Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/grype
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.63.1
Choose a base ref
...
head repository: anchore/grype
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.64.2
Choose a head ref
  • 15 commits
  • 124 files changed
  • 7 contributors

Commits on Jul 5, 2023

  1. chore(deps): update bootstrap tools to latest versions (#1368) 

    Signed-off-by: GitHub <[email protected]>
Co-authored-by: westonsteimel <[email protected]>
    @anchore-actions-token-generator @westonsteimel
    anchore-actions-token-generator[bot] and westonsteimel authored Jul 5, 2023
    Configuration menu
    Copy the full SHA
    116dc4a View commit details
    Browse the repository at this point in the history

  2. chore: bump quality gate labels and images (#1374) 

    Signed-off-by: Weston Steimel <[email protected]>
    @westonsteimel
    westonsteimel authored Jul 5, 2023
    Configuration menu
    Copy the full SHA
    74a7185 View commit details
    Browse the repository at this point in the history

Commits on Jul 6, 2023

  1. chore(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 (#1375) 

    Bumps [golang.org/x/term](https://github.com/golang/term) from 0.9.0 to 0.10.0.
- [Commits](golang/term@v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 6, 2023
    Configuration menu
    Copy the full SHA
    7545e88 View commit details
    Browse the repository at this point in the history

  2. Port to new syft source API (#1376) 

    * port to new syft source API

Signed-off-by: Alex Goodman <[email protected]>

* fix linting

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Jul 6, 2023
    Configuration menu
    Copy the full SHA
    64e9c9c View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2023

  1. chore(deps): bump github.com/docker/docker (#1382) 

    Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.2+incompatible to 24.0.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v24.0.2...v24.0.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 10, 2023
    Configuration menu
    Copy the full SHA
    9ac9bdd View commit details
    Browse the repository at this point in the history

  2. chore(deps): update bootstrap tools to latest versions (#1381) 

    Signed-off-by: GitHub <[email protected]>
Co-authored-by: westonsteimel <[email protected]>
    @anchore-actions-token-generator @westonsteimel
    anchore-actions-token-generator[bot] and westonsteimel authored Jul 10, 2023
    Configuration menu
    Copy the full SHA
    d6bd01a View commit details
    Browse the repository at this point in the history

Commits on Jul 11, 2023

  1. Remove Docker section from DEVELOPING.md (#1384) 

    Developing in Docker is no longer explicitly supported. Update
developing docs to reflect this.

Signed-off-by: Will Murphy <[email protected]>
    @willmurphyscode
    willmurphyscode authored Jul 11, 2023
    Configuration menu
    Copy the full SHA
    6834e21 View commit details
    Browse the repository at this point in the history

  2. feat(outputs): allow to set multiple outputs (#648) (#1346) 

    * feat(outputs): allow to set multiple outputs (#648)

Signed-off-by: Olivier Boudet <[email protected]>
Signed-off-by: Olivier Boudet <[email protected]>
Signed-off-by: Alex Goodman <[email protected]>

* feat(outputs): allow to set multiple outputs (#648)

review

Signed-off-by: Olivier Boudet <[email protected]>
Signed-off-by: Alex Goodman <[email protected]>

* use syft format writter pattern and de-emphasize presenter package

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Olivier Boudet <[email protected]>
Signed-off-by: Olivier Boudet <[email protected]>
Signed-off-by: Alex Goodman <[email protected]>
Co-authored-by: Alex Goodman <[email protected]>
    @olivierboudet @wagoodman
    olivierboudet and wagoodman authored Jul 11, 2023
    Configuration menu
    Copy the full SHA
    9050883 View commit details
    Browse the repository at this point in the history

Commits on Jul 13, 2023

  1. chore(deps): update Syft to v0.85.0 (#1383)

    @anchore-actions-token-generator
    anchore-actions-token-generator[bot] authored Jul 13, 2023
    Configuration menu
    Copy the full SHA
    37f436c View commit details
    Browse the repository at this point in the history

  2. Port UI to bubbletea (#1385) 

    * initial port to bubbletea

Signed-off-by: Alex Goodman <[email protected]>

* remove jotframe UI

Signed-off-by: Alex Goodman <[email protected]>

* add bubbletea component tests

Signed-off-by: Alex Goodman <[email protected]>

* update main.go refs to cmd package

Signed-off-by: Alex Goodman <[email protected]>

* move goreleaser build dir to cmd

Signed-off-by: Alex Goodman <[email protected]>

* upgrade yardstick for grype source installs and fix post-ui tests

Signed-off-by: Alex Goodman <[email protected]>

* ensure stable severity map in UI component test

Signed-off-by: Alex Goodman <[email protected]>

* add windows support for tui

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Jul 13, 2023
    Configuration menu
    Copy the full SHA
    ebd4643 View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2023

  1. chore(deps): bump github.com/gkampitakis/go-snaps from 0.4.7 to 0.4.8 (… 

    …#1389)

Bumps [github.com/gkampitakis/go-snaps](https://github.com/gkampitakis/go-snaps) from 0.4.7 to 0.4.8.
- [Release notes](https://github.com/gkampitakis/go-snaps/releases)
- [Commits](gkampitakis/go-snaps@v0.4.7...v0.4.8)

---
updated-dependencies:
- dependency-name: github.com/gkampitakis/go-snaps
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jul 17, 2023
    Configuration menu
    Copy the full SHA
    5a8ea73 View commit details
    Browse the repository at this point in the history

  2. Pass correct output file (#1391) 

    Previously, the wrong path would get passed, and the template file would
get truncated.

Signed-off-by: Will Murphy <[email protected]>
    @willmurphyscode
    willmurphyscode authored Jul 17, 2023
    Configuration menu
    Copy the full SHA
    43bcf30 View commit details
    Browse the repository at this point in the history

Commits on Jul 18, 2023

  1. Refactor integ test to table test (#1390) 

    To make it easier to see which tests fail if there's a failure.

Signed-off-by: Will Murphy <[email protected]>
    @willmurphyscode
    willmurphyscode authored Jul 18, 2023
    Configuration menu
    Copy the full SHA
    e347e03 View commit details
    Browse the repository at this point in the history

  2. chore: bump yardstick to address PyYAML cython compatibility issues (#… 

    …1394)

Signed-off-by: Weston Steimel <[email protected]>
    @westonsteimel
    westonsteimel authored Jul 18, 2023
    Configuration menu
    Copy the full SHA
    03d18a5 View commit details
    Browse the repository at this point in the history

Commits on Jul 19, 2023

  1. fix: vulnerabilities should be printed when --fail-on fails (#1395) 

    Stop terminating the UI early if the error is that the "--fail-on" threshold failed.

Signed-off-by: Will Murphy <[email protected]>
    @willmurphyscode
    willmurphyscode authored Jul 19, 2023
    Configuration menu
    Copy the full SHA
    e09bae3 View commit details
    Browse the repository at this point in the history
Loading