Weston Steimel fbda21f4f4

fix: further improvements to CPE generation for apk packages (#1623) ...

* fix: consider upstream logic during apk cpe gen
* fix: correct apk CPE for go
* fix: correct apk CPE for ruby
* fix: correct apk CPE for bazel
* fix: correct apk CPE for clang
* fix: correct apk CPE for openjdk
* fix: correct apk CPE for glibc
* fix: correct apk CPE for gli
* fix: correct apk CPE for bas
* fix: correct apk CPE for alsa-lib
* fix: correct apk CPE for alsa
* fix: determine apk cpe vendor from known URLs
* fix: add more url prefix->vendor mappings for apk
* refactor: allow reuse of vendor by url prefix logic
* feat: extract username as vendor candidate from github/gitlab

Signed-off-by: Weston Steimel <weston.steimel@anchore.com>

2023-02-27 13:16:04 -05:00

..

artifact

bug: spdx checksum empty array; allow syft to generate SHA1 for spdx-tag-value documents (#1404)

2022-12-20 00:10:35 +00:00

cpe

chore: refactor basic CPE functionality to its own package (#1436)

2023-01-04 11:26:28 -05:00

event

fix: update attestation code to remove library dependencies and shellout for keyless flow (#1442)

2023-01-12 17:22:05 +00:00

file

Speed up cataloging by replacing globs searching with index lookups (#1510)

2023-02-09 16:19:47 +00:00

formats

fix: merging of binary packages (#1583)

2023-02-22 12:03:15 -05:00

linux

chore: add unit test for wolfi os release identification (#1340)

2022-11-14 18:57:31 -05:00

pkg

fix: further improvements to CPE generation for apk packages (#1623)

2023-02-27 13:16:04 -05:00

sbom

feat: Allow specific versions of formats to be specified (#1543)

2023-02-07 10:40:43 -05:00

source

fix: merging of binary packages (#1583)

2023-02-22 12:03:15 -05:00

encode_decode.go

SBOM cataloger (#1029)

2022-11-16 14:11:45 -05:00

formats.go

feat: Allow specific versions of formats to be specified (#1543)

2023-02-07 10:40:43 -05:00

lib.go

Parallel package catalog processing (#1355)

2023-01-11 15:18:02 -05:00