Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/syft
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.76.0
Choose a base ref
...
head repository: anchore/syft
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.77.0
Choose a head ref
  • 16 commits
  • 56 files changed
  • 10 contributors

Commits on Apr 3, 2023

  1. chore: update deprecated set-output calls (#1705) 

    Signed-off-by: Keith Zantow <kzantow@gmail.com>
    @kzantow
    kzantow authored Apr 3, 2023
    Configuration menu
    Copy the full SHA
    2022ffa View commit details
    Browse the repository at this point in the history

  2. Capture file ownership relationships from portage ecosystem (#1702) 

    * add portage as file owners

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix linting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json schema with NPM files

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

---------

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
    @wagoodman
    wagoodman authored Apr 3, 2023
    Configuration menu
    Copy the full SHA
    681d250 View commit details
    Browse the repository at this point in the history

  3. refactor spdx tooling test to reduce intermittent failures (#1707) 

    Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
    @wagoodman
    wagoodman authored Apr 3, 2023
    Configuration menu
    Copy the full SHA
    8a574c9 View commit details
    Browse the repository at this point in the history

Commits on Apr 4, 2023

  1. Add Nix cataloger (#1696) 

    * Add Basic Nix Cataloger

Signed-off-by: Julio Tain Sueiras <juliosueiras@gmail.com>

* Update nix def for the latest syft definition

Signed-off-by: Julio Tain Sueiras <juliosueiras@gmail.com>

* capture nix package files on pkg.NixStoreMetadata

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix unit tests and linting

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update JSON schema

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* address review comments

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* Update syft/pkg/cataloger/nix/parse_nix_store_path_test.go

Co-authored-by: Florian Klink <flokli@flokli.de>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* support unstable version conventions

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update json schema relative to main branch

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* update syft json with v7.1.1 schema

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* fix CLI tests

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* remove extra continue statement

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

* add Nix to list of supported ecosystems

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

---------

Signed-off-by: Julio Tain Sueiras <juliosueiras@gmail.com>
Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
Co-authored-by: Julio Tain Sueiras <juliosueiras@gmail.com>
Co-authored-by: Florian Klink <flokli@flokli.de>
    @wagoodman @juliosueiras @flokli
    3 people authored Apr 4, 2023
    Configuration menu
    Copy the full SHA
    7464079 View commit details
    Browse the repository at this point in the history

Commits on Apr 5, 2023

  1. chore: update tools-golang to v0.5.0 (#1717) 

    Signed-off-by: Keith Zantow <kzantow@gmail.com>
    @kzantow
    kzantow authored Apr 5, 2023
    Configuration menu
    Copy the full SHA
    7845381 View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump peter-evans/create-pull-request from 4 to 5 (#1712) 

    Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 4 to 5.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 5, 2023
    Configuration menu
    Copy the full SHA
    394ec8d View commit details
    Browse the repository at this point in the history

Commits on Apr 6, 2023

  1. chore(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#1716) 

    Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 6, 2023
    Configuration menu
    Copy the full SHA
    f7ac4e9 View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#1714)

    @dependabot
    dependabot[bot] authored Apr 6, 2023
    Configuration menu
    Copy the full SHA
    99c28a9 View commit details
    Browse the repository at this point in the history

  3. chore(deps): bump golang.org/x/mod from 0.9.0 to 0.10.0 (#1713)

    @dependabot
    dependabot[bot] authored Apr 6, 2023
    Configuration menu
    Copy the full SHA
    4a499c9 View commit details
    Browse the repository at this point in the history

  4. chore(deps): bump github.com/docker/docker (#1715)

    @dependabot
    dependabot[bot] authored Apr 6, 2023
    Configuration menu
    Copy the full SHA
    da44db9 View commit details
    Browse the repository at this point in the history

  5. feat: gradle lockfile support (#1719) 

    Signed-off-by: Henry Sachs <Henry.Sachs@deutschebahn.com>
    @henrysachs
    henrysachs authored Apr 6, 2023
    Configuration menu
    Copy the full SHA
    0fed17f View commit details
    Browse the repository at this point in the history

Commits on Apr 7, 2023

  1. chore(deps): update stereoscope to e95d60a265e384df29b7a139f5c5402d6a… 

    …d72e06 (#1721)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: kzantow <kzantow@users.noreply.github.com>
    @anchore-actions-token-generator @kzantow
    anchore-actions-token-generator[bot] and kzantow authored Apr 7, 2023
    Configuration menu
    Copy the full SHA
    f83cae3 View commit details
    Browse the repository at this point in the history

  2. chore(deps): bump golang.org/x/net from 0.8.0 to 0.9.0 (#1722) 

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](golang/net@v0.8.0...v0.9.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 7, 2023
    Configuration menu
    Copy the full SHA
    a260fb2 View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2023

  1. add highlevel details about catalogers (#1726) 

    Signed-off-by: Alex Goodman <alex.goodman@anchore.com>
    @wagoodman
    wagoodman authored Apr 10, 2023
    Configuration menu
    Copy the full SHA
    3058385 View commit details
    Browse the repository at this point in the history

Commits on Apr 11, 2023

  1. Add support for nar files. (#1727) 

    - Update README.md to show that nar is now supported.
- Created a java-archives/example.nar so that the tests wouldn't break.
- Add nar glob and as an option for pkgType.

Closes #1701

Signed-off-by: Shane Dell <shanedell100@gmail.com>
    @shanedell
    shanedell authored Apr 11, 2023
    Configuration menu
    Copy the full SHA
    16ebcb2 View commit details
    Browse the repository at this point in the history

  2. chore(deps): update bootstrap tools to latest versions (#1728) 

    Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: spiffcs <spiffcs@users.noreply.github.com>
    @anchore-actions-token-generator @spiffcs
    anchore-actions-token-generator[bot] and spiffcs authored Apr 11, 2023
    Configuration menu
    Copy the full SHA
    dd30c99 View commit details
    Browse the repository at this point in the history
Loading