Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 06:34:13 +00:00
Code Issues Projects Releases Packages Wiki Activity
1477 commits 36 branches 157 tags 14 MiB
Commit graph

1477 commits

This branch
This branch
All branches
Author SHA1 Message Date
Alfredo Deza
46f614d912 tests: json presenter output updated 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
5428cc25af presenter: json to use a string for the search key, not a map 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
2d7af0b10a matchers: use strings for SearchKeys 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
87c267f7ad matchers: cpe should prevent duplicates by not adding already present CPEs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alex Goodman
b8a4183fc2 vuln matches should include search matches 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-25 11:53:23 -04:00
Alex Goodman
651751f698
simplify version cmd + add json option (#139) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-25 11:51:24 -04:00
Zach Hill
be6a7ea4f5
Update README.md to highlight supported distros and languages (#135) 
* Update README.md to highlight supported distros and languages

Same content, just bullet points instead of a single item for each type. Just visually easier to identify if you're looking for this info.

Signed-off-by: Zach Hill <zach@anchore.com>

* incorporated README feature comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-24 12:27:07 -04:00
Alfredo Deza
8757b470cc
Merge pull request #136 from anchore/issue-py-setup 
Match on `setup.py` files
 2020-08-18 12:27:42 -04:00
Alfredo Deza
b0c6dc2fb1 test: update scope.FilesByGlob, it is now part of Resolver 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-18 11:31:07 -04:00
Alfredo Deza
b8e9431f89 dependencies: bump to latest syft that includes setup.py support 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 17:24:43 -04:00
Alfredo Deza
618672a014 matcher: use pkg.PythonSetupPkg as well 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 12:05:00 -04:00
Alex Goodman
3836626031
add demo gif (#134) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-14 15:03:29 -04:00
Dan Luhring
d3987d7e3e
Update modules (#127) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-13 14:20:53 -04:00
Alfredo Deza
66b2512780
Merge pull request #124 from anchore/issue-91 
Explicitly use PythonFormat to address PEP440 rules
 2020-08-13 10:09:36 -04:00
Alfredo Deza
b237bf985b test: fuzzyConstraint needs a hint now, update tests 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
75b3537781 version: use hint if provided 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
84684f2fa8 test: add examples of crazy PEP440 rules 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
0399e08207 version: use the new PythonFormat 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
41147df494 test: update integration validation for python packages with Python format 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alex Goodman
0618d1dbeb
github is picky about the issue template file extension 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:12:43 -04:00
Alex Goodman
d0b03fad13
add slack links to issue selection (#123) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:08:24 -04:00
Alfredo Deza
a34bf6e47c
Merge pull request #122 from nwl/readme-fixes 
Replaced stray syft entries with grype
 2020-08-11 13:14:52 -04:00
Neil Levine
f2ce94b614 Replaced stray syft entries with grype 
Signed-off-by: Neil Levine <levine@yoyo.org>
 2020-08-11 10:10:24 -07:00
Alfredo Deza
93e39a705f
Merge pull request #120 from anchore/readme-install-fix 
docs: emphasize installation methods before features and getting started
 2020-08-11 11:00:38 -04:00
Alfredo Deza
2caa0d2fe5 docs: emphasize installation methods before features and getting started 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-11 10:54:06 -04:00
Alex Goodman
89a6201555
Disable prerelease version update check (#118) 
* disable prerelease version update check

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use prerelease flag as source of truth for user notifications

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-11 09:54:09 -04:00
Ross Turk
12b2296374
Add future ideas + beta warning to README (#114) 
Signed-off-by: Ross Turk <ross@rossturk.com>
 2020-08-11 07:07:44 -04:00
Dan Luhring
8052fa644d
Update installation method (#117) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 19:29:35 -04:00
Alex Goodman
cbd6060652
Add installer script + brew tap (#116) 
* add installer script + brew tap

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use correct token on release

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 18:57:03 -04:00
Dan Luhring
457cd297ec
Add badges (#115) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 16:46:02 -04:00
Dan Luhring
219d8bcf0f
Use warn instead of error for packages with no matchers (#113) 
* Add warn method to logging system

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Move from error to warn for no matcher scenario

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 16:03:12 -04:00
Alex Goodman
50d7251a0b
add issue templates (#112) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-08-10 14:39:49 -04:00
Alfredo Deza
4596701956
Merge pull request #110 from anchore/issue-35 
docs: add contributing guidelines
 2020-08-10 14:06:36 -04:00
Alfredo Deza
9ece1f5614 docs: add contributing guidelines 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-10 12:22:46 -04:00
Alex Goodman
56b9576a19
Add inline-comparison as acceptance test (#106) 
* add inline-compare as acceptance tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* improve RPM matching with source indirection matching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments to compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* clean inline-compare image test names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump syft version to get rpm field enhancements

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 11:03:48 -04:00
Alex Goodman
f98e3cdf90
replace search key from table with severity (#107) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 10:24:29 -04:00
Dan Luhring
37ceb170e4
Add shell completion script (#109) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 09:31:09 -04:00
Dan Luhring
2ccdefd007
Add poetry to package types (#108) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 08:55:39 -04:00
Alex Goodman
30d72dd476
fix spaces alignment on etui 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 18:19:25 -04:00
Ross Turk
c1fdaba363
Adding additional detail to README (#103) 
* Adding additional detail to README

Signed-off-by: Ross Turk <ross@rossturk.com>

* Addressing comments in #103

Signed-off-by: Ross Turk <ross@rossturk.com>

* remove profiling from config options

Signed-off-by: Ross Turk <ross@rossturk.com>
 2020-08-07 15:56:55 -04:00
Alex Goodman
f1ad989c9b
replace master with main (#104) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 13:27:04 -04:00
Alex Goodman
6de7e4030d
finalize the json output (no schema yet) (#102) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 13:05:58 -04:00
Alfredo Deza
76ff9737db
Merge pull request #99 from anchore/issue-18 
Add Alpine (APK) matcher
 2020-08-07 13:04:07 -04:00
Alfredo Deza
5d057db5ec cpe: update tests to match new ANY in product name 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-07 09:44:40 -04:00
Alfredo Deza
d8da43b410 test: update integration tests for alpine 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-07 09:44:40 -04:00
Alfredo Deza
e4689c65de matcher: add apk matcher unit tests 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 16:17:17 -04:00
Alfredo Deza
44767fc2fb result: add a Count() helper method 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 16:17:17 -04:00
Alex Goodman
4476fc9888 broaden cpe matcher + modify alpine matcher 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 16:17:17 -04:00
Alfredo Deza
a9bf268abc integration tests for corner case 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 15:58:42 -04:00
Alfredo Deza
cff46b8443 add apk to controller 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 15:58:42 -04:00