mirror of
https://github.com/anchore/syft.git
synced 2026-02-12 10:36:45 +01:00
ba4f63099d
* add check for app update; fix ETUI error handling * validate user args * add goreleaser support * replace cgo dependencies (go-rpm) with go equivalents * add acceptance tests against build snapshot * add brew tap + acceptance test pipeline * add mac acceptance tests * fix compare makefile * fix mac acceptance tests * add release pipeline with wait checks * add token to release step * rm dir presenters int test * enforce dpkg to be non interactive Co-authored-by: Alfredo Deza <adeza@anchore.com> * pin brew formulae * pin skopeo to formulae url * only run acceptance tests Co-authored-by: Alfredo Deza <adeza@anchore.com>
7 lines
638 B
Plaintext
7 lines
638 B
Plaintext
# we should strive to not commit blobs to the repo and strive to keep the build process of how blobs are acquired in-repo.
|
|
# this blob is generated from imgbom/imgbom/catalogers/java/test-fixtures/java-builds , however, preserving the build process
|
|
# twice in the repo seems redundant (even via symlink). Given that the fixture is a few kilobytes in size, the build process is already
|
|
# captured, and integration tests should only be testing if jars can be discovered (not necessarily depth in java detection
|
|
# functionality), committing it seems like an acceptable exception.
|
|
!image-pkg-coverage/java/*.jar
|
|
!image-pkg-coverage/java/*.hpi |