Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-14 00:07:08 +00:00
Code Issues Projects Releases Packages Wiki Activity
260 commits 32 branches 157 tags 14 MiB
Commit graph

260 commits

This branch
This branch
All branches
Author SHA1 Message Date
Alex Goodman
25d6ec6c79
add SBOM JSON document input from syft 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-17 17:55:24 -05:00
Alex Goodman
a494df7be4
Merge pull request #206 from anchore/bump-syft-v0.7.1 
Bump syft from v0.5.1 to v0.7.1
 2020-11-12 10:10:19 -05:00
Alex Goodman
4ed516e784
bump syft to v0.7.1 (with related fixes) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 10:02:40 -05:00
Alex Goodman
7fdbcf8a6c
add warn log level 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-12 10:02:40 -05:00
Dan Luhring
36a528a681
Merge pull request #205 from anchore/zip-release-asset 
Add signed and notarized ZIP release asset
 2020-11-12 08:45:37 -05:00
Dan Luhring
d7a323b0be
Add signed and notarized ZIP release asset 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-11 17:30:50 -05:00
Dan Luhring
08717dcfcc
Avoid Finder window flash during install 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-11 17:19:53 -05:00
Dan Luhring
cd56214ada
Merge pull request #201 from anchore/updates-to-mac-releases 
Updates for macOS release process
 2020-11-06 13:27:08 -05:00
Dan Luhring
9f9f396da6
Update README to account for change in macOS release 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 12:19:38 -05:00
Dan Luhring
627fd06d2d
Update install.sh to account for dmg-based macOS release asset 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 12:13:54 -05:00
Dan Luhring
25cbd9fe24
Use version instead of tag in DMG file name 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 11:12:37 -05:00
Dan Luhring
331dea3677
Remove darwin target from primary build entry (#199) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-06 11:10:58 -05:00
Dan Luhring
111c9f8182
Merge pull request #195 from anchore/fix-acceptance-test-workflow 
Syft version bump, and improvements to acceptance workflows
 2020-11-05 13:42:23 -05:00
Dan Luhring
5d21595414
Update to Syft v0.5.1 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-05 13:11:11 -05:00
Dan Luhring
bf9cf38362
Add Slack notifications for acceptance test failures 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-05 12:49:33 -05:00
Dan Luhring
263da9e3a8
Add bootstrap step to acceptance workflow 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-05 09:55:23 -05:00
Dan Luhring
5725f26c04
Resolve security warning for macOS users (#194) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-05 08:50:58 -05:00
Alex Goodman
50e9800594
update release gate checks 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 14:12:34 -04:00
Alex Goodman
f53caa7087
Merge pull request #193 from anchore/bump-syft-python-cataloger 
Update python and javascript catalogers
 2020-10-23 13:43:18 -04:00
Alex Goodman
2dcb017295
update python and javascript catalogers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-23 11:34:18 -04:00
Dan Luhring
5f14775920
Fix errors in README (#188) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-10-19 10:01:33 -04:00
Alex Goodman
090ec8aa0c
Merge pull request #187 from anchore/bump-syft 
Incorporate package.json & gemspec catalogers
 2020-10-19 08:31:27 -04:00
Alex Goodman
da614aa4ac
bump syft version (add package.json, rename bundler to ruby) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-19 08:02:13 -04:00
Alex Goodman
ed27c7fcfa
Merge pull request #185 from VinodAnandan/main 
Enable CodeQL Security Scan
 2020-10-16 19:22:19 -04:00
Vinod Anandan
fa5e7abe38 Enable CodeQL Security Scan 
https://github.blog/2020-09-30-code-scanning-is-now-available/

Signed-off-by: Vinod Anandan <vinod.anandan@jpmorgan.com>
 2020-10-17 00:11:09 +01:00
Alex Goodman
86015454dc
fix grype version verbiage 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 11:51:14 -04:00
Alex Goodman
d26eff6c1d
remove greeter action since it is broken for forked PRs (#186) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-15 10:20:00 -04:00
Alex Goodman
9d06b57a0e
incorporate gemspec cataloger (#177) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 11:09:42 -04:00
Alex Goodman
e7ee54a81a
update install script arguments for proper argument processing (#181) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 11:08:26 -04:00
Robert Prince
9363f27627
Add first issue/PR welcome message action (#168) 
* Add first issue/PR welcome message action

Signed-off-by: Robert Prince <robert.prince@anchore.com>

* update first-pr-issue message with a simple greeting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* simplify first message to a greeting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 10:20:08 -04:00
Graham Siener
4ca218733b
Edit typo in readme (#179) 
Signed-off-by: Graham Siener <siener@gmail.com>
 2020-10-09 10:10:10 -04:00
Alex Goodman
b787a69520
run tests on fork PRs (#180) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-09 07:45:09 -04:00
Alfredo Deza
e2515fa9f0
Merge pull request #178 from anchore/non-prerelase 
docs: update the readme to remove pre-release note
 2020-10-08 17:03:51 -04:00
Alfredo Deza
7f20e538cf docs: update the readme to remove pre-release note 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-10-08 15:33:47 -04:00
Alex Goodman
86b0ae1ada
migrate to GHA pipeline (#176) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-07 14:57:59 -04:00
Dan Luhring
2e97387721
Set prerelease to auto (#169) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-09-29 16:33:33 -04:00
Dan Luhring
04f88a80c6
Bump go.mod item versions (#173) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-09-29 16:24:12 -04:00
Alex Goodman
98a17355c5
remove constraint panics & invalid test assertiona (handle pre-release TODOs) (#171) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-29 10:20:51 -04:00
Alex Goodman
65ab6dacdb
Support file/dir tilde expansion + APK cataloger xattr fix (#170) 
* pull in upstream tilde expansion

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* pull in apk cataloger xattr checksum fix

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-28 17:37:39 -04:00
Alex Goodman
844cef986b
default to draft releases 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 23:39:12 -04:00
Alex Goodman
3c35e562bf
exclude size labels from release changelog 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 23:30:15 -04:00
Alex Goodman
75e3638468
add changelog generation into the release process (#167) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:59:00 -04:00
Alex Goodman
63a6dd33df
always return a cleanup function from scope (#166) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:29:15 -04:00
Dan Luhring
f13b9a76ed
Use latest versions of anchore repos (#164) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-09-25 15:00:15 -04:00
Alex Goodman
326afa3c41
Add OCI support + use URI schemes (#160) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope, testutils, and syft pins

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix malformed go.sum

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* pull in upstream syft json presenter updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:18:03 -04:00
Alex Goodman
9f6301bbc2
Change root of JSON presenter to a mapping (instead of a sequence) (#163) 
* update root of json presenter document

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* change vulnerabilities to matches in json output

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:06:28 -04:00
Alex Goodman
b2715ffdba
Update high level docs (#162) 
* move dev section to separate doc; generally update readme

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove line breaks from docs

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:06:10 -04:00
Alex Goodman
ed9f9bcb2b
remove duplicate rows from the summary table (#161) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 10:34:54 -04:00
Alfredo Deza
ec493d5d0b
Merge pull request #159 from anchore/update-testutils 
update go.mod and go.sum
 2020-09-24 08:49:59 -04:00
Alfredo Deza
578afab216 update go.mod and go.sum 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-09-23 16:58:14 -04:00