Christopher Phillips 3f14eb7eaf

fix: protect against traversal in file source ...

Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

2025-10-13 12:11:59 -04:00

..

bus

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

cache

Remove mitchellh dependencies (#3748)

2025-03-20 10:19:19 -04:00

cmptest

order locations by container layer order (#3858)

2025-05-13 00:02:07 -04:00

evidence

Location order on packages should consider evidence annotations when sorting (#3720)

2025-03-11 10:34:37 -04:00

file

fix: protect against traversal in file source

2025-10-13 12:11:59 -04:00

licenses

detect license ID from full text when incidentally provided as a value (#3876)

2025-05-13 16:37:18 -04:00

log

chore: update CLI to CLIO (#2001)

2023-08-29 15:52:26 -04:00

mimetype

internalize format helpers (#2543)

2024-01-26 12:16:26 -05:00

redact

chore: update CLI to CLIO (#2001)

2023-08-29 15:52:26 -04:00

relationship

fix(relationship): favor real paths over symlinks for ownership by file (#3923)

2025-05-23 14:33:19 -04:00

sbomsync

feat: add relationships to ELF package discovery (#2715)

2024-05-09 13:53:59 -04:00

spdxlicense

feat(cataloger): add a terraform provider cataloger (#3378)

2025-01-21 14:44:54 -05:00

task

Merge remote-tracking branch 'origin' into upgrade-deprecated-archiver

2025-06-29 20:36:17 +03:00

unknown

fix: reduce warn levels to debug for non-actionable errors (#3645)

2025-02-07 13:22:55 -05:00

buffered_seek_reader_test.go

Split the sbom.Format interface by encode and decode use cases (#2186)

2023-10-25 13:43:06 +00:00

buffered_seek_reader.go

Split the sbom.Format interface by encode and decode use cases (#2186)

2023-10-25 13:43:06 +00:00

constants.go

add PE binary cataloger (#3911)

2025-05-19 14:17:09 -04:00

docs.go

improve doc comments

2020-11-17 12:37:13 -05:00

err_helper.go

suppress file already closed errors (#3695)

2025-02-27 21:52:50 +00:00

input.go

510 - SBOM attestation stdout (#785)

2022-02-22 21:45:12 -05:00

regex_helpers_test.go

Use reader when scanning for package versions over reading entire binary into memory (#3558)

2025-01-02 22:12:37 +00:00

regex_helpers.go

Use reader when scanning for package versions over reading entire binary into memory (#3558)

2025-01-02 22:12:37 +00:00

set_test.go

Add relationships for python poetry packages (#2906)

2024-06-04 20:00:05 +00:00

set.go

Add relationships for python poetry packages (#2906)

2024-06-04 20:00:05 +00:00

string_helpers_test.go

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

string_helpers.go

Add ability to scan snaps (as a source) (#3929)

2025-06-25 16:53:35 -04:00

tprint.go

add analysis coordination (with dummy analyzer)

2020-05-18 11:59:33 -04:00