syft/syft at 1981b249f1829277a49e0e19b83f4462053d463e - syft - Sa' Rocí Solutions

oss/syft

mirror of https://github.com/anchore/syft.git synced 2025-11-18 00:43:20 +01:00

History

fix: improve CPE and upstream generation logic for Alpine packages (#1567 )

* fix: improved CPE-generation logic for alpine packages

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: improved alpine upstream name generation

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: improve CPE vendor for alpine

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: python vendor CPE gen

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: alpine cpe gen logic

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: apk CPE update for nodejs-current

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: CPE update for python pip

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix: CPE update for some ruby packages

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

* fix linting

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

---------

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

2023-02-13 17:23:13 +00:00

artifact

bug: spdx checksum empty array; allow syft to generate SHA1 for spdx-tag-value documents (#1404 )

2022-12-20 00:10:35 +00:00

cpe

chore: refactor basic CPE functionality to its own package (#1436 )

2023-01-04 11:26:28 -05:00

event

fix: update attestation code to remove library dependencies and shellout for keyless flow (#1442 )

2023-01-12 17:22:05 +00:00

file

Speed up cataloging by replacing globs searching with index lookups (#1510 )