex Goodman 2026-05-26 10:11:38 -04:00
  • 0fb8762f41
    fix: improve deno classifier (#4939) witchcraze 2026-05-26 00:58:10 +09:00
  • 58ddf74140
    chore(deps): bump the actions-minor-patch group across 2 directories with 2 updates (#4936) dependabot[bot] 2026-05-22 13:42:36 +00:00
  • b5d828ee14
    chore(deps): bump github.com/containerd/containerd/v2 (#4935) dependabot[bot] 2026-05-21 22:17:36 +00:00
  • 1c4394fed0
    fix: enhancement to java cataloger to consider .zap files as jar files (#4932) Doug Clarke 2026-05-21 15:24:38 -04:00
  • f5c1a0befc
    chore(deps): update anchore dependencies (#4821) anchore-oss-update-bot 2026-05-20 15:50:47 -04:00
  • b1287d45d8
    chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#4930) dependabot[bot] 2026-05-19 16:11:18 +00:00
  • d97216ff70
    Remediate audit (#4929) Alex Goodman 2026-05-18 15:01:37 -04:00
  • c09a009bda
    chore(deps): bump the actions-minor-patch group across 1 directory with 4 updates (#4927) dependabot[bot] 2026-05-18 16:13:54 +00:00
  • d61af0abab
    Port to go-make (#4923) Alex Goodman 2026-05-18 11:59:55 -04:00
  • 89cda82263
    chore(deps): update CPE dictionary index (#4925) anchore-oss-update-bot 2026-05-18 10:21:30 -04:00
  • ee6ace36d1
    chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (#4920) dependabot[bot] 2026-05-15 13:34:58 +00:00
  • e2e5e223ab
    feat: mysqld, ndbd, ndbmtd and ndb_mgmd classifier (#4907) witchcraze 2026-05-15 00:29:42 +09:00
  • 4579d11abc
    fix: detect compressed kernel modules (.ko.gz, .ko.xz, .ko.zst) (#4740) William Bates 2026-05-13 13:44:18 -04:00
  • dfde0974b0
    address reading archives into memory fix/compressed-kernel-module-detection Alex Goodman 2026-05-13 10:56:57 -04:00
  • 9f047fdf11
    fix: detect compressed kernel modules (.ko.gz, .ko.xz, .ko.zst) Will Bates 2026-04-03 21:47:37 -04:00
  • 07ae2ca08d
    chore(deps): update CPE dictionary index (#4909) anchore-oss-update-bot 2026-05-13 10:03:11 -04:00
  • 36969bdeff
    fix: Allow duplicates in Yarn "Berry" files (#4691) (#4838) Calum Leslie 2026-05-11 22:10:17 +01:00
  • dfb6011083
    pin and update fixture versions (#4913) Alex Goodman 2026-05-11 16:30:35 -04:00
  • 997a486e22
    use released shared workflow (#4914) Alex Goodman 2026-05-11 16:21:41 -04:00
  • 4f64fbc004
    chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#4911) dependabot[bot] 2026-05-11 16:25:44 +00:00
  • 87d6a288d7
    Tighten workflow permissions and update release shape (#4899) Alex Goodman 2026-05-08 17:16:31 -04:00
  • 20987d30d0
    chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (#4897) dependabot[bot] 2026-05-08 13:38:31 +00:00
  • e2007d9bf2
    feat: add aws-lc classifier (#4882) witchcraze 2026-05-07 05:43:34 +09:00
  • 4f0e32ab51
    binary classifier: detect elixir release-candidate versions (#4851) ChrisJr404 2026-05-06 11:14:09 -04:00
  • 605391114c
    add ingress-nginx classifier (#4857) witchcraze 2026-05-06 23:54:20 +09:00
  • 1caf243d29
    fix(source): treat exclude paths with trailing slash as directories (#4892) ChrisJr404 2026-05-06 10:51:41 -04:00
  • 48e91312e8
    fix(dotnet): align runtime CPEs with NVD (#4743) PGray 2026-05-06 14:07:49 +01:00
  • d81df67493
    fix(debian): only parse machine-readable copyright files with Format header (#4754) bahtyar 2026-05-06 21:02:27 +08:00
  • 47cda2b5ef
    chore(deps): bump the actions-minor-patch group across 2 directories with 5 updates (#4846) dependabot[bot] 2026-05-05 11:42:04 -04:00
  • ae711963d1
    fix: parse arbitrary equality python requirements (#4835) Rayan Salhab 2026-05-05 16:49:03 +03:00
  • f878197150
    chore: remove common workflows (#4881) Alex Goodman 2026-05-04 14:31:07 -04:00
  • 514efb03e0
    fix: prevent redis classifier from detecting valkey (#4619) witchcraze 2026-05-05 03:07:29 +09:00
  • 1e4f424f09
    chore(deps): update CPE dictionary index (#4831) anchore-oss-update-bot 2026-05-04 10:14:08 -04:00
  • b5f0877967
    fix: map "nuget" purl type to DotnetPkg in TypeByName (#4848) ChrisJr404 2026-05-04 08:51:19 -04:00
  • 8cb78ce40c
    fix: resolve yarn lock aliases to source package (#4836) v1.44.0 Rayan Salhab 2026-04-29 16:50:09 +03:00