528 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Alex Goodman	6a4c77b7c5	Merge pull request #332 from anchore/add-db-import-help ... Add description + positional arg to help text for DB import	2021-06-16 09:23:25 -04:00
Alex Goodman	1a9c31ca4c	add description + positional arg to help text ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-06-16 09:17:19 -04:00
Dan Luhring	fcdf6c58ec	Update README with latest capabilities (#335) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-06-11 17:50:18 +00:00
Alex Goodman	3d21b8397d	Merge pull request #330 from anchore/correct-validate-grype-test-target ... Correct validate-grype-test-target check	2021-06-01 21:25:19 -04:00
Alex Goodman	14cceee5e8	correct validate-grype-test-target check ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-06-01 21:15:43 -04:00
Alex Goodman	9bf97a9e73	Merge pull request #329 from anchore/remove-v3-staging-db-refs ... Remove v3 staging db references from test config	2021-06-01 20:33:28 -04:00
Alex Goodman	9c63cfdcf4	remove v3 staging db references from test config ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-06-01 16:56:25 -04:00
Alex Goodman	e095b43da7	Merge pull request #317 from anchore/v3-schema ... Switch grype to use grype-db schema v3	2021-06-01 16:20:25 -04:00
Alex Goodman	cbbec424fc	Merge pull request #328 from anchore/augment-cpe-matching ... Report multiple match details for matches	2021-06-01 15:34:40 -04:00
Alex Goodman	13e647d670	rename matchDetails.matchedOn to matchDetails.found ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-06-01 15:19:47 -04:00
Alex Goodman	aa72177417	adjust CPE matcher variables and function names ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-06-01 13:42:33 -04:00
Alex Goodman	ed054f2038	incorporate multiple match details to accomodate more accurate reported CPE matching info ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-30 11:51:14 -04:00
Alex Goodman	06dcd811d9	Merge pull request #327 from anchore/add-vendor-advisories ... Add fix state, vendor advisories + JSON presentation refactors	2021-05-28 09:48:24 -04:00
Alex Goodman	4aea571f4f	backout Version -> Versions rename ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-27 16:09:43 -04:00
Alex Goodman	6db86bfea8	rename SearchKey variable to SearchedBy ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-27 16:05:12 -04:00
Alex Goodman	402a53d14c	fix tests for v3 schema updates ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-27 15:25:21 -04:00
Alex Goodman	80bb416daa	bump grype-db to pull in v3 schema changes + ensure related vulns are not nil ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-27 14:17:05 -04:00
Alex Goodman	1849d7eaea	add vendor advisories and adjust fixes data shape ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 13:54:19 -04:00
Alex Goodman	3b13c46dc1	adjust presenter fixtures with allocated cvss collections ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:25 -04:00
Alex Goodman	5980995f5e	adjust cvss json to allocate empty collections + adjust tests ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:25 -04:00
Alex Goodman	e02b81e0e7	linting fix ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:21 -04:00
Alex Goodman	b354ea9e2e	pass app config and db status by reference to the presenter ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:21 -04:00
Alex Goodman	d8aedf8117	use test config for schema validations ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:21 -04:00
Alex Goodman	f99da01100	add staging update-url to cli tests + add pre-release check ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:21 -04:00
Alex Goodman	abc711a6be	add cvss version to metadata constructor ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-26 12:30:21 -04:00
Alfredo Deza	96fed8e60c	add tests for CVSS method helper ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2021-05-26 12:30:21 -04:00
Alfredo Deza	3a5aaffb9d	update golden files with new CVSS output ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2021-05-26 12:30:21 -04:00
Alfredo Deza	badf85a0bc	update mock models to use new CVSS slices ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2021-05-26 12:30:21 -04:00
Alfredo Deza	de572f828d	port cyclonedx presenter to use new CVSS structures ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2021-05-26 12:30:21 -04:00
Alfredo Deza	bb86761a91	port presenter models to capture new CVSS slices ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2021-05-26 12:30:21 -04:00
Alfredo Deza	251c116913	port metadata to use new grype-db CVSS scores ... Signed-off-by: Alfredo Deza <adeza@anchore.com>	2021-05-26 12:30:21 -04:00
Dan Luhring	c1e70893e6	Replace links to Slack channels with public signup link (#325) ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-05-26 13:24:23 +00:00
Dan Luhring	00de8a3946	Merge pull request #324 from anchore/go-mod-clarity-update ... Minor update to go mod checks for clarity and consistency	2021-05-26 09:19:45 -04:00
Dan Luhring	ede8990906	Update script name for consistency ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-05-26 08:54:18 -04:00
Dan Luhring	bf1cfcd848	Clarify message in go mod checking ... Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-05-26 08:53:25 -04:00
Alex Goodman	7bdfffb43d	Merge pull request #323 from anchore/go-mod-release-workaround ... Add go.mod tidy CI check	2021-05-25 14:01:49 -04:00
Alex Goodman	a6585f4842	add go.mod tidy CI check ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-25 13:43:53 -04:00
Dan Luhring	8da410c578	Allow registry auth config without authority value (#322) ... * Allow registry auth config without authority value Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Update CLI tests for new stereoscope log output Signed-off-by: Dan Luhring <dan.luhring@anchore.com>	2021-05-24 16:06:09 -04:00
Alex Goodman	2c8e2cbba9	Merge pull request #321 from anchore/grype-230-followup ... Adjust tests for VirtualPath java metadata addition	2021-05-24 11:54:36 -04:00
Alex Goodman	d036f087df	adjust tests for virtual-path java metadata addition ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-24 11:49:59 -04:00
Alex Goodman	5faf291736	Merge pull request #320 from anchore/add-java-virtual-path ... Add java virtual path to package metadata	2021-05-24 11:40:53 -04:00
Alex Goodman	594cfd05c9	add java virutal path to package metadata ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-24 11:23:31 -04:00
Alex Goodman	ecd8fd0e64	Merge pull request #319 from anchore/show-pkg-metadata ... Show limited package metadata in json presenter	2021-05-24 09:35:08 -04:00
Alex Goodman	400ccb2f1d	show limited package metadata in json presenter ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-24 09:17:33 -04:00
Alex Goodman	f97f56b6d1	Merge pull request #313 from anchore/add-json-sorting ... Add package sorting for artifacts in json document	2021-05-18 15:58:48 -04:00
Alex Goodman	48e479a78a	split out matches sort testing into pairs in same dimension ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-18 15:47:22 -04:00
Alex Goodman	a8577eade7	add package sorting for artifacts in json document ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-11 16:40:27 -04:00
Alex Goodman	3c13966407	Merge pull request #312 from anchore/fix-compare-test ... Fix acceptance tests	2021-05-07 15:04:23 -04:00
Alex Goodman	2ecf5a58f0	remove upper limit to alpine-vuln inline-compare testing ... Signed-off-by: Alex Goodman <alex.goodman@anchore.com>	2021-05-07 14:59:35 -04:00
Alex Goodman	374d9c3d21	Merge pull request #303 from anchore/fix-alpine-matching ... Adjust Alpine matching to lean on NVD matches when possible	2021-05-07 14:01:24 -04:00