Christopher Phillips 3326ae44fa

Merge branch 'main' into 4184-gguf-parser ...

* main:
  chore(deps): update tools to latest versions (#4302)
  chore(deps): bump github.com/github/go-spdx/v2 from 2.3.3 to 2.3.4 (#4301)
  chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 (#4299)
  support universal (fat) mach-o binary files (#4278)
  chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4296)
  chore(deps): bump anchore/sbom-action from 0.20.7 to 0.20.8 (#4297)
  convert posix path back to windows (#4285)
  Remove duplicate image source providers (#4289)
  chore(deps): bump anchore/sbom-action from 0.20.6 to 0.20.7 (#4293)
  feat: add option to fetch remote licenses for pnpm-lock.yaml files (#4286)
  Add PDM parser (#4234)
  chore(deps): update tools to latest versions (#4291)
  fix: panic during java archive maven resolution (#4290)
  Extract zip archive with multiple entries (#4283)
  chore: update to use old configuration on new cosign (#4287)
  chore(deps): update anchore dependencies (#4282)
  chore(deps): bump github.com/mholt/archives from 0.1.3 to 0.1.5 (#4280)
  add docs to configs (#4281)

2025-10-22 13:21:59 -04:00

..

bus

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

cache

docs: Fix typos and linguistic errors in documentation (#4257)

2025-10-06 14:22:22 +00:00

cmptest

order locations by container layer order (#3858)

2025-05-13 00:02:07 -04:00

evidence

Location order on packages should consider evidence annotations when sorting (#3720)

2025-03-11 10:34:37 -04:00

file

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

jsonschema

migrate json schema generation (#4270)

2025-10-10 14:16:28 +00:00

licenses

detect license ID from full text when incidentally provided as a value (#3876)

2025-05-13 16:37:18 -04:00

log

chore: update CLI to CLIO (#2001)

2023-08-29 15:52:26 -04:00

mimetype

internalize format helpers (#2543)

2024-01-26 12:16:26 -05:00

os

feat: RHEL EUS detection (#4023)

2025-07-07 14:11:20 +00:00

packagemetadata

Merge branch 'main' into 4184-gguf-parser

2025-10-22 13:21:59 -04:00

redact

chore: update CLI to CLIO (#2001)

2023-08-29 15:52:26 -04:00

relationship

fix(relationship): favor real paths over symlinks for ownership by file (#3923)

2025-05-23 14:33:19 -04:00

sbomsync

feat: add relationships to ELF package discovery (#2715)

2024-05-09 13:53:59 -04:00

sourcemetadata

add docs to configs (#4281)

2025-10-14 13:58:31 -04:00

spdxlicense

feat: update syft license construction to be able to look up by URL (#4132)

2025-08-12 14:30:32 -04:00

task

chore: refactor to use gguf-parser-go; 50mb limit

2025-10-22 02:37:01 -04:00

unknown

fix: reduce warn levels to debug for non-actionable errors (#3645)

2025-02-07 13:22:55 -05:00

buffered_seek_reader_test.go

Split the sbom.Format interface by encode and decode use cases (#2186)

2023-10-25 13:43:06 +00:00

buffered_seek_reader.go

Split the sbom.Format interface by encode and decode use cases (#2186)

2023-10-25 13:43:06 +00:00

constants.go

Add PDM parser (#4234)

2025-10-16 08:50:44 -04:00

docs.go

improve doc comments

2020-11-17 12:37:13 -05:00

err_helper.go

suppress file already closed errors (#3695)

2025-02-27 21:52:50 +00:00

generate.go

migrate json schema generation (#4270)

2025-10-10 14:16:28 +00:00

input.go

510 - SBOM attestation stdout (#785)

2022-02-22 21:45:12 -05:00

regex_helpers_test.go

Use reader when scanning for package versions over reading entire binary into memory (#3558)

2025-01-02 22:12:37 +00:00

regex_helpers.go

fix: align binary java detection with jvm cataloger + support IBM (#4046)

2025-07-22 12:06:32 -04:00

set_test.go

Add relationships for python poetry packages (#2906)

2024-06-04 20:00:05 +00:00

set.go

Add relationships for python poetry packages (#2906)

2024-06-04 20:00:05 +00:00

string_helpers_test.go

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

string_helpers.go

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

tprint.go

add analysis coordination (with dummy analyzer)

2020-05-18 11:59:33 -04:00