Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: anchore/syft
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.99.0
Choose a base ref
...
head repository: anchore/syft
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.100.0
Choose a head ref
  • 14 commits
  • 34 files changed
  • 9 contributors

Commits on Dec 22, 2023

  1. chore(deps): bump github/codeql-action from 3.22.11 to 3.22.12 (#2455) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.22.11 to 3.22.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b374143...012739e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Dec 22, 2023
    Configuration menu
    Copy the full SHA
    51a1bad View commit details
    Browse the repository at this point in the history

  2. chore(deps): update tools to latest versions (#2451) 

    Signed-off-by: GitHub <[email protected]>
Co-authored-by: spiffcs <[email protected]>
    @anchore-actions-token-generator @spiffcs
    anchore-actions-token-generator[bot] and spiffcs authored Dec 22, 2023
    Configuration menu
    Copy the full SHA
    1bc4179 View commit details
    Browse the repository at this point in the history

  3. chore(deps): update stereoscope to 590920dabc5479216e755983d41367b6be… 

    …3544f3 (#2452)

Signed-off-by: GitHub <[email protected]>
Co-authored-by: kzantow <[email protected]>
    @anchore-actions-token-generator @kzantow
    anchore-actions-token-generator[bot] and kzantow authored Dec 22, 2023
    Configuration menu
    Copy the full SHA
    04e8c96 View commit details
    Browse the repository at this point in the history

  4. Added OpenSSL binary matcher (#2416) 

    * Added OpenSSL binary matcher

Signed-off-by: Laurent Goderre <[email protected]>

* chore: strip binary to smaller detection

Signed-off-by: Christopher Phillips <[email protected]>

---------

Signed-off-by: Laurent Goderre <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
Co-authored-by: Christopher Phillips <[email protected]>
    @LaurentGoderre @spiffcs
    LaurentGoderre and spiffcs authored Dec 22, 2023
    Configuration menu
    Copy the full SHA
    63e7a00 View commit details
    Browse the repository at this point in the history

  5. Add more functionality to the ErLang parser (#2390) 

    * ERLang parser support for empty lists
* ERLang add support for single quote strings
* ERLang parser support for comments
---------
Signed-off-by: Laurent Goderre <[email protected]>
    @LaurentGoderre
    LaurentGoderre authored Dec 22, 2023
    Configuration menu
    Copy the full SHA
    3a6b656 View commit details
    Browse the repository at this point in the history

  6. chore: update binary to -x (#2456) 

    Signed-off-by: Christopher Phillips <[email protected]>
    @spiffcs
    spiffcs authored Dec 22, 2023
    Configuration menu
    Copy the full SHA
    2a04e06 View commit details
    Browse the repository at this point in the history

Commits on Jan 2, 2024

  1. chore(deps): update CPE dictionary index (#2458) 

    Signed-off-by: GitHub <[email protected]>
Co-authored-by: wagoodman <[email protected]>
    @anchore-actions-token-generator @wagoodman
    anchore-actions-token-generator[bot] and wagoodman authored Jan 2, 2024
    Configuration menu
    Copy the full SHA
    8ea2425 View commit details
    Browse the repository at this point in the history

  2. chore(deps): update tools to latest versions (#2459) 

    Signed-off-by: GitHub <[email protected]>
Co-authored-by: spiffcs <[email protected]>
    @anchore-actions-token-generator @spiffcs
    anchore-actions-token-generator[bot] and spiffcs authored Jan 2, 2024
    Configuration menu
    Copy the full SHA
    0e5fb8e View commit details
    Browse the repository at this point in the history

Commits on Jan 3, 2024

  1. fix: PURLs with "nuget" type are dotnet packages (#2466) 

    Otherwise, Grype won't match on well-formed .NET purls from other SBOM
tools.

Signed-off-by: Will Murphy <[email protected]>
    @willmurphyscode
    willmurphyscode authored Jan 3, 2024
    Configuration menu
    Copy the full SHA
    7c67df3 View commit details
    Browse the repository at this point in the history

Commits on Jan 4, 2024

  1. Replace packages command with scan (#2446) 

    * replace packages command with scan

Signed-off-by: Alex Goodman <[email protected]>

* add tests for packages alias

Signed-off-by: Alex Goodman <[email protected]>

* update comments with referenes to the packages command

Signed-off-by: Alex Goodman <[email protected]>

* rename valiadte args function

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Alex Goodman <[email protected]>
    @wagoodman
    wagoodman authored Jan 4, 2024
    Configuration menu
    Copy the full SHA
    4c20a74 View commit details
    Browse the repository at this point in the history

  2. Fix diff error obfuscating binary test failures message (#2468) 

    Signed-off-by: Laurent Goderre <[email protected]>
    @LaurentGoderre
    LaurentGoderre authored Jan 4, 2024
    Configuration menu
    Copy the full SHA
    c72d295 View commit details
    Browse the repository at this point in the history

  3. fix: add missing purl for busybox (#2457) 

    Signed-off-by: Laurent Goderre <[email protected]>
    @LaurentGoderre
    LaurentGoderre authored Jan 4, 2024
    Configuration menu
    Copy the full SHA
    bf39456 View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2024

  1. chore(deps): bump anchore/sbom-action from 0.15.1 to 0.15.2 (#2464) 

    Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.1 to 0.15.2.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@5ecf649...7191336)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Jan 5, 2024
    Configuration menu
    Copy the full SHA
    3174a17 View commit details
    Browse the repository at this point in the history

  2. Add ability to extend the binaries cataloguers (#2469) 

    * Add ability to extend the binaries cataloguers

Signed-off-by: Laurent Goderre <[email protected]>

* restrict binary classifier package attributes

Signed-off-by: Alex Goodman <[email protected]>

---------

Signed-off-by: Laurent Goderre <[email protected]>
Signed-off-by: Alex Goodman <[email protected]>
Co-authored-by: Alex Goodman <[email protected]>
    @LaurentGoderre @wagoodman
    LaurentGoderre and wagoodman authored Jan 5, 2024
    Configuration menu
    Copy the full SHA
    a16a4ad View commit details
    Browse the repository at this point in the history
Loading