mirror of
https://github.com/anchore/syft
synced 2024-11-13 23:57:07 +00:00
5374a1dc6f
* add cyclone json format Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * adapt format to sbom.SBOM structure Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * cycloneDX json output with official lib Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * add cycloneDX 1.3 schema output in xml Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * fix lints errors Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * tidying go mod Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * remove cycloneDX 1.2 format Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * update cycloneDX xml schema Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * fix cyclone according to schema Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * use RFC 2141 URN form of uuid for serial number add schema validation for cycloneDX 1.3 JSON output add yajsv cli for JSON schema validation during tests Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * tidying go mod up Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * go get json schema validator Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * install yajsv without mess with go mod Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * reuse code between cycloneDX json & xml encoders Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * add output options for cyclone XML add bom.json to .gitignore Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * add cyclone json format Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * adapt format to sbom.SBOM structure Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * cycloneDX json output with official lib Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * add cycloneDX 1.3 schema output in xml Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * fix lints errors Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * tidying go mod Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * remove cycloneDX 1.2 format Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * update cycloneDX xml schema Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * fix cyclone according to schema Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * use RFC 2141 URN form of uuid for serial number add schema validation for cycloneDX 1.3 JSON output add yajsv cli for JSON schema validation during tests Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * tidying go mod up Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * go get json schema validator Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * install yajsv without mess with go mod Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * reuse code between cycloneDX json & xml encoders Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * add output options for cyclone XML add bom.json to .gitignore Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * fix cyclone12xml removal Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * feedback changes Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com> * go mod tidy Signed-off-by: Jonas Galvão Xavier <jonas.agx@gmail.com>
59 lines
2.5 KiB
Modula-2
59 lines
2.5 KiB
Modula-2
module github.com/anchore/syft
|
|
|
|
go 1.16
|
|
|
|
require (
|
|
github.com/CycloneDX/cyclonedx-go v0.4.0
|
|
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d
|
|
github.com/adrg/xdg v0.2.1
|
|
github.com/alecthomas/jsonschema v0.0.0-20210301060011-54c507b6f074
|
|
github.com/anchore/client-go v0.0.0-20210222170800-9c70f9b80bcf
|
|
github.com/anchore/go-presenter v0.0.0-20211102174526-0dbf20f6c7fa
|
|
github.com/anchore/go-rpmdb v0.0.0-20210914181456-a9c52348da63
|
|
github.com/anchore/go-testutils v0.0.0-20200925183923-d5f45b0d3c04
|
|
github.com/anchore/go-version v1.2.2-0.20200701162849-18adb9c92b9b
|
|
github.com/anchore/packageurl-go v0.0.0-20210922164639-b3fa992ebd29
|
|
github.com/anchore/stereoscope v0.0.0-20211203160213-5a5e323a5c89
|
|
// we are hinting brotli to latest due to warning when installing archiver v3:
|
|
// go: warning: github.com/andybalholm/brotli@v1.0.1: retracted by module author: occasional panics and data corruption
|
|
github.com/andybalholm/brotli v1.0.4 // indirect
|
|
github.com/antihax/optional v1.0.0
|
|
github.com/bmatcuk/doublestar/v2 v2.0.4
|
|
github.com/docker/docker v20.10.11+incompatible
|
|
github.com/dustin/go-humanize v1.0.0
|
|
github.com/facebookincubator/nvdtools v0.1.4
|
|
github.com/go-test/deep v1.0.7
|
|
github.com/google/go-cmp v0.5.6
|
|
github.com/google/uuid v1.2.0
|
|
github.com/gookit/color v1.2.7
|
|
github.com/hashicorp/go-multierror v1.1.0
|
|
github.com/hashicorp/go-version v1.2.0
|
|
github.com/jinzhu/copier v0.3.2
|
|
github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
|
|
github.com/mholt/archiver/v3 v3.5.1
|
|
github.com/mitchellh/go-homedir v1.1.0
|
|
github.com/mitchellh/hashstructure/v2 v2.0.2
|
|
github.com/mitchellh/mapstructure v1.4.1
|
|
github.com/olekukonko/tablewriter v0.0.4
|
|
github.com/pelletier/go-toml v1.9.3
|
|
github.com/pkg/profile v1.5.0
|
|
github.com/scylladb/go-set v1.0.2
|
|
github.com/sergi/go-diff v1.1.0
|
|
github.com/sirupsen/logrus v1.8.1
|
|
github.com/spdx/tools-golang v0.1.0
|
|
github.com/spf13/afero v1.6.0
|
|
github.com/spf13/cobra v1.2.1
|
|
github.com/spf13/pflag v1.0.5
|
|
github.com/spf13/viper v1.8.1
|
|
github.com/stretchr/testify v1.7.0
|
|
github.com/vifraa/gopom v0.1.0
|
|
github.com/wagoodman/go-partybus v0.0.0-20210627031916-db1f5573bbc5
|
|
github.com/wagoodman/go-progress v0.0.0-20200731105512-1020f39e6240
|
|
github.com/wagoodman/jotframe v0.0.0-20211129225309-56b0d0a4aebb
|
|
github.com/x-cray/logrus-prefixed-formatter v0.5.2
|
|
github.com/xeipuuv/gojsonschema v1.2.0
|
|
golang.org/x/mod v0.4.2
|
|
golang.org/x/net v0.0.0-20211111160137-58aab5ef257a
|
|
golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b
|
|
gopkg.in/yaml.v2 v2.4.0
|
|
)
|