grype/.bouncer.yaml at 1a7c9d177904756b820cea1044c8a5c452d8a4c3 - Mirrors/grype - CherryKitten

Mirrors/grype

mirror of https://github.com/anchore/grype synced 2024-11-10 06:34:13 +00:00

Vijay Pillai 1a7c9d1779

Bugfixes + Integration test for sbom input vs grype library comparison (#424 )

This change both adds a test to identify and fixes differences between loading sboms from json and loading sboms from Syft as a library.
* adds integration test that compares SBOM input vs image input
* fix integration test cache path
* Add handler for ApkMetadataType in partialSyftPackage.UnmarshalJSON
* Fix Epoch missing from Package.New RpmdbMetadataType handler and update RpmDbMetadata test in TestNew_MetadataExtraction
* bump syft to version 0.24.0
* update license check for packageurl-go

Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
Co-authored-by: Vijay Pillai <vijay.pillai@anchore.com>

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Vijay Pillai <vijay.pillai@anchore.com>

2021-09-22 21:53:32 -04:00

9 lines

No EOL

212 B

YAML

Raw Blame History

 permit:
   - BSD.*
   - MIT.*
   - Apache.*
   - MPL.*
   - ISC
 ignore-packages:
   # packageurl-go is released under the MIT license located in the root of the repo at /mit.LICENSE
   - github.com/anchore/packageurl-go