Alex Goodman
|
8704dbb2bc
|
pull in registry credential encoding fix
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-05 14:27:42 -04:00 |
|
Alex Goodman
|
a000a69b84
|
ensure compare script cannot divide by 0 and skips when inline finds nothing (#275)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 21:37:41 +00:00 |
|
Alex Goodman
|
ebe1371d47
|
bump syft to pull in repoDigests onto image metadata (#274)
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 21:28:53 +00:00 |
|
Alex Goodman
|
930c413d65
|
Merge pull request #273 from anchore/use-cpe-formatted-string
Represent CPEs as formatted strings
|
2021-04-01 17:19:24 -04:00 |
|
Alex Goodman
|
5d39471db7
|
represent CPEs as formatted strings
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 16:38:11 -04:00 |
|
Alex Goodman
|
d8e58979e6
|
Merge pull request #272 from anchore/stage-db-by-schema-version
Stage DB file within directory named by schema version
|
2021-04-01 16:36:22 -04:00 |
|
Alex Goodman
|
07f61c0ff5
|
stage db by dir named by schema version
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 16:11:58 -04:00 |
|
Alex Goodman
|
24fa1f29a5
|
Merge pull request #263 from anchore/pull-syft-cataloger-refactor
Pull in syft v0.14.0 and further decouple presenters from Syft
|
2021-04-01 12:13:38 -04:00 |
|
Alex Goodman
|
246e47bc13
|
update error message for output flag parsing
Co-authored-by: Alfredo Deza <adeza@anchore.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
|
2021-04-01 10:01:09 -04:00 |
|
Alex Goodman
|
9b7988178c
|
bump to building and testing on golang 1.16
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 10:01:09 -04:00 |
|
Alex Goodman
|
99ecba5d61
|
remove bom:bd xml schema ref
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 10:01:09 -04:00 |
|
Alex Goodman
|
976e3d68eb
|
pull in syft v0.14.0 and further decouple presenters from syft
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-04-01 10:01:07 -04:00 |
|
Alfredo Deza
|
a372008588
|
Merge pull request #256 from anchore/v2-schema
bump go dependencies to use grype-db with v2 schema
|
2021-03-30 15:15:00 -04:00 |
|
Alfredo Deza
|
f2b815d760
|
bump go dependencies to use grype-db with v2 schema
This will cause grype to set its schema version requirement to 2
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2021-03-30 13:52:31 -04:00 |
|
Alex Goodman
|
b7c3b9fce1
|
Merge pull request #262 from anchore/docker-auth
Ensure docker is auth'd during entire release process
|
2021-03-26 10:41:50 -04:00 |
|
Alex Goodman
|
9fd20b910e
|
ensure docker is auth'd during entire release process
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-26 10:11:59 -04:00 |
|
Alex Goodman
|
7ce9ef647e
|
Merge pull request #261 from anchore/move-docker-login-after-keychain-step
Move docker login after keychain creation
|
2021-03-25 16:49:35 -04:00 |
|
Alex Goodman
|
5dc5b440e4
|
move docker login after keychain creation
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-25 16:44:23 -04:00 |
|
Alex Goodman
|
b8ad37c2a8
|
Merge pull request #260 from anchore/fix-docker-login
Manually login to docker via cli during release
|
2021-03-24 11:40:44 -04:00 |
|
Alex Goodman
|
1010a09d6b
|
manually login to docker via cli during release
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-23 17:55:27 -04:00 |
|
Alex Goodman
|
f062848a06
|
Merge pull request #259 from anchore/snapshot-on-linux
Move snapshot builds to linux
|
2021-03-23 13:14:44 -04:00 |
|
Alex Goodman
|
887b3f0303
|
move snapshot builds to linux box
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-23 12:33:21 -04:00 |
|
Alex Goodman
|
f9acf77621
|
Merge pull request #258 from anchore/missing-fixture
Re-adding json presenter fixture
|
2021-03-23 10:59:25 -04:00 |
|
Alex Goodman
|
8d54ccb5f9
|
adding json presenter fixture
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-23 10:49:35 -04:00 |
|
Alex Goodman
|
422a4c77c7
|
Merge pull request #257 from anchore/add-docker-image
Add docker image to release process
|
2021-03-23 10:30:52 -04:00 |
|
Alex Goodman
|
a399647afc
|
add docker image to release process
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-23 10:00:13 -04:00 |
|
Alex Goodman
|
32fabfdf0e
|
Merge pull request #228 from sagikazarmark/patch-1
Add automatic completion install to brew formula
|
2021-03-22 15:14:09 -04:00 |
|
Alex Goodman
|
ec1f11ffcd
|
Merge pull request #247 from anchore/suppress-token-error
Suppress version constraint token scanner errors
|
2021-03-15 16:39:11 -04:00 |
|
Alex Goodman
|
c9f64e4713
|
suppress version constraint token scanner errors
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-03-15 15:08:52 -04:00 |
|
Dan Luhring
|
75c0d36bbc
|
Merge pull request #241 from anchore/fix-sbom-input
Fix intake of SBOM from JSON
|
2021-03-15 11:50:24 -04:00 |
|
Dan Luhring
|
a82ae1f6c9
|
Skip signing for snapshot builds
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2021-03-09 09:12:46 -05:00 |
|
Dan Luhring
|
e93bf99d9d
|
Use snapshot build for pipeline CLI testing
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2021-03-09 08:58:02 -05:00 |
|
Dan Luhring
|
49b04f13eb
|
Add basic CLI tests for SBOM input
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2021-03-09 08:58:01 -05:00 |
|
Dan Luhring
|
12646be461
|
Fix SBOM input and refactor
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2021-03-09 08:58:01 -05:00 |
|
Alfredo Deza
|
82cdfe6e03
|
Merge pull request #243 from anchore/issue-242
refactor v1-based imports to db
|
2021-03-05 12:21:13 -05:00 |
|
Alfredo Deza
|
38e3405f0e
|
remove schema-validation checks
No longer required since it is always going to be one schema imported as
part of `db`
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2021-03-05 09:46:24 -05:00 |
|
Alfredo Deza
|
6c3cb94c03
|
update grype-db dependency
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2021-03-05 09:32:13 -05:00 |
|
Alfredo Deza
|
95acf0e0c9
|
refactor v1-based imports to db
Signed-off-by: Alfredo Deza <adeza@anchore.com>
|
2021-03-05 09:32:13 -05:00 |
|
Alex Goodman
|
b5bc8e0f85
|
Merge pull request #234 from anchore/refactor-version-constraint-parsing
Refactor constraint expression parser to allow for quoted versions
|
2021-02-16 09:37:05 -05:00 |
|
Alex Goodman
|
c5e16bb4a2
|
add test case for version parsing with embedded quotes
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-02-16 09:23:29 -05:00 |
|
Alex Goodman
|
0a9408005f
|
refactor constraint expression parser to allow for quoted versions
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2021-02-16 09:15:17 -05:00 |
|
Dan Luhring
|
8344b8f0d3
|
Merge pull request #233 from anchore/syft-v0.12.4
Update to syft v0.12.4
|
2021-01-27 14:15:02 -05:00 |
|
Dan Luhring
|
5c583857c2
|
Adapt to breaking changes in syft and stereoscope
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2021-01-27 14:02:27 -05:00 |
|
Dan Luhring
|
7ec9212c70
|
Update syft to v0.12.4
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
|
2021-01-27 12:29:54 -05:00 |
|
Márk Sági-Kazár
|
ac65705dc2
|
Add automatic completion install to brew formula
Signed-off-by: Mark Sagi-Kazar <mark.sagikazar@gmail.com>
|
2021-01-12 18:18:30 +01:00 |
|
Alex Goodman
|
6884715251
|
Merge pull request #224 from anchore/decouple-syft-objects
Decouple from syft objects where possible
|
2020-12-14 08:41:46 -05:00 |
|
Alex Goodman
|
45d3938046
|
do not require hashing of the DB file as validation on standard startup
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-12-14 07:55:55 -05:00 |
|
Alex Goodman
|
0699e6a6ca
|
add package provider abstraction and update json document input
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-12-14 07:55:54 -05:00 |
|
Alex Goodman
|
137be60f28
|
add grype pkg.Package adapter for syft pkg.Package and remove pkg.Catalog
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
|
2020-12-14 07:55:54 -05:00 |
|
Alex Goodman
|
9128a8af61
|
Merge pull request #222 from anchore/fix-distro-namespaces
Fix distroNamespace mapping to only use major version for select distros
|
2020-12-08 14:08:41 -05:00 |
|