Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 14:44:12 +00:00
Code Issues Projects Releases Packages Wiki Activity
188 commits 36 branches 157 tags 14 MiB
Commit graph

188 commits

This branch
This branch
All branches
Author SHA1 Message Date
Alex Goodman
1338850a8e
Add fixed-in-version to the presenters (#147) 
* add fix-in-version to the json and table presenters

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* incorporate grype-db fixed-in updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-09 12:55:22 -04:00
Alex Goodman
bd50ffc585
Change search key json output to a map (#146) 
* change search key json output to a map

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add documentation around the match object

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-08 11:23:29 -04:00
Alfredo Deza
c0efed5027
Merge pull request #143 from anchore/issue-39 
cyclonedx presenter
 2020-08-31 15:42:55 -04:00
Alfredo Deza
c7689556be presenter: cyclonedx tests 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-31 15:40:27 -04:00
Alfredo Deza
8fc7efd464 result: add a helper to get packages by ID 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-31 15:24:09 -04:00
Alfredo Deza
444b191404 presenter: set the options to hook CycloneDX output 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-31 15:24:09 -04:00
Alfredo Deza
48c3c2ab35 presenter: add a cyclonedx presenter 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-31 15:24:09 -04:00
Alfredo Deza
8e8ad489f9 dependencies: update to latest syft and include uuid 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-28 13:38:56 -04:00
Alfredo Deza
b77e023be8
Merge pull request #137 from anchore/issue-94 
Prevent duplicates, expand on matching information
 2020-08-25 13:58:34 -04:00
Alfredo Deza
d2949a2ddd matcher: add duplicate to demonstrate they don't show up 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 13:26:38 -04:00
Alfredo Deza
89f8ac49b9 test: update integration to match new SearchMatches 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
46f614d912 tests: json presenter output updated 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
5428cc25af presenter: json to use a string for the search key, not a map 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
2d7af0b10a matchers: use strings for SearchKeys 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
87c267f7ad matchers: cpe should prevent duplicates by not adding already present CPEs 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alex Goodman
b8a4183fc2 vuln matches should include search matches 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-25 11:53:23 -04:00
Alex Goodman
651751f698
simplify version cmd + add json option (#139) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-25 11:51:24 -04:00
Zach Hill
be6a7ea4f5
Update README.md to highlight supported distros and languages (#135) 
* Update README.md to highlight supported distros and languages

Same content, just bullet points instead of a single item for each type. Just visually easier to identify if you're looking for this info.

Signed-off-by: Zach Hill <zach@anchore.com>

* incorporated README feature comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-24 12:27:07 -04:00
Alfredo Deza
8757b470cc
Merge pull request #136 from anchore/issue-py-setup 
Match on `setup.py` files
 2020-08-18 12:27:42 -04:00
Alfredo Deza
b0c6dc2fb1 test: update scope.FilesByGlob, it is now part of Resolver 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-18 11:31:07 -04:00
Alfredo Deza
b8e9431f89 dependencies: bump to latest syft that includes setup.py support 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 17:24:43 -04:00
Alfredo Deza
618672a014 matcher: use pkg.PythonSetupPkg as well 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-17 12:05:00 -04:00
Alex Goodman
3836626031
add demo gif (#134) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-14 15:03:29 -04:00
Dan Luhring
d3987d7e3e
Update modules (#127) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-13 14:20:53 -04:00
Alfredo Deza
66b2512780
Merge pull request #124 from anchore/issue-91 
Explicitly use PythonFormat to address PEP440 rules
 2020-08-13 10:09:36 -04:00
Alfredo Deza
b237bf985b test: fuzzyConstraint needs a hint now, update tests 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
75b3537781 version: use hint if provided 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
84684f2fa8 test: add examples of crazy PEP440 rules 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
0399e08207 version: use the new PythonFormat 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alfredo Deza
41147df494 test: update integration validation for python packages with Python format 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alex Goodman
0618d1dbeb
github is picky about the issue template file extension 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:12:43 -04:00
Alex Goodman
d0b03fad13
add slack links to issue selection (#123) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-12 11:08:24 -04:00
Alfredo Deza
a34bf6e47c
Merge pull request #122 from nwl/readme-fixes 
Replaced stray syft entries with grype
 2020-08-11 13:14:52 -04:00
Neil Levine
f2ce94b614 Replaced stray syft entries with grype 
Signed-off-by: Neil Levine <levine@yoyo.org>
 2020-08-11 10:10:24 -07:00
Alfredo Deza
93e39a705f
Merge pull request #120 from anchore/readme-install-fix 
docs: emphasize installation methods before features and getting started
 2020-08-11 11:00:38 -04:00
Alfredo Deza
2caa0d2fe5 docs: emphasize installation methods before features and getting started 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-11 10:54:06 -04:00
Alex Goodman
89a6201555
Disable prerelease version update check (#118) 
* disable prerelease version update check

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use prerelease flag as source of truth for user notifications

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-11 09:54:09 -04:00
Ross Turk
12b2296374
Add future ideas + beta warning to README (#114) 
Signed-off-by: Ross Turk <ross@rossturk.com>
 2020-08-11 07:07:44 -04:00
Dan Luhring
8052fa644d
Update installation method (#117) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 19:29:35 -04:00
Alex Goodman
cbd6060652
Add installer script + brew tap (#116) 
* add installer script + brew tap

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use correct token on release

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 18:57:03 -04:00
Dan Luhring
457cd297ec
Add badges (#115) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 16:46:02 -04:00
Dan Luhring
219d8bcf0f
Use warn instead of error for packages with no matchers (#113) 
* Add warn method to logging system

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Move from error to warn for no matcher scenario

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 16:03:12 -04:00
Alex Goodman
50d7251a0b
add issue templates (#112) 
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
 2020-08-10 14:39:49 -04:00
Alfredo Deza
4596701956
Merge pull request #110 from anchore/issue-35 
docs: add contributing guidelines
 2020-08-10 14:06:36 -04:00
Alfredo Deza
9ece1f5614 docs: add contributing guidelines 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-10 12:22:46 -04:00
Alex Goodman
56b9576a19
Add inline-comparison as acceptance test (#106) 
* add inline-compare as acceptance tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* improve RPM matching with source indirection matching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments to compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* clean inline-compare image test names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump syft version to get rpm field enhancements

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 11:03:48 -04:00
Alex Goodman
f98e3cdf90
replace search key from table with severity (#107) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 10:24:29 -04:00
Dan Luhring
37ceb170e4
Add shell completion script (#109) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 09:31:09 -04:00
Dan Luhring
2ccdefd007
Add poetry to package types (#108) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-10 08:55:39 -04:00
Alex Goodman
30d72dd476
fix spaces alignment on etui 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-07 18:19:25 -04:00