Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 14:44:12 +00:00
Code Issues Projects Releases Packages Wiki Activity
424 commits 36 branches 157 tags 14 MiB
Commit graph

43 commits

Author SHA1 Message Date
Alex Goodman
9c63cfdcf4
remove v3 staging db references from test config 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-01 16:56:25 -04:00
Alex Goodman
13e647d670
rename matchDetails.matchedOn to matchDetails.found 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-01 15:19:47 -04:00
Alex Goodman
ed054f2038
incorporate multiple match details to accomodate more accurate reported CPE matching info 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-30 11:51:14 -04:00
Alex Goodman
6db86bfea8
rename SearchKey variable to SearchedBy 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-27 16:05:12 -04:00
Alex Goodman
d8aedf8117 use test config for schema validations 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-26 12:30:21 -04:00
Alex Goodman
f99da01100 add staging update-url to cli tests + add pre-release check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-26 12:30:21 -04:00
Dan Luhring
8da410c578
Allow registry auth config without authority value (#322) 
* Allow registry auth config without authority value

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update CLI tests for new stereoscope log output

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-05-24 16:06:09 -04:00
Alex Goodman
2ecf5a58f0
remove upper limit to alpine-vuln inline-compare testing 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-07 14:59:35 -04:00
Alex Goodman
ce0bc73ede
adjust alpine matching to be able to independenly rely on nvd 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-07 13:57:34 -04:00
Alfredo Deza
878e312de1 remove msrc fromo defined matchers - can't use a container to catalog 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-05-03 14:56:00 -04:00
Alex Goodman
269d93cd57
update db status and add to json descriptor block 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-28 10:12:12 -04:00
Alex Goodman
9cd49d4c51
add registry cli tests + organize common utils 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 16:12:02 -04:00
Alex Goodman
55576feeb7
update integration tests with registry options 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 16:11:22 -04:00
Alex Goodman
a000a69b84
ensure compare script cannot divide by 0 and skips when inline finds nothing (#275) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-01 21:37:41 +00:00
Alex Goodman
976e3d68eb
pull in syft v0.14.0 and further decouple presenters from syft 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-01 10:01:07 -04:00
Dan Luhring
49b04f13eb
Add basic CLI tests for SBOM input 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-03-09 08:58:01 -05:00
Alfredo Deza
38e3405f0e remove schema-validation checks 
No longer required since it is always going to be one schema imported as
part of `db`

Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-03-05 09:46:24 -05:00
Alfredo Deza
95acf0e0c9 refactor v1-based imports to db 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-03-05 09:32:13 -05:00
Alex Goodman
137be60f28
add grype pkg.Package adapter for syft pkg.Package and remove pkg.Catalog 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-12-14 07:55:54 -05:00
Alex Goodman
25d6ec6c79
add SBOM JSON document input from syft 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 17:55:24 -05:00
Alex Goodman
4ed516e784
bump syft to v0.7.1 (with related fixes) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 10:02:40 -05:00
Alex Goodman
2dcb017295
update python and javascript catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 11:34:18 -04:00
Alex Goodman
da614aa4ac
bump syft version (add package.json, rename bundler to ruby) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-19 08:02:13 -04:00
Alex Goodman
9d06b57a0e
incorporate gemspec cataloger (#177) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 11:09:42 -04:00
Alex Goodman
326afa3c41
Add OCI support + use URI schemes (#160) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope, testutils, and syft pins

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix malformed go.sum

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* pull in upstream syft json presenter updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:18:03 -04:00
Alex Goodman
9f6301bbc2
Change root of JSON presenter to a mapping (instead of a sequence) (#163) 
* update root of json presenter document

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* change vulnerabilities to matches in json output

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:06:28 -04:00
Alex Goodman
ca8ac613e0
Rename Result object to Matches (#153) 
* rename result to matches

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* renames NewResult to NewMatches

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-17 06:02:17 -04:00
Alex Goodman
bd50ffc585
Change search key json output to a map (#146) 
* change search key json output to a map

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add documentation around the match object

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-08 11:23:29 -04:00
Alfredo Deza
89f8ac49b9 test: update integration to match new SearchMatches 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-25 11:53:23 -04:00
Alfredo Deza
b0c6dc2fb1 test: update scope.FilesByGlob, it is now part of Resolver 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-18 11:31:07 -04:00
Alfredo Deza
41147df494 test: update integration validation for python packages with Python format 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-12 13:55:41 -04:00
Alex Goodman
56b9576a19
Add inline-comparison as acceptance test (#106) 
* add inline-compare as acceptance tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* improve RPM matching with source indirection matching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments to compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* clean inline-compare image test names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump syft version to get rpm field enhancements

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 11:03:48 -04:00
Alfredo Deza
d8da43b410 test: update integration tests for alpine 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-07 09:44:40 -04:00
Alex Goodman
4476fc9888 broaden cpe matcher + modify alpine matcher 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 16:17:17 -04:00
Alfredo Deza
a9bf268abc integration tests for corner case 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 15:58:42 -04:00
Alfredo Deza
e0db0c1145 test: add integration corner cases for Alpine 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-08-06 15:58:42 -04:00
Dan Luhring
2cd127b932
Update pkg type (#87) 
* Integrate Alex's changes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Fix test issues

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update syft dependency references

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-08-05 08:18:24 -04:00
Alfredo Deza
9c85296d49 test: remove commented out code 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-30 09:35:53 -04:00
Alex Goodman
e1b4ea5fda
add schema validation & fix schema status logic 2020-07-29 21:11:05 -04:00
Alex Goodman
6ec1ce6ca6
use explicitly the v1 db schema 2020-07-27 08:49:39 -04:00
Alex Goodman
03005af2f2
rename grype-db 2020-07-24 06:59:14 -04:00
Alex Goodman
564fffec6d
rename to grype 2020-07-23 21:29:05 -04:00
Alex Goodman
6340b2da3a
add release pipeline & replace imgbom with syft (#60) 2020-07-23 21:26:03 -04:00