Merge pull request anchore#428 from anchore/self-extracting-jar

Add support for processing files with prepended bytes before the zip archive

Fix go mod tidy release problem (anchore#422)

* Add go mod tidy check

Signed-off-by: Dan Luhring <[email protected]>

* Run go mod tidy

Signed-off-by: Dan Luhring <[email protected]>

Add config option for import timeout (anchore#421)

Signed-off-by: Dan Luhring <[email protected]>

Merge pull request anchore#414 from anchore/fix-leaky-fds

Close all ReadClosers explicitly retrieved from resolvers

Merge pull request anchore#406 from anchore/align-check-names-to-qual…

…ity-gate

Align check names to release quality gate

Merge pull request anchore#405 from anchore/add-jenkins-filter

Add for known bad CPE field combinations for jenkins package

Merge pull request anchore#348 from anchore/fix-java-pom-properties-p…

…arse-delimiter

Allow for multiple pom.properties delimiters

Merge pull request anchore#334 from anchore/ignore-ownership

Ignore ownership for shared copyright resources

Mark package relations by file ownership (anchore#329)

* add marking package relations by file ownership

Signed-off-by: Alex Goodman <[email protected]>

* correct json schema version; ensure fileOwners dont return dups; pin test pkg versions

Signed-off-by: Alex Goodman <[email protected]>

* extract package relationships into separate section

Signed-off-by: Alex Goodman <[email protected]>

* pull in client-go features for import of PackageRelationships

Signed-off-by: Alex Goodman <[email protected]>

* move unit test for ownership by files relationship further down

Signed-off-by: Alex Goodman <[email protected]>

* rename relationship to "ownership-by-file-overlap"

Signed-off-by: Alex Goodman <[email protected]>

Merge pull request anchore#328 from anchore/issue-327

Be lenient on invalid fields in PKG-INFO