grype/grype
William Murphy e887501628
chore: explicitly test maven suffixes (#1617)
Some older Maven releases include a suffix like .RELEASE on the version
number. Grype's behavior with regard to these versions has been
suggested as a source of false positives. Pin the behavior with tests to
make it easier to reason about how Grype will compare maven versions and
to guard against this behavior accidentally changing.

Signed-off-by: Will Murphy <will.murphy@anchore.com>
2023-11-27 09:33:56 -05:00
..
cpe fix: orient by cve merging (#1046) 2023-01-04 13:41:10 -05:00
db fix: match against debian unstable (#1593) 2023-11-08 15:17:01 -05:00
differ chore: Fix race conditions around stager, enable detector (#1489) 2023-09-12 13:52:26 -04:00
distro fix: match against debian unstable (#1593) 2023-11-08 15:17:01 -05:00
event fix: terminal clobbering when commands return errors (#1505) 2023-09-20 12:17:33 -04:00
grypeerr add --fail-on threshold support (#156) 2020-09-21 17:12:21 -04:00
internal chore: account for syft package metadata changes (#1423) 2023-11-07 15:17:36 -05:00
match chore(deps): update Syft to v0.97.0 (#1608) 2023-11-16 19:20:28 -05:00
matcher chore: account for syft package metadata changes (#1423) 2023-11-07 15:17:36 -05:00
pkg chore(deps): update Syft to v0.97.0 (#1608) 2023-11-16 19:20:28 -05:00
presenter chore(deps): update Syft to v0.97.0 (#1608) 2023-11-16 19:20:28 -05:00
search fix: golang version parsing (#1599) 2023-11-15 17:25:32 -05:00
store Finalize v4 Grype schema (#803) 2022-07-05 19:03:16 +01:00
version chore: explicitly test maven suffixes (#1617) 2023-11-27 09:33:56 -05:00
vex Ignore/add match results based on OpenVEX documents (#1397) 2023-09-13 15:26:12 -04:00
vulnerability Add --ignore-states flag for ignoring findings with specific fix states (#1473) 2023-10-17 14:07:34 -04:00
deprecated.go Ignore/add match results based on OpenVEX documents (#1397) 2023-09-13 15:26:12 -04:00
lib.go chore: update CLI to CLIO (#1437) 2023-09-11 15:10:06 -04:00
load_vulnerability_db.go Optionally orient results by CVE (#1020) 2022-12-08 15:22:40 -05:00
vulnerability_matcher.go fix: terminal clobbering when commands return errors (#1505) 2023-09-20 12:17:33 -04:00
vulnerability_matcher_test.go feat: add package info to search by for all match details (#1339) 2023-06-06 19:32:50 +01:00