Christopher Angelo Phillips
4c5c6f6319
fix: update ci secret to use new password ( #1304 )
2022-11-01 14:30:29 +00:00
Christopher Angelo Phillips
1b69fbd566
fix: update secret value to use new cert cahin ( #1303 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
2022-11-01 00:05:40 +00:00
Christopher Angelo Phillips
7ed91c0e31
fix: verbose quill release failures ( #1302 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
2022-10-31 22:21:30 +00:00
Christopher Angelo Phillips
8e2fc29bc7
fix: unterminated quoted string ( #1300 )
...
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
2022-10-31 20:07:43 +00:00
Christopher Angelo Phillips
e9fbc38064
fix: update Makefile to remove old signing arch ( #1299 )
2022-10-31 18:56:30 +00:00
Christopher Angelo Phillips
edeba9c01c
feat: add nodejs-binary package classifier ( #1296 )
2022-10-31 16:45:11 +00:00
Weston Steimel
919c929798
update go-rpmdb to improve parsing of installed files ( #1297 )
2022-10-30 23:55:17 -04:00
Nick Piper
91f4467a1f
docs: update attestation directions with new cosign changes
2022-10-29 20:18:53 +00:00
Keith Zantow
c489c37e35
fix: Continue parsing Python RECORD files when bad lines encountered ( #1295 )
2022-10-29 15:45:59 -04:00
Marc-Etienne Vargenau
dd89461ba3
Fix #1245 Update SPDX license list to 3.18 ( #1259 )
...
* Fix #1245 Update SPDX license list to 3.18
Signed-off-by: Marc-Etienne Vargenau <marc-etienne.vargenau@nokia.com>
2022-10-27 23:46:54 -04:00
Rob Tompkins
fb388c0f25
fix: Resolve Maven POM expressions ( #1251 ) ( #1278 )
2022-10-27 13:01:07 -04:00
Alex Goodman
e52aa3bc03
port haskell cataloger to new generic cataloger pattern ( #1290 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-27 11:30:22 -04:00
Alex Goodman
6826d7603b
port golang cataloger to new generic cataloger pattern ( #1289 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-25 16:42:50 +00:00
Alex Goodman
52cb7269bf
port deb/dpkg cataloger to new generic cataloger pattern ( #1288 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-25 15:47:32 +00:00
Alex Goodman
bd5adbc9b3
update cataloger tests to use pkgtest utils ( #1287 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-25 11:20:02 -04:00
Alex Goodman
c7a653060d
port dotnet cataloger to new generic cataloger pattern ( #1286 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-24 21:17:27 +00:00
Alex Goodman
fbdde6d4f4
port dart cataloger to new generic cataloger pattern ( #1285 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-24 20:37:42 +00:00
Alex Goodman
eb8ebd9ffc
port conan cataloger to new generic cataloger pattern ( #1284 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-24 20:11:20 +00:00
Alex Goodman
f36c0ca971
port apk cataloger to new generic cataloger pattern ( #1283 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-24 13:51:09 -04:00
Alex Goodman
28cadfdb5d
replace signing tooling with quill ( #1280 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-24 13:03:10 -04:00
Alex Goodman
b44f441c82
Upgrade generic cataloger ( #1281 )
...
* add second generation of generic cataloger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* upgrade aplm cataloger to use generic.Cataloger
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
* remove pacakge found-by attribute from the definition of a package ID
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-24 11:12:12 -04:00
anchore-actions-token-generator[bot]
7a8b96abc2
Update syft bootstrap tools to latest versions. ( #1282 )
...
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
2022-10-24 10:17:06 -04:00
Alex Goodman
d8c659b65b
replace logger interface with anchore/go-logger ( #1279 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-21 15:12:14 +00:00
anchore-actions-token-generator[bot]
5568cc0dd5
Update syft bootstrap tools to latest versions. ( #1267 )
2022-10-21 09:42:13 -04:00
Keith Zantow
78a0af2e2d
Add go binary h1 digest to SPDX ( #1265 )
2022-10-19 16:33:10 -04:00
Christopher Angelo Phillips
6e764815d0
fix: move reproduction to top of issue ( #1264 )
2022-10-19 12:51:38 -04:00
Christopher Angelo Phillips
ec229b993c
fix: update syftjson ID to match major schema version ( #1274 )
2022-10-19 16:08:38 +00:00
Arnaud J Le Hors
d3ee24017e
Use in-toto CycloneDX predicate to be compatible with cosign ( #1270 )
...
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
2022-10-19 09:37:52 -04:00
Marc-Etienne Vargenau
e2d06cecb7
chore: handle deprecated SPDX license: StandardML-NJ ( #1266 )
2022-10-17 13:45:36 -04:00
Marc-Etienne Vargenau
41bc6bb410
Fixes #1179 Deprecated SPDX license ( #1263 )
2022-10-14 15:54:57 -04:00
Christopher Angelo Phillips
89575199b8
feat: add RelationshipsBySourceOwnership to syft json output ( #1248 )
2022-10-11 15:11:03 -04:00
Christopher Angelo Phillips
fa0b3c0438
fix: reset merged package into map; ( #1258 )
2022-10-11 18:35:46 +00:00
Keith Zantow
780e1c310c
refactor: Remove experimental Anchore Enterprise upload functionality ( #1257 )
2022-10-10 16:16:47 -04:00
anchore-actions-token-generator[bot]
d89e320dcd
Update syft bootstrap tools to latest versions. ( #1254 )
2022-10-07 13:54:42 -04:00
anchore-actions-token-generator[bot]
71187c6416
Update Stereoscope to d24c9d626b33fa720210b007a20767801827b532 ( #1253 )
...
Co-authored-by: westonsteimel <westonsteimel@users.noreply.github.com>
2022-10-06 22:04:49 -04:00
anchore-actions-token-generator[bot]
58504d5bf3
Update syft bootstrap tools to latest versions. ( #1244 )
...
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
2022-10-06 08:38:36 +00:00
Alex Goodman
48f0a4680f
fix apkdb checksum representation ( #1247 )
...
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
2022-10-05 16:29:05 -04:00
Christopher Angelo Phillips
7d2fe9d95e
feat: add identifiable field to source object ( #1243 )
2022-10-05 14:01:40 -04:00
Adam Hughes
40d294a89e
feat: attest support for Singularity images ( #1201 )
2022-10-04 12:34:59 -04:00
anchore-actions-token-generator[bot]
91eece47ff
Update syft bootstrap tools to latest versions. ( #1239 )
...
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
2022-10-04 10:18:21 +01:00
anchore-actions-token-generator[bot]
1fa4bab7a7
Update Stereoscope to 1b1b744a919964f38d14e1416fb3f25221b761ce ( #1240 )
...
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
2022-10-04 10:17:29 +01:00
Keith Zantow
4d2f18218c
fix: Follow symlinks when searching for globs in all-layers scope ( #1221 )
2022-09-30 13:01:08 -04:00
Christopher Angelo Phillips
dd7c654ed0
update requires to use list; remove field ( #1234 )
2022-09-30 11:57:13 -04:00
Hiroaki KAWAI
b9b13d5525
Add Conan (C/C++) conan.lock file support ( #1230 )
...
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
2022-09-29 18:45:59 +00:00
Christopher Angelo Phillips
e6502536a7
add sequence diagrams and flesh out TODO notes ( #1233 )
2022-09-28 13:05:49 -04:00
Keith Zantow
6a40dbf765
Do not fail if unable to parse .rpm
file ( #1232 )
2022-09-28 11:26:06 -04:00
Keith Zantow
16c62a1378
fix: support exclude patterns on Windows ( #1228 )
2022-09-26 10:59:19 -04:00
anchore-actions-token-generator[bot]
30e8c4ab8e
Update syft bootstrap tools to latest versions. ( #1225 )
2022-09-23 09:26:30 -04:00
anchore-actions-token-generator[bot]
911242accc
Update Stereoscope to 56552770e555d764ea72b99d3c810326b27ead4a ( #1224 )
...
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
2022-09-22 10:44:52 +01:00
anchore-actions-token-generator[bot]
ab6e1c4dc3
Update syft bootstrap tools to latest versions. ( #1223 )
...
Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
2022-09-22 10:41:36 +01:00