Merge pull request anchore#414 from anchore/fix-leaky-fds

Close all ReadClosers explicitly retrieved from resolvers

Merge pull request anchore#406 from anchore/align-check-names-to-qual…

…ity-gate

Align check names to release quality gate

Merge pull request anchore#405 from anchore/add-jenkins-filter

Add for known bad CPE field combinations for jenkins package

Merge pull request anchore#348 from anchore/fix-java-pom-properties-p…

…arse-delimiter

Allow for multiple pom.properties delimiters

Merge pull request anchore#334 from anchore/ignore-ownership

Ignore ownership for shared copyright resources

Mark package relations by file ownership (anchore#329)

* add marking package relations by file ownership

Signed-off-by: Alex Goodman <[email protected]>

* correct json schema version; ensure fileOwners dont return dups; pin test pkg versions

Signed-off-by: Alex Goodman <[email protected]>

* extract package relationships into separate section

Signed-off-by: Alex Goodman <[email protected]>

* pull in client-go features for import of PackageRelationships

Signed-off-by: Alex Goodman <[email protected]>

* move unit test for ownership by files relationship further down

Signed-off-by: Alex Goodman <[email protected]>

* rename relationship to "ownership-by-file-overlap"

Signed-off-by: Alex Goodman <[email protected]>

Merge pull request anchore#328 from anchore/issue-327

Be lenient on invalid fields in PKG-INFO

Merge pull request anchore#320 from anchore/pin-cache-action

Pin actions/cache to v2.1.3

Merge pull request anchore#316 from anchore/fix-zero-layers-panic

Bring in fix from stereoscope for zero-layers panic

Merge pull request anchore#314 from anchore/issue-291-java-parent-ref

Ensure java parent pkg ref isn't nil when looking for parent matches