Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 06:34:13 +00:00
Code Issues Projects Releases Packages Wiki Activity
grype/go.mod

46 lines
1.9 KiB
Modula-2
Raw Normal View History

rename to grype
2020-07-24 01:29:05 +00:00
module github.com/anchore/grype
initial project structure
2020-05-26 14:37:28 +00:00
bump go.mod minimum required go version Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-04-16 12:55:03 +00:00
go 1.16
initial project structure
2020-05-26 14:37:28 +00:00
require (
update syft and stereoscope to pull in registry source Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-04-13 20:08:02 +00:00
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
initial project structure
2020-05-26 14:37:28 +00:00
github.com/adrg/xdg v0.2.1
always return a cleanup function from scope (#166) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-09-25 20:29:15 +00:00
github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04
Match against Alpine source packages (#407) * Update go-version package and add test This is being updated due to an issue that was encountered in the lessThanEqual constraint in go-version: https://github.com/anchore/go-version/pull/2. Was disovered while adding tests for apk origin package matching Signed-off-by: Zane Burstein <zane.burstein@anchore.com> * Added matching with source package for apk This change allows grype to match with a packages source package for apk. Adds APKMetadata with OriginPackage, new matching logic in apk matchers, and tests Signed-off-by: Zane Burstein <zane.burstein@anchore.com>
2021-09-09 11:42:11 +00:00
github.com/anchore/go-version v1.2.2-0.20210903204242-51efa5b487c4
Support for private certificate authorities during DB curation (#494) * Add injectable HTTP client to file getter Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * WIP: Map config for custom CA certs Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * update curator and add tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add TLS helper scripts Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove grype-db local mod edit Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * tidy go modules Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use ssl.context over deprecated fn Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * disallow tls 1 and 1.1 Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * suppress non-archive sources for fetch-to-dir capability Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure DB load failure does not panic Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * address review comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-22 16:59:38 +00:00
github.com/anchore/grype-db v0.0.0-20211119195714-911ff7162dc6
pull in space suffix fix (#475) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-25 14:14:37 +00:00
github.com/anchore/stereoscope v0.0.0-20211024152658-003132a67c10
Bump syft version => v0.30.1 (#498) * update syft version with correct arguments Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * bump integration tests with new presenter format Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update integration tests to remove php-composer failure Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
2021-11-15 22:11:56 +00:00
github.com/anchore/syft v0.30.1
Feature: Specifying ignore rules for vulnerability matches (#430) * Preliminary implementation of ignore rules Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Support ignoring matches by package type Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add tests for ignore functionality Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add documentation for ignore rules and clean up README Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add test for glob location matching Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2021-09-29 19:44:36 +00:00
github.com/bmatcuk/doublestar/v2 v2.0.4
Shell completion via Cobra utility (#149) * Add completion script, ValidArgsFunction to root command to list docker images using docker go sdk, and update README Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com> Remove support for zsh and powershell completion, as it doesnt work out of the box, and currently dont have a way to test powershell. Reported an issue with Cobra ZSH completion script generation as there are 2 bugs in it AFIACT Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com> * add zsh with cobra master branch Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2020-09-14 16:06:29 +00:00
github.com/docker/docker v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
Add ETUI (#77) * add base syft UI elements * add etui with shared ui elements * allow for concurrent download DB and fetch/catalog image
2020-07-30 23:06:27 +00:00
github.com/dustin/go-humanize v1.0.0
remove CPE generation (rely on static CPES from syft instead) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-19 17:39:35 +00:00
github.com/facebookincubator/nvdtools v0.1.4
Fix hang when running as a subprocess (#484) * use named pipe bit on stdin as indicator for piped input Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure stdin is ignored when the CLI hints are present Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add CLI test to cover subprocess integration behavior Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * added test case for java regression Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove extra line in makefile Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-29 14:51:58 +00:00
github.com/gabriel-vasile/mimetype v1.3.0
Add matching by CPE (#40) * Commit just to share progress, needs to be squashed/fixed-up once working. Signed-off-by: Zach Hill <zach@anchore.com> * minor fixes * add cpe obj * add cpe matching * report cpe in search key * add verbose logging for matches; bump vulnscan-db ver * add dev profiler option; tweak logging * test support for CPE URI bindings addresses https://github.com/anchore/vulnscan/pull/40#discussion_r455389937 * rename nvdv2 to nvd * reduce scope of cpe matching to non-distro packages * normalize nil constraint strings Co-authored-by: Zach Hill <zach@anchore.com>
2020-07-16 19:12:19 +00:00
github.com/go-test/deep v1.0.7
Feature: Specifying ignore rules for vulnerability matches (#430) * Preliminary implementation of ignore rules Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Support ignoring matches by package type Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add tests for ignore functionality Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add documentation for ignore rules and clean up README Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Add test for glob location matching Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2021-09-29 19:44:36 +00:00
github.com/google/go-cmp v0.4.1
Add windows support (#464) * update grype to compile windows Signed-off-by: spiffcs <christopher.phillips@anchore.com> Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update go mod with new stereoscope Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update build comments Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * small build tags Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * add goreleaser windows Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * bump syft version Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update tests Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update test images to use newest pinned golang Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
2021-10-22 17:46:56 +00:00
github.com/google/uuid v1.2.0
Upgrade config, UI, and command package patterns (#406) * split and upgrade config processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * upgrade UI organization Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * expose logger writter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add (unused) signal handler Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add (unused) event loop abstraction Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update aux commands to use Cobra RunE over Run Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * upgrade root command to use new event loop and signal handler Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update CLI test to account for config representation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update dependencies + fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * decompose application config parse func + add missing config struct tags Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore unparam lint exclusion for registry config Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-01 17:03:50 +00:00
github.com/gookit/color v1.4.2
Support for private certificate authorities during DB curation (#494) * Add injectable HTTP client to file getter Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * WIP: Map config for custom CA certs Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * update curator and add tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add TLS helper scripts Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove grype-db local mod edit Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * tidy go modules Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use ssl.context over deprecated fn Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * disallow tls 1 and 1.1 Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * suppress non-archive sources for fetch-to-dir capability Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure DB load failure does not panic Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * address review comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-22 16:59:38 +00:00
github.com/hashicorp/go-cleanhttp v0.5.2
github.com/hashicorp/go-getter v1.5.9
Add template presenter Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2021-03-30 17:15:57 +00:00
github.com/hashicorp/go-multierror v1.1.0
add indirect dpkg source matching
2020-06-02 21:21:29 +00:00
github.com/jinzhu/copier v0.0.0-20190924061706-b57f9002281a
Add APK version constraint parsing (#455) Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
2021-10-18 17:27:02 +00:00
github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f
add version & version constraint support
2020-06-01 11:13:53 +00:00
github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d
initial project structure
2020-05-26 14:37:28 +00:00
github.com/mitchellh/go-homedir v1.1.0
Add default table presenter (#59) * add default table presenter * compress table output * fix table presenter found-by to use only search key
2020-07-25 15:38:08 +00:00
github.com/olekukonko/tablewriter v0.0.4
Upgrade config, UI, and command package patterns (#406) * split and upgrade config processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * upgrade UI organization Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * expose logger writter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add (unused) signal handler Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add (unused) event loop abstraction Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update aux commands to use Cobra RunE over Run Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * upgrade root command to use new event loop and signal handler Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update CLI test to account for config representation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update dependencies + fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * decompose application config parse func + add missing config struct tags Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore unparam lint exclusion for registry config Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-01 17:03:50 +00:00
github.com/pkg/profile v1.6.0
fix distroNamespace mapping to only use major version for select distros Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-08 18:38:43 +00:00
github.com/scylladb/go-set v1.0.2
fix testutils dependency
2020-06-19 15:12:00 +00:00
github.com/sergi/go-diff v1.1.0
Add windows support (#464) * update grype to compile windows Signed-off-by: spiffcs <christopher.phillips@anchore.com> Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update go mod with new stereoscope Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update build comments Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * small build tags Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * add goreleaser windows Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * bump syft version Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update tests Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update test images to use newest pinned golang Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
2021-10-22 17:46:56 +00:00
github.com/sirupsen/logrus v1.8.1
migrate to using siren-db lib (#48)
2020-07-14 14:21:20 +00:00
github.com/spf13/afero v1.3.2
Shell completion via Cobra utility (#149) * Add completion script, ValidArgsFunction to root command to list docker images using docker go sdk, and update README Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com> Remove support for zsh and powershell completion, as it doesnt work out of the box, and currently dont have a way to test powershell. Reported an issue with Cobra ZSH completion script generation as there are 2 bugs in it AFIACT Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com> * add zsh with cobra master branch Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2020-09-14 16:06:29 +00:00
github.com/spf13/cobra v1.0.1-0.20200909172742-8a63648dd905
Upgrade config, UI, and command package patterns (#406) * split and upgrade config processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * upgrade UI organization Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * expose logger writter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add (unused) signal handler Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add (unused) event loop abstraction Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update aux commands to use Cobra RunE over Run Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * upgrade root command to use new event loop and signal handler Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update CLI test to account for config representation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update dependencies + fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * decompose application config parse func + add missing config struct tags Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore unparam lint exclusion for registry config Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-01 17:03:50 +00:00
github.com/spf13/pflag v1.0.5
initial project structure
2020-05-26 14:37:28 +00:00
github.com/spf13/viper v1.7.0
Update syft to v0.18.0 (#351) Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2021-06-29 21:34:26 +00:00
github.com/stretchr/testify v1.7.0
github.com/wagoodman/go-partybus v0.0.0-20210627031916-db1f5573bbc5
fix spaces alignment on etui Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-07 22:19:25 +00:00
github.com/wagoodman/go-progress v0.0.0-20200807221327-51d465df1451
Add ETUI (#77) * add base syft UI elements * add etui with shared ui elements * allow for concurrent download DB and fetch/catalog image
2020-07-30 23:06:27 +00:00
github.com/wagoodman/jotframe v0.0.0-20200730190914-3517092dd163
replace zap logger with logrus (#80)
2020-08-01 15:58:10 +00:00
github.com/x-cray/logrus-prefixed-formatter v0.5.2
dependencies: bump to latest syft that includes setup.py support Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-17 21:24:43 +00:00
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9
Add windows support (#464) * update grype to compile windows Signed-off-by: spiffcs <christopher.phillips@anchore.com> Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update go mod with new stereoscope Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update build comments Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * small build tags Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * add goreleaser windows Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * bump syft version Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update tests Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * update test images to use newest pinned golang Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com>
2021-10-22 17:46:56 +00:00
gopkg.in/yaml.v2 v2.4.0
initial project structure
2020-05-26 14:37:28 +00:00
)
Reference in a new issue Copy permalink