Commit graph

145 commits

Author SHA1 Message Date
Alfredo Deza
4596701956
Merge pull request #110 from anchore/issue-35
docs: add contributing guidelines
2020-08-10 14:06:36 -04:00
Alfredo Deza
9ece1f5614 docs: add contributing guidelines
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-10 12:22:46 -04:00
Alex Goodman
56b9576a19
Add inline-comparison as acceptance test (#106)
* add inline-compare as acceptance tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* improve RPM matching with source indirection matching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments to compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* clean inline-compare image test names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump syft version to get rpm field enhancements

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-10 11:03:48 -04:00
Alex Goodman
f98e3cdf90
replace search key from table with severity (#107)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-10 10:24:29 -04:00
Dan Luhring
37ceb170e4
Add shell completion script (#109)
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-08-10 09:31:09 -04:00
Dan Luhring
2ccdefd007
Add poetry to package types (#108)
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-08-10 08:55:39 -04:00
Alex Goodman
30d72dd476
fix spaces alignment on etui
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-07 18:19:25 -04:00
Ross Turk
c1fdaba363
Adding additional detail to README (#103)
* Adding additional detail to README

Signed-off-by: Ross Turk <ross@rossturk.com>

* Addressing comments in #103

Signed-off-by: Ross Turk <ross@rossturk.com>

* remove profiling from config options

Signed-off-by: Ross Turk <ross@rossturk.com>
2020-08-07 15:56:55 -04:00
Alex Goodman
f1ad989c9b
replace master with main (#104)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-07 13:27:04 -04:00
Alex Goodman
6de7e4030d
finalize the json output (no schema yet) (#102)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-07 13:05:58 -04:00
Alfredo Deza
76ff9737db
Merge pull request #99 from anchore/issue-18
Add Alpine (APK) matcher
2020-08-07 13:04:07 -04:00
Alfredo Deza
5d057db5ec cpe: update tests to match new ANY in product name
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-07 09:44:40 -04:00
Alfredo Deza
d8da43b410 test: update integration tests for alpine
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-07 09:44:40 -04:00
Alfredo Deza
e4689c65de matcher: add apk matcher unit tests
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 16:17:17 -04:00
Alfredo Deza
44767fc2fb result: add a Count() helper method
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 16:17:17 -04:00
Alex Goodman
4476fc9888 broaden cpe matcher + modify alpine matcher
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 16:17:17 -04:00
Alfredo Deza
a9bf268abc integration tests for corner case
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 15:58:42 -04:00
Alfredo Deza
cff46b8443 add apk to controller
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 15:58:42 -04:00
Alfredo Deza
e0db0c1145 test: add integration corner cases for Alpine
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 15:58:42 -04:00
Alfredo Deza
905cae5377 matcher: add APK support
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 15:58:42 -04:00
Alfredo Deza
317b38336b match: add APK matcher type
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 15:58:42 -04:00
Alex Goodman
51479857e6
add description and cvss metadata to v1 schema (#100)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-08-06 13:15:22 -04:00
Alex Goodman
4e6eb13e0a
fix panic on top-level log (#97) 2020-08-06 08:30:22 -04:00
Alex Goodman
81eab4e65b
pull all commits on checkout for release to build changelog (#98) 2020-08-06 08:29:06 -04:00
Alex Goodman
f3756d0dc0
change default scope to squashed (from all-layers) (#95) 2020-08-06 08:27:09 -04:00
Alfredo Deza
0cfca609c3
Merge pull request #83 from anchore/initial-docs
docs: update README with sections and DB information
2020-08-06 08:02:36 -04:00
Alfredo Deza
57d73a53b3 docs: update README with sections and DB information
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-06 07:59:35 -04:00
Dan Luhring
2cd127b932
Update pkg type (#87)
* Integrate Alex's changes

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Fix test issues

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>

* Update syft dependency references

Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2020-08-05 08:18:24 -04:00
Alex Goodman
e1f4c549d5
bump syft for docker pull + UI elements for pull status (#81) 2020-08-03 18:07:33 -04:00
Alfredo Deza
5261e4a869
Merge pull request #84 from anchore/help-error
cmd: display help menu when no args are passed in - skip the error
2020-08-03 17:29:44 -04:00
Alfredo Deza
c581a454f2 cmd: display help menu when no args are passed in - skip the error
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-03 16:00:12 -04:00
Alfredo Deza
87e6dc08ec
Merge pull request #82 from anchore/log-fix
cmd: fix log identifier for stereoscope
2020-08-03 15:58:24 -04:00
Alfredo Deza
b214c29cbe cmd: fix log identifier for stereoscope
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-08-03 08:50:04 -04:00
Alex Goodman
fb8f3d87ed
restore log source after etui exit 2020-08-02 18:31:00 -04:00
Alex Goodman
11731fac40
replace zap logger with logrus (#80) 2020-08-01 11:58:10 -04:00
Alex Goodman
861883c8d4
pull in fix for bounds check progress formatting values in etui 2020-07-31 06:57:05 -04:00
Alex Goodman
6395481e73
Add ETUI (#77)
* add base syft UI elements

* add etui with shared ui elements

* allow for concurrent download DB and fetch/catalog image
2020-07-30 19:06:27 -04:00
Alex Goodman
009dcb1a46
Ignore prerelease versions on release + add DB update URL (#76)
* ignore prerelease versions when uploading version file on release

* add db update url
2020-07-30 12:37:49 -04:00
Alfredo Deza
6c7d453f87
Merge pull request #75 from anchore/yarn-lock
Add yarn.lock support
2020-07-30 09:47:17 -04:00
Alfredo Deza
9c85296d49 test: remove commented out code
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-07-30 09:35:53 -04:00
Alfredo Deza
561f7577c1 dependencies: bump to latest syft that includes yarn support
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-07-30 09:35:53 -04:00
Alfredo Deza
744368a2f8 matcher: add yarn matcher
Signed-off-by: Alfredo Deza <adeza@anchore.com>
2020-07-30 09:35:53 -04:00
Alex Goodman
e1b4ea5fda
add schema validation & fix schema status logic 2020-07-29 21:11:05 -04:00
Alex Goodman
8d84dfeb65
finalize update check URL 2020-07-27 15:13:10 -04:00
Alex Goodman
c524fba691
use aws creds for version file upload 2020-07-27 10:12:40 -04:00
Alex Goodman
94636feffa
add bin name to makefile for version upload 2020-07-27 10:02:36 -04:00
Alex Goodman
02aac29255
Merge pull request #72 from anchore/upload-version
Upload version check file on release
2020-07-27 09:41:44 -04:00
Alex Goodman
c0dff6c0d2
upload version check file on release 2020-07-27 09:37:16 -04:00
Alex Goodman
14d8b5da90
Merge pull request #71 from anchore/support-multiple-schemas
use explicitly the v1 db schema
2020-07-27 08:54:53 -04:00
Alex Goodman
6ec1ce6ca6
use explicitly the v1 db schema 2020-07-27 08:49:39 -04:00