mirror of
https://github.com/anchore/grype
synced 2024-11-10 06:34:13 +00:00
bbff869499
* Commit just to share progress, needs to be squashed/fixed-up once working. Signed-off-by: Zach Hill <zach@anchore.com> * minor fixes * add cpe obj * add cpe matching * report cpe in search key * add verbose logging for matches; bump vulnscan-db ver * add dev profiler option; tweak logging * test support for CPE URI bindings addresses https://github.com/anchore/vulnscan/pull/40#discussion_r455389937 * rename nvdv2 to nvd * reduce scope of cpe matching to non-distro packages * normalize nil constraint strings Co-authored-by: Zach Hill <zach@anchore.com>
24 lines
909 B
Modula-2
24 lines
909 B
Modula-2
module github.com/anchore/vulnscan
|
|
|
|
go 1.14
|
|
|
|
require (
|
|
github.com/adrg/xdg v0.2.1
|
|
github.com/anchore/go-testutils v0.0.0-20200624184116-66aa578126db
|
|
github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b
|
|
github.com/anchore/imgbom v0.0.0-20200713170720-e8d11eec6992
|
|
github.com/anchore/siren-db v0.0.0-20200716152335-9bc4580f72a1
|
|
github.com/anchore/stereoscope v0.0.0-20200706164556-7cf39d7f4639
|
|
github.com/facebookincubator/nvdtools v0.1.4-0.20200622182922-aed862a62ae6
|
|
github.com/go-test/deep v1.0.7
|
|
github.com/hashicorp/go-getter v1.4.1
|
|
github.com/jinzhu/copier v0.0.0-20190924061706-b57f9002281a
|
|
github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d
|
|
github.com/mitchellh/go-homedir v1.1.0
|
|
github.com/sergi/go-diff v1.1.0
|
|
github.com/spf13/afero v1.3.2
|
|
github.com/spf13/cobra v1.0.0
|
|
github.com/spf13/viper v1.7.0
|
|
go.uber.org/zap v1.15.0
|
|
gopkg.in/yaml.v2 v2.3.0
|
|
)
|