Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/syft
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.30.1
Choose a base ref
...
head repository: anchore/syft
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.31.0
Choose a head ref
  • 18 commits
  • 176 files changed
  • 5 contributors

Commits on Nov 16, 2021

  1. Introduce relationships as first-class objects (#607) 

    * migrate pkg.ID and pkg.Relationship to artifact package

Signed-off-by: Alex Goodman <[email protected]>

* return relationships from tasks

Signed-off-by: Alex Goodman <[email protected]>

* fix more tests

Signed-off-by: Alex Goodman <[email protected]>

* add artifact.Identifiable by Identity() method

Signed-off-by: Alex Goodman <[email protected]>

* fix linting

Signed-off-by: Alex Goodman <[email protected]>

* remove catalog ID assignment

Signed-off-by: Alex Goodman <[email protected]>

* adjust spdx helpers to use copy of packages

Signed-off-by: Alex Goodman <[email protected]>

* stabilize package ID relative to encode-decode format cycles

Signed-off-by: Alex Goodman <[email protected]>

* rename Identity() to ID()

Signed-off-by: Alex Goodman <[email protected]>

* use zero value for nils in ID generation

Signed-off-by: Alex Goodman <[email protected]>

* enable source.Location to be identifiable

Signed-off-by: Alex Goodman <[email protected]>

* hoist up package relationship discovery to analysis stage

Signed-off-by: Alex Goodman <[email protected]>

* update ownership-by-file-overlap relationship description

Signed-off-by: Alex Goodman <[email protected]>

* add test reminders to put new relationships under test

Signed-off-by: Alex Goodman <[email protected]>

* adjust PHP composer.lock parser function to return relationships

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 16, 2021
    Configuration menu
    Copy the full SHA
    ef627d8 View commit details
    Browse the repository at this point in the history

  2. bump stereoscope, docker, and GGCR (#633) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 16, 2021
    Configuration menu
    Copy the full SHA
    9090c3a View commit details
    Browse the repository at this point in the history

Commits on Nov 18, 2021

  1. Introduce minimal source coordinates (#623) 

    * split source.Location and create source.Coordinates for minimal path addressing

Signed-off-by: Alex Goodman <[email protected]>

* move coordinates into separate file

Signed-off-by: Alex Goodman <[email protected]>

* Update syft/source/coordinates.go

Co-authored-by: Dan Luhring <[email protected]>
    @wagoodman @luhring
    wagoodman and luhring authored Nov 18, 2021
    Configuration menu
    Copy the full SHA
    e38cde3 View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2021

  1. Catalog archive contents for single-file input (#637) 

    * add first-level archive processing when input is a file

Signed-off-by: Alex Goodman <[email protected]>

* add license exception for github.com/xi2/xz

Signed-off-by: Alex Goodman <[email protected]>

* always return cleanup function

Signed-off-by: Alex Goodman <[email protected]>

* change source.NewFromFile log entry to warn

Signed-off-by: Alex Goodman <[email protected]>

* ensure file source always has cleanup function

Signed-off-by: Alex Goodman <[email protected]>

* ensure we are always preferring the unarchive cleanup function for source

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 19, 2021
    Configuration menu
    Copy the full SHA
    d76c868 View commit details
    Browse the repository at this point in the history

  2. promote catalog task pattern to all commands (#636) 

    Signed-off-by: Christopher Angelo Phillips <[email protected]>
    @spiffcs
    spiffcs authored Nov 19, 2021
    Configuration menu
    Copy the full SHA
    4f00995 View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2021

  1. Update concurrency primitives for relationships in command layer (#639) 

    * update concurrency primitives for relationships in command layer

Signed-off-by: Christopher Angelo Phillips <[email protected]>
    @spiffcs
    spiffcs authored Nov 20, 2021
    Configuration menu
    Copy the full SHA
    0849539 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2021

  1. Announce meetup on 2021-12-01 (#640) 

    Signed-off-by: Dan Luhring <[email protected]>
    @luhring
    luhring authored Nov 22, 2021
    Configuration menu
    Copy the full SHA
    f0b2d81 View commit details
    Browse the repository at this point in the history

  2. ignore partybus unsubscribe errors (#641) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 22, 2021
    Configuration menu
    Copy the full SHA
    e3b3481 View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2021

  1. Migrate SPDX-JSON relationships to SBOM model (#634) 

    * remove power-user document shape

Signed-off-by: Alex Goodman <[email protected]>

* add power-user specific fields to syft-json format

Signed-off-by: Alex Goodman <[email protected]>

* port remaining spdx-json relationships to sbom model

Signed-off-by: Alex Goodman <[email protected]>

* add coordinate set

Signed-off-by: Alex Goodman <[email protected]>

* add SBOM file path helper

Signed-off-by: Alex Goodman <[email protected]>

* use internal mimetype helper in go binary cataloger

Signed-off-by: Alex Goodman <[email protected]>

* add new package-of relationship

Signed-off-by: Alex Goodman <[email protected]>

* update json schema to v2

Signed-off-by: Alex Goodman <[email protected]>

* replace power-user presenter with syft-json format

Signed-off-by: Alex Goodman <[email protected]>

* fix tests and linting

Signed-off-by: Alex Goodman <[email protected]>

* remove "package-of" relationship (in favor of "contains")

Signed-off-by: Alex Goodman <[email protected]>

* add tests for spdx22json format encoding enhancements

Signed-off-by: Alex Goodman <[email protected]>

* update TODO and log entries

Signed-off-by: Alex Goodman <[email protected]>

* introduce sbom.Descriptor

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 23, 2021
    Configuration menu
    Copy the full SHA
    bd9007f View commit details
    Browse the repository at this point in the history

Commits on Nov 30, 2021

  1. use smaller jotframe event buffer (#647) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 30, 2021
    Configuration menu
    Copy the full SHA
    0020623 View commit details
    Browse the repository at this point in the history

  2. Adds composer installed.json parser (#643) 

    * Adds installed.json functionality and tests

Signed-off-by: Blaize Kaye <[email protected]>

* Adds php-installed-cataloger

Signed-off-by: Blaize Kaye <[email protected]>

* Changes fallback logic

Signed-off-by: Blaize Kaye <[email protected]>

* Adds image tests for installed.json composer packages

Signed-off-by: Blaize Kaye <[email protected]>

* tweak PHP cataloger names

Signed-off-by: Alex Goodman <[email protected]>

* unexport PHP types and fix CLI tests

Signed-off-by: Alex Goodman <[email protected]>

* rename PHP cataloger file

Signed-off-by: Alex Goodman <[email protected]>

Co-authored-by: Alex Goodman <[email protected]>
    @bomoko @wagoodman
    bomoko and wagoodman authored Nov 30, 2021
    Configuration menu
    Copy the full SHA
    6af132e View commit details
    Browse the repository at this point in the history

  3. directory resolver should account for the proc cwd relative to the ro… 

    …ot path (#644)

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Nov 30, 2021
    Configuration menu
    Copy the full SHA
    fe616ac View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2021

  1. Remove webinar announcement (#650) 

    Signed-off-by: Dan Luhring <[email protected]>
    @luhring
    luhring authored Dec 1, 2021
    Configuration menu
    Copy the full SHA
    ed84e43 View commit details
    Browse the repository at this point in the history

Commits on Dec 2, 2021

  1. fix directory content fetching (#651) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Dec 2, 2021
    Configuration menu
    Copy the full SHA
    21d1738 View commit details
    Browse the repository at this point in the history

  2. Fix SPDX namespace value (#649) 

    * fix spdx namespace and add scheme range assertions

Signed-off-by: Alex Goodman <[email protected]>

* validate SPDX document name from source metadata

Signed-off-by: Alex Goodman <[email protected]>

* comment why namespace tests only check prefix

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Dec 2, 2021
    Configuration menu
    Copy the full SHA
    da62387 View commit details
    Browse the repository at this point in the history

  3. reduce relationship noise (#653) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Dec 2, 2021
    Configuration menu
    Copy the full SHA
    5aec918 View commit details
    Browse the repository at this point in the history

  4. update stereoscope to bump docker dependency (#648) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Dec 2, 2021
    Configuration menu
    Copy the full SHA
    ffccfc8 View commit details
    Browse the repository at this point in the history

Commits on Dec 3, 2021

  1. bump containerd and image-spec (#654) 

    Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Dec 3, 2021
    Configuration menu
    Copy the full SHA
    22c4b27 View commit details
    Browse the repository at this point in the history
Loading