Mirrors/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft synced 2024-09-20 14:11:54 +00:00
Code Issues Projects Releases Packages Wiki Activity
syft/go.mod

59 lines
2.5 KiB
Modula-2
Raw Normal View History

rename to syft
2020-07-24 00:54:04 +00:00
module github.com/anchore/syft
initial project structure
2020-05-12 14:45:18 +00:00
bump go.mod minimum required go version Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-04-16 12:35:05 +00:00
go 1.16
initial project structure
2020-05-12 14:45:18 +00:00
require (
update pipeline with new levels of testing Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-03-18 13:01:07 +00:00
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
add app config and logging interface
2020-05-21 19:25:59 +00:00
github.com/adrg/xdg v0.2.1
update pipeline with new levels of testing Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-03-18 13:01:07 +00:00
github.com/alecthomas/jsonschema v0.0.0-20210301060011-54c507b6f074
Mark package relations by file ownership (#329) * add marking package relations by file ownership Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * correct json schema version; ensure fileOwners dont return dups; pin test pkg versions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract package relationships into separate section Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * pull in client-go features for import of PackageRelationships Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * move unit test for ownership by files relationship further down Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename relationship to "ownership-by-file-overlap" Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-02-25 18:47:13 +00:00
github.com/anchore/client-go v0.0.0-20210222170800-9c70f9b80bcf
Use anchore fork of go-presenter (#611) * use anchore fork of go-presenter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * drop coverage threshold Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-02 18:09:26 +00:00
github.com/anchore/go-presenter v0.0.0-20211102174526-0dbf20f6c7fa
update go-rpmdb and restruct gomod references (#506) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-09-14 18:51:19 +00:00
github.com/anchore/go-rpmdb v0.0.0-20210914181456-a9c52348da63
rm stereoscope from testutils (#181) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-09-25 18:53:05 +00:00
github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04
Add check for app update (#88) * add check for app update; fix ETUI error handling * validate user args
2020-07-21 16:02:03 +00:00
github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b
Use Anchore fork of packageurl lib without replace directive (#512) Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
2021-09-22 19:04:09 +00:00
github.com/anchore/packageurl-go v0.0.0-20210922164639-b3fa992ebd29
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/anchore/stereoscope v0.0.0-20211116152349-7e4e1b56a15d
Catalog archive contents for single-file input (#637) * add first-level archive processing when input is a file Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add license exception for github.com/xi2/xz Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * always return cleanup function Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * change source.NewFromFile log entry to warn Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure file source always has cleanup function Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure we are always preferring the unarchive cleanup function for source Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-19 14:16:25 +00:00
// we are hinting brotli to latest due to warning when installing archiver v3:
// go: warning: github.com/andybalholm/brotli@v1.0.1: retracted by module author: occasional panics and data corruption
github.com/andybalholm/brotli v1.0.4 // indirect
Incorporate import changes + add image overwrite option (#294) * incorporate import changes + add image overwrite option Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update import tests to account for arbitrary json shape Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-18 21:59:30 +00:00
github.com/antihax/optional v1.0.0
Fix symlink resolutions for constituent paths (#304) * bump stereoscope to pull in content API refactors Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * incorporate symlink fixes Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * with filetree.File() adjustments Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * regress all-layers scope to not include dead-links + default tests to squashed scope Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore all layers resolver glob behavior (custom + lazy link resolution) Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * incorporate filetree link resolution options and restore no-follow dead link option for resolvers Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * removed path from lower-level FileTree.File() calls Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * bump stereoscope to pull in latest link resolution fixes Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * bump doublestar to v2 for directory resolver Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-01-04 21:41:45 +00:00
github.com/bmatcuk/doublestar/v2 v2.0.4
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/docker/docker v20.10.10+incompatible
bump stereoscope for docker pull + add UI elements for pull status (#117)
2020-08-03 20:03:47 +00:00
github.com/dustin/go-humanize v1.0.0
move package purl and cpes (identities) to pkg.Package Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-19 16:11:02 +00:00
github.com/facebookincubator/nvdtools v0.1.4
add rpmdb file info to cataloger Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-11-05 18:46:20 +00:00
github.com/go-test/deep v1.0.7
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/google/go-cmp v0.5.6
478 identify go binaries and extract mod information (#534) * add query by MIME type to source.FileResolver Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * import stereoscope lib changes to find mime type - add bin cataloger - add bin parser - add mime type go utils - import new resolver Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * add go std library code to unpack bin - keep them in their own (original) files - add note for "this code was copied from" - comment the lines the required changing Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-07 16:16:38 +00:00
github.com/google/uuid v1.2.0
bump stereoscope for docker pull + add UI elements for pull status (#117)
2020-08-03 20:03:47 +00:00
github.com/gookit/color v1.2.7
add analysis coordination (with dummy analyzer)
2020-05-18 15:59:33 +00:00
github.com/hashicorp/go-multierror v1.1.0
add first distro support
2020-06-01 14:33:46 +00:00
github.com/hashicorp/go-version v1.2.0
Introduce relationships as first-class objects (#607) * migrate pkg.ID and pkg.Relationship to artifact package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * return relationships from tasks Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix more tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add artifact.Identifiable by Identity() method Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove catalog ID assignment Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust spdx helpers to use copy of packages Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * stabilize package ID relative to encode-decode format cycles Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename Identity() to ID() Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use zero value for nils in ID generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * enable source.Location to be identifiable Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * hoist up package relationship discovery to analysis stage Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update ownership-by-file-overlap relationship description Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add test reminders to put new relationships under test Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust PHP composer.lock parser function to return relationships Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:14:13 +00:00
github.com/jinzhu/copier v0.3.2
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
Catalog archive contents for single-file input (#637) * add first-level archive processing when input is a file Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add license exception for github.com/xi2/xz Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * always return cleanup function Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * change source.NewFromFile log entry to warn Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure file source always has cleanup function Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * ensure we are always preferring the unarchive cleanup function for source Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-19 14:16:25 +00:00
github.com/mholt/archiver/v3 v3.5.1
add app config and logging interface
2020-05-21 19:25:59 +00:00
github.com/mitchellh/go-homedir v1.1.0
Introduce relationships as first-class objects (#607) * migrate pkg.ID and pkg.Relationship to artifact package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * return relationships from tasks Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix more tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add artifact.Identifiable by Identity() method Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove catalog ID assignment Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust spdx helpers to use copy of packages Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * stabilize package ID relative to encode-decode format cycles Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename Identity() to ID() Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use zero value for nils in ID generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * enable source.Location to be identifiable Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * hoist up package relationship discovery to analysis stage Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update ownership-by-file-overlap relationship description Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add test reminders to put new relationships under test Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * adjust PHP composer.lock parser function to return relationships Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:14:13 +00:00
github.com/mitchellh/hashstructure/v2 v2.0.2
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/mitchellh/mapstructure v1.4.1
add default table presenter
2020-07-24 01:48:12 +00:00
github.com/olekukonko/tablewriter v0.0.4
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/pelletier/go-toml v1.9.3
add mem profile option and refactor python cataloger for batch requests Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-11 21:14:00 +00:00
github.com/pkg/profile v1.5.0
include CPEs with elementds from POM GroupId fields Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2020-12-01 12:56:44 +00:00
github.com/scylladb/go-set v1.0.2
update sterescope + add json presenter
2020-05-20 22:29:06 +00:00
github.com/sergi/go-diff v1.1.0
478 identify go binaries and extract mod information (#534) * add query by MIME type to source.FileResolver Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * import stereoscope lib changes to find mime type - add bin cataloger - add bin parser - add mime type go utils - import new resolver Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * add go std library code to unpack bin - keep them in their own (original) files - add note for "this code was copied from" - comment the lines the required changing Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-07 16:16:38 +00:00
github.com/sirupsen/logrus v1.8.1
Add SPDX support (#445) * add initial spdx support Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * expose FileOwner and use in SPDX presenter Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add initial json support for SPDX Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add remaining package fields Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add spdx license list generation + tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * keep fileOwner unexported from pkg Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * restore cli test util Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add external refs to spdx tag-value format Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add golang support to CPE generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * use tag-value format as default "spdx" format flavor Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add tests around spdx presenters + refactor presenter tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add bouncer exception for spdx tools-golang repo Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove spdx model questions Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-06-25 20:30:41 +00:00
github.com/spdx/tools-golang v0.1.0
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/spf13/afero v1.6.0
github.com/spf13/cobra v1.2.1
update pipeline with new levels of testing Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-03-18 13:01:07 +00:00
github.com/spf13/pflag v1.0.5
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
github.com/spf13/viper v1.8.1
Split UI from event handling (#448) * split UI from event handling Signed-off-by: Alex Goodman <wagoodman@gmail.com> * add event loop tests Signed-off-by: Alex Goodman <wagoodman@gmail.com> * use stereoscope cleanup function during signal handling Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * correct error wrapping in packages cmd Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate ui event handlers to ui package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * clarify command worker input var + remove dead comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-06-29 18:28:09 +00:00
github.com/stretchr/testify v1.7.0
Modify CPE vendor candidate generation approach (#484) * consider additional vendor candidates for ruby, python, rpm, npm, and java Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add java pom.xml processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * allow for downstream transform control in cpe generation processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate CPE generation logic to dedicated package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * split java manifest groupID extraction into two tiers Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract groupID from pom parent project during CPE generation Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update java groupID processing tests to cover multi-tier approach Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix constructor names for cpe.fieldCandidate Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename helper function to startsWithTopLevelDomain Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add nil changes for java manifest sections Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update comment to reflect parsing maven files Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * split out java description parsing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * split out pom parent processing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * simplify vendorsFromGroupIDs and associated tests Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * simplify test type for vendorsFromGroupIDs Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * copy candidate varidations to new instances Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * rename CPE generation string util functions Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * add an explanation around fieldCandidate Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * simplify type for the cpe.fieldCandidateSet Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * make CPE filter function names more readable Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * update groupIDsFromJavaManifest to use a guard clause Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * extract groupID extraction from artifactID fields into a separate function Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * bump goreleaser version to combat failure Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-09-03 18:21:25 +00:00
github.com/vifraa/gopom v0.1.0
Split UI from event handling (#448) * split UI from event handling Signed-off-by: Alex Goodman <wagoodman@gmail.com> * add event loop tests Signed-off-by: Alex Goodman <wagoodman@gmail.com> * use stereoscope cleanup function during signal handling Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * correct error wrapping in packages cmd Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate ui event handlers to ui package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * clarify command worker input var + remove dead comments Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-06-29 18:28:09 +00:00
github.com/wagoodman/go-partybus v0.0.0-20210627031916-db1f5573bbc5
pull in fix for bounds check progress formatting values in etui
2020-07-31 10:56:20 +00:00
github.com/wagoodman/go-progress v0.0.0-20200731105512-1020f39e6240
use smaller jotframe event buffer (#647) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-30 16:23:16 +00:00
github.com/wagoodman/jotframe v0.0.0-20211129225309-56b0d0a4aebb
replace zap logger with logrus (#116)
2020-08-01 15:56:38 +00:00
github.com/x-cray/logrus-prefixed-formatter v0.5.2
finalize json output & add schema (#118)
2020-08-04 20:05:53 +00:00
github.com/xeipuuv/gojsonschema v1.2.0
bump stereoscope, docker, and GGCR (#633) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-16 19:43:46 +00:00
golang.org/x/mod v0.4.2
golang.org/x/net v0.0.0-20211111160137-58aab5ef257a
use smaller jotframe event buffer (#647) Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2021-11-30 16:23:16 +00:00
golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b
478 identify go binaries and extract mod information (#534) * add query by MIME type to source.FileResolver Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * import stereoscope lib changes to find mime type - add bin cataloger - add bin parser - add mime type go utils - import new resolver Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> * add go std library code to unpack bin - keep them in their own (original) files - add note for "this code was copied from" - comment the lines the required changing Signed-off-by: Christopher Angelo Phillips <christopher.phillips@anchore.com> Co-authored-by: Alex Goodman <alex.goodman@anchore.com>
2021-10-07 16:16:38 +00:00
gopkg.in/yaml.v2 v2.4.0
initial project structure
2020-05-12 14:45:18 +00:00
)
Reference in a new issue Copy permalink