Merge pull request anchore#334 from anchore/ignore-ownership

Ignore ownership for shared copyright resources

Mark package relations by file ownership (anchore#329)

* add marking package relations by file ownership

Signed-off-by: Alex Goodman <[email protected]>

* correct json schema version; ensure fileOwners dont return dups; pin test pkg versions

Signed-off-by: Alex Goodman <[email protected]>

* extract package relationships into separate section

Signed-off-by: Alex Goodman <[email protected]>

* pull in client-go features for import of PackageRelationships

Signed-off-by: Alex Goodman <[email protected]>

* move unit test for ownership by files relationship further down

Signed-off-by: Alex Goodman <[email protected]>

* rename relationship to "ownership-by-file-overlap"

Signed-off-by: Alex Goodman <[email protected]>

Merge pull request anchore#328 from anchore/issue-327

Be lenient on invalid fields in PKG-INFO

Merge pull request anchore#320 from anchore/pin-cache-action

Pin actions/cache to v2.1.3

Merge pull request anchore#316 from anchore/fix-zero-layers-panic

Bring in fix from stereoscope for zero-layers panic

Merge pull request anchore#314 from anchore/issue-291-java-parent-ref

Ensure java parent pkg ref isn't nil when looking for parent matches

Merge pull request anchore#312 from anchore/omit-empty-packages

Omit empty packages

Merge pull request anchore#308 from anchore/prefer-real-paths-on-glob…

…-results

Prefer real paths over those with links for glob results

Merge pull request anchore#305 from anchore/add-has-path-to-resolver

Add HasPath() to Resolver interface for existence check

ensure acceptance tests use existing snapshot dir

Signed-off-by: Alex Goodman <[email protected]>