Commit graph

1477 commits

Author SHA1 Message Date
Márk Sági-Kazár
ac65705dc2
Add automatic completion install to brew formula
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
2021-01-12 18:18:30 +01:00
Alex Goodman
6884715251
Merge pull request #224 from anchore/decouple-syft-objects
Decouple from syft objects where possible
2020-12-14 08:41:46 -05:00
Alex Goodman
45d3938046
do not require hashing of the DB file as validation on standard startup
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-14 07:55:55 -05:00
Alex Goodman
0699e6a6ca
add package provider abstraction and update json document input
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-14 07:55:54 -05:00
Alex Goodman
137be60f28
add grype pkg.Package adapter for syft pkg.Package and remove pkg.Catalog
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-14 07:55:54 -05:00
Alex Goodman
9128a8af61
Merge pull request #222 from anchore/fix-distro-namespaces
Fix distroNamespace mapping to only use major version for select distros
2020-12-08 14:08:41 -05:00
Alex Goodman
7da2a16eab
fix distroNamespace mapping to only use major version for select distros
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-08 14:01:15 -05:00
Alex Goodman
1a75295d70
Merge pull request #217 from anchore/bump-syft
Update syft from 0.8.1 to 0.9.2
2020-12-03 17:04:12 -05:00
Alex Goodman
7779e71b7e
update syft from v0.9.1 to v0.9.2
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-03 16:57:36 -05:00
Dan Luhring
159e168867
Update syft from 0.9.0 to 0.9.1
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-12-02 18:24:07 -05:00
Dan Luhring
4729f713a7
Update JSON presenter test golden files
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-12-02 17:40:11 -05:00
Dan Luhring
d78c665925
Update syft from 0.8.1 to 0.9.0
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-12-02 15:54:46 -05:00
Alex Goodman
b03cd13e76
Merge pull request #213 from anchore/remove-cpe-generation
Remove CPE generation (rely on static CPEa from syft instead)
2020-11-20 08:04:24 -05:00
Alex Goodman
627aa77842
remove CPE generation (rely on static CPES from syft instead)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-20 06:43:45 -05:00
Alex Goodman
90b44640c2
Merge pull request #211 from KeisukeYamashita/remove-powershell-description
Remove powershell description from completion command
2020-11-19 15:06:42 -05:00
KeisukeYamashita
62b55b5b32
Remove power shell description
Signed-off-by: KeisukeYamashita <19yamashita15@gmail.com>
2020-11-18 10:53:34 +09:00
Alex Goodman
f7dea48894
Merge pull request #208 from anchore/syft-bom-import
Add JSON document import
2020-11-17 18:03:02 -05:00
Alex Goodman
25d6ec6c79
add SBOM JSON document input from syft
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-17 17:55:24 -05:00
Alex Goodman
a494df7be4
Merge pull request #206 from anchore/bump-syft-v0.7.1
Bump syft from v0.5.1 to v0.7.1
2020-11-12 10:10:19 -05:00
Alex Goodman
4ed516e784
bump syft to v0.7.1 (with related fixes)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-12 10:02:40 -05:00
Alex Goodman
7fdbcf8a6c
add warn log level
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-12 10:02:40 -05:00
Dan Luhring
36a528a681
Merge pull request #205 from anchore/zip-release-asset
Add signed and notarized ZIP release asset
2020-11-12 08:45:37 -05:00
Dan Luhring
d7a323b0be
Add signed and notarized ZIP release asset
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-11 17:30:50 -05:00
Dan Luhring
08717dcfcc
Avoid Finder window flash during install
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-11 17:19:53 -05:00
Dan Luhring
cd56214ada
Merge pull request #201 from anchore/updates-to-mac-releases
Updates for macOS release process
2020-11-06 13:27:08 -05:00
Dan Luhring
9f9f396da6
Update README to account for change in macOS release
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-06 12:19:38 -05:00
Dan Luhring
627fd06d2d
Update install.sh to account for dmg-based macOS release asset
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-06 12:13:54 -05:00
Dan Luhring
25cbd9fe24
Use version instead of tag in DMG file name
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-06 11:12:37 -05:00
Dan Luhring
331dea3677
Remove darwin target from primary build entry (#199)
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-06 11:10:58 -05:00
Dan Luhring
111c9f8182
Merge pull request #195 from anchore/fix-acceptance-test-workflow
Syft version bump, and improvements to acceptance workflows
2020-11-05 13:42:23 -05:00
Dan Luhring
5d21595414
Update to Syft v0.5.1
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-05 13:11:11 -05:00
Dan Luhring
bf9cf38362
Add Slack notifications for acceptance test failures
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-05 12:49:33 -05:00
Dan Luhring
263da9e3a8
Add bootstrap step to acceptance workflow
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-05 09:55:23 -05:00
Dan Luhring
5725f26c04
Resolve security warning for macOS users (#194)
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-11-05 08:50:58 -05:00
Alex Goodman
50e9800594
update release gate checks
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-23 14:12:34 -04:00
Alex Goodman
f53caa7087
Merge pull request #193 from anchore/bump-syft-python-cataloger
Update python and javascript catalogers
2020-10-23 13:43:18 -04:00
Alex Goodman
2dcb017295
update python and javascript catalogers
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-23 11:34:18 -04:00
Dan Luhring
5f14775920
Fix errors in README (#188)
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-10-19 10:01:33 -04:00
Alex Goodman
090ec8aa0c
Merge pull request #187 from anchore/bump-syft
Incorporate package.json & gemspec catalogers
2020-10-19 08:31:27 -04:00
Alex Goodman
da614aa4ac
bump syft version (add package.json, rename bundler to ruby)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-19 08:02:13 -04:00
Alex Goodman
ed27c7fcfa
Merge pull request #185 from VinodAnandan/main
Enable CodeQL Security Scan
2020-10-16 19:22:19 -04:00
Vinod Anandan
fa5e7abe38 Enable CodeQL Security Scan
https://github.blog/2020-09-30-code-scanning-is-now-available/

Signed-off-by: Vinod Anandan <vinod.anandan@jpmorgan.com>
2020-10-17 00:11:09 +01:00
Alex Goodman
86015454dc
fix grype version verbiage
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-15 11:51:14 -04:00
Alex Goodman
d26eff6c1d
remove greeter action since it is broken for forked PRs (#186)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-15 10:20:00 -04:00
Alex Goodman
9d06b57a0e
incorporate gemspec cataloger (#177)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-09 11:09:42 -04:00
Alex Goodman
e7ee54a81a
update install script arguments for proper argument processing (#181)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-09 11:08:26 -04:00
Robert Prince
9363f27627
Add first issue/PR welcome message action (#168)
* Add first issue/PR welcome message action

Signed-off-by: Robert Prince <robert.prince@anchore.com>

* update first-pr-issue message with a simple greeting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* simplify first message to a greeting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-09 10:20:08 -04:00
Graham Siener
4ca218733b
Edit typo in readme (#179)
Signed-off-by: Graham Siener <siener@gmail.com>
2020-10-09 10:10:10 -04:00
Alex Goodman
b787a69520
run tests on fork PRs (#180)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-10-09 07:45:09 -04:00
Alfredo Deza
e2515fa9f0
Merge pull request #178 from anchore/non-prerelase
docs: update the readme to remove pre-release note
2020-10-08 17:03:51 -04:00