169 commits

Author	SHA1	Message	Date
Alex Goodman	bbff869499	Add matching by CPE (#40) ... * Commit just to share progress, needs to be squashed/fixed-up once working. Signed-off-by: Zach Hill <zach@anchore.com> * minor fixes * add cpe obj * add cpe matching * report cpe in search key * add verbose logging for matches; bump vulnscan-db ver * add dev profiler option; tweak logging * test support for CPE URI bindings addresses https://github.com/anchore/vulnscan/pull/40#discussion_r455389937 * rename nvdv2 to nvd * reduce scope of cpe matching to non-distro packages * normalize nil constraint strings Co-authored-by: Zach Hill <zach@anchore.com>	2020-07-16 15:12:19 -04:00
Alex Goodman	afb8597aa2	split vulnerability into index & metadata (#51)	2020-07-16 14:59:35 -04:00
Alex Goodman	12aeee3b92	add java matcher (#44)	2020-07-15 07:17:21 -04:00
Alex Goodman	2fa38cab3d	migrate to using siren-db lib (#48)	2020-07-14 10:21:20 -04:00
Alex Goodman	765d5dfb5b	add rpm version + constraint, rpmdb matching; refactor dpkg constraint	2020-07-07 09:22:14 -04:00
Alex Goodman	a004668056	add db archive import	2020-06-29 10:10:02 -04:00
Alex Goodman	92cf98ab12	sync vulnscan db changes	2020-06-28 07:22:27 -04:00
Alex Goodman	ce707a6f1a	fix testutils dependency	2020-06-22 14:42:14 -04:00
Alex Goodman	9c70953dfb	add curation of db file	2020-06-19 10:57:06 -04:00
Alfredo Deza	b484b85890	update dependencies ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2020-06-18 10:12:41 -04:00
Alex Goodman	7593c31028	add python matcher	2020-06-05 10:00:14 -04:00
Alex Goodman	1ca035363a	add gem matcher	2020-06-04 15:40:40 -04:00
Alex Goodman	d9c922218c	add store provider tests	2020-06-02 20:54:19 -04:00
Alex Goodman	88eecbd2de	add indirect dpkg source matching	2020-06-02 17:22:57 -04:00
Alex Goodman	75ceb1af2d	pin to imgbom@master	2020-06-01 10:50:34 -04:00
Alex Goodman	aacc624033	add FindVulnerability lib function, wire up main with matcher	2020-06-01 07:21:07 -04:00
Alex Goodman	e8e8f416d0	add version & version constraint support	2020-06-01 07:13:53 -04:00
Alex Goodman	02556fdd9c	add basic matching execution flow	2020-05-28 18:28:29 -04:00
Alex Goodman	3c6ae01619	initial project structure	2020-05-26 10:41:23 -04:00