Mirrors/grype
2
0
Fork 0
mirror of https://github.com/anchore/grype synced 2024-11-10 14:44:12 +00:00
Code Issues Projects Releases Packages Wiki Activity
475 commits 36 branches 157 tags 14 MiB
Commit graph

55 commits

Author SHA1 Message Date
Zane Burstein
d169d5292a Added goreleaser-install.sh and execution in make bootstrap target 
Previous install of goreleaser v 0.160.0 was being done with curl command to https://install.goreleaser.com/github.com/goreleaser/goreleaser.sh, but there have been changes to that script that broke bootstrap. Copied the shell script to repo and changed the checksum file name to goreleaser_checksums.txt

Signed-off-by: Zane Burstein <zane.burstein@anchore.com>
 2021-09-07 14:20:13 -07:00
Alex Goodman
c7f33a8e4f
bump grype-db version to use main branch 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-07-20 12:18:29 -04:00
Dan Luhring
6f0b1995d0
Stop tidying go modules during bootstrap 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-07-01 14:45:01 -04:00
Josh Soref
14b28ff79b
Spelling (#336) 
Correct spelling errors
 2021-06-16 13:55:29 +00:00
Alex Goodman
14cceee5e8
correct validate-grype-test-target check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-06-01 21:15:43 -04:00
Alex Goodman
d8aedf8117 use test config for schema validations 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-26 12:30:21 -04:00
Alex Goodman
f99da01100 add staging update-url to cli tests + add pre-release check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-26 12:30:21 -04:00
Dan Luhring
ede8990906
Update script name for consistency 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-05-26 08:54:18 -04:00
Dan Luhring
bf1cfcd848
Clarify message in go mod checking 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-05-26 08:53:25 -04:00
Alex Goodman
a6585f4842
add go.mod tidy CI check 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-05-25 13:43:53 -04:00
Alex Goodman
a958acc57b
safely join paths derived from tar headers 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-15 08:53:57 -04:00
Alex Goodman
6ddea51209
go mod tidy during bootstrap target to ensure consistent go.sum state 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-14 16:56:25 -04:00
Alex Goodman
de32481b0c
bump linting timeout for CI 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 16:31:14 -04:00
Alex Goodman
c72803eb24
unify cli test make target 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-04-13 16:13:11 -04:00
Alex Goodman
9fd20b910e
ensure docker is auth'd during entire release process 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-26 10:11:59 -04:00
Alex Goodman
5dc5b440e4
move docker login after keychain creation 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-25 16:44:23 -04:00
Alex Goodman
a399647afc
add docker image to release process 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2021-03-23 10:00:13 -04:00
Dan Luhring
a82ae1f6c9
Skip signing for snapshot builds 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-03-09 09:12:46 -05:00
Dan Luhring
e93bf99d9d
Use snapshot build for pipeline CLI testing 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-03-09 08:58:02 -05:00
Dan Luhring
49b04f13eb
Add basic CLI tests for SBOM input 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2021-03-09 08:58:01 -05:00
Alfredo Deza
38e3405f0e remove schema-validation checks 
No longer required since it is always going to be one schema imported as
part of `db`

Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2021-03-05 09:46:24 -05:00
Alex Goodman
627aa77842
remove CPE generation (rely on static CPES from syft instead) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-11-20 06:43:45 -05:00
Dan Luhring
d7a323b0be
Add signed and notarized ZIP release asset 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-11 17:30:50 -05:00
Dan Luhring
5725f26c04
Resolve security warning for macOS users (#194) 
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
 2020-11-05 08:50:58 -05:00
Alex Goodman
da614aa4ac
bump syft version (add package.json, rename bundler to ruby) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-19 08:02:13 -04:00
Alex Goodman
86b0ae1ada
migrate to GHA pipeline (#176) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-10-07 14:57:59 -04:00
Alex Goodman
3c35e562bf
exclude size labels from release changelog 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 23:30:15 -04:00
Alex Goodman
75e3638468
add changelog generation into the release process (#167) 
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 16:59:00 -04:00
Alex Goodman
326afa3c41
Add OCI support + use URI schemes (#160) 
* add oci support + update image schemes

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update to oci-dir

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump upstream stereoscope, testutils, and syft pins

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix malformed go.sum

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* pull in upstream syft json presenter updates

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-25 14:18:03 -04:00
Alex Goodman
f0f8f4bf02
add --fail-on threshold support (#156) 
* add --fail-on threshold support

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* rename fail-on support functions and variables

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove UK spelling of canceled

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-09-21 17:12:21 -04:00
Alfredo Deza
57d777cf04 tests: add cyclonedx schema check 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-09-21 11:17:51 -04:00
Alex Goodman
89a6201555
Disable prerelease version update check (#118) 
* disable prerelease version update check

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* use prerelease flag as source of truth for user notifications

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-11 09:54:09 -04:00
Alex Goodman
56b9576a19
Add inline-comparison as acceptance test (#106) 
* add inline-compare as acceptance tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* improve RPM matching with source indirection matching

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add comments to compare-* make targets

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* clean inline-compare image test names

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* bump syft version to get rpm field enhancements

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
 2020-08-10 11:03:48 -04:00
Alex Goodman
009dcb1a46
Ignore prerelease versions on release + add DB update URL (#76) 
* ignore prerelease versions when uploading version file on release

* add db update url
 2020-07-30 12:37:49 -04:00
Alex Goodman
e1b4ea5fda
add schema validation & fix schema status logic 2020-07-29 21:11:05 -04:00
Alex Goodman
8d84dfeb65
finalize update check URL 2020-07-27 15:13:10 -04:00
Alex Goodman
94636feffa
add bin name to makefile for version upload 2020-07-27 10:02:36 -04:00
Alex Goodman
c0dff6c0d2
upload version check file on release 2020-07-27 09:37:16 -04:00
Alex Goodman
959fa89cad
bump bouncer version 2020-07-25 16:55:13 -04:00
Alex Goodman
0faf81320d
rollup static analysis to make target 2020-07-25 16:41:59 -04:00
Alex Goodman
4220fc60a7
Add default table presenter (#59) 
* add default table presenter

* compress table output

* fix table presenter found-by to use only search key
 2020-07-25 11:38:08 -04:00
Alex Goodman
2835ccb23f
add snapshot check & enable release publishing 2020-07-25 11:08:54 -04:00
Alex Goodman
c5867b32ea
show verbose test output to prevent circleci kills 2020-07-23 21:47:23 -04:00
Alex Goodman
6340b2da3a
add release pipeline & replace imgbom with syft (#60) 2020-07-23 21:26:03 -04:00
Alex Goodman
c8bca755ff
Add integration tests (#54) 
* add integration tests + add matcher types

* tweak db auto update var; rm dead cache cmd

* Update cmd/root.go

Co-authored-by: Alfredo Deza <adeza@anchore.com>

Co-authored-by: Alfredo Deza <adeza@anchore.com>
 2020-07-21 12:34:39 -04:00
Alfredo Deza
83401f7fc3 tests: make the results dir if it doesn't exist 
Signed-off-by: Alfredo Deza <adeza@anchore.com>
 2020-07-17 13:58:07 -04:00
Alex Goodman
12aeee3b92
add java matcher (#44) 2020-07-15 07:17:21 -04:00
Alex Goodman
d585ebe6c1
add comparitive analysis (#46) 2020-07-13 13:55:39 -04:00
Alex Goodman
16f7579520
add license validation 2020-07-13 13:42:21 -04:00
Alex Goodman
765d5dfb5b
add rpm version + constraint, rpmdb matching; refactor dpkg constraint 2020-07-07 09:22:14 -04:00