v0.15.1

Changelog

v0.15.1 (2021-04-22)

Full Changelog

Implemented enhancements:

• Account for known mappings of package name to CPE products #393
• Implement binary package identification #372
• Report package DB verification metadata #371
• Implement selective "retrieve files" cataloger #369
• Add hyphen replacement in CPE generator #361
• Cataloger for Rust crates from Cargo.lock #338
• Add file metadata cataloger #335
• Introduce an additional command line switch so that syft command understands I am passing a directory #277
• Add for known bad CPE field combinations for jenkins package #405 (wagoodman)
• Add additional cases for categorizing jenkins package type by group id #404 (wagoodman)
• Enhance CPE generation for java GroupId and filtering #402 (wagoodman)
• Add hyphen replacement logic for CPE generation #397 (wagoodman)
• Add ability to pull images directly from a registry #378 (wagoodman)
• Add secrets cataloger #362

Fixed bugs:

• Using pom groupId leading to bad CPEs for plugins, leading to false positives #395
• Registry credentials should require username and password #385
• Malformed Python package metadata can cause parse failure #365
• Java cataloger missing packages when parsing partially fails #349
• Syft BOM ordering is not always consistent #331
• Update parent pom persistence with regard to shaded jars #403 (wagoodman)
• Refactor pom properties handling relative to parent package #392 (wagoodman)
• Safely join paths derived from archive headers #386 (wagoodman)
• Add manifest + repo digests on registry source #382 (wagoodman)
• Ensure credentials are not HTML encoded #368 (wagoodman)
• Ensure pkg.Catalog path index deduplicates real vs virtual paths #356 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.15.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.15

v0.14.0

Changelog

v0.14.0 (2021-03-20)

Full Changelog

Implemented enhancements:

• Add Docker image to release process #344 (wagoodman)
• Added Photon OS to the list of distros #341 (thehh1974)
• Add distroless image identification #44

Fixed bugs:

• Allow for multiple pom.properties delimiters #349 #348 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

v0.13.1

Changelog

v0.13.1 (2021-02-26)

Full Changelog

Fixed bugs:

• Ignore ownership for shared copyright resources #334 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

v0.13.0

Changelog

v0.13.0 (2021-02-25)

Full Changelog

Implemented enhancements:

• Add package relationships and add ownership-by-file-overlap relationship #326 #198 #329 (wagoodman)

Fixed bugs:

• Failure when working on odoo:latest #309
• global incremental ID creates issues for consumers #166

* This Changelog was automatically generated by github_changelog_generator

v0.12.7

Changelog

v0.12.7 (2021-02-17)

Full Changelog

Fixed bugs:

• Be lenient on invalid fields in PKG-INFO #328 (alfredodeza)
• Add handling of interrupting signals to the UI #324 (luhring)

* This Changelog was automatically generated by github_changelog_generator

v0.12.6

Changelog

v0.12.6 (2021-02-05)

Full Changelog

Fixed bugs:

• Missing support for path prefixes during import to Anchore API #315

* This Changelog was automatically generated by github_changelog_generator

v0.12.5

Changelog

v0.12.5 (2021-02-01)

Full Changelog

Fixed bugs:

• Bring in fix from stereoscope for zero-layers panic #316 (luhring)

* This Changelog was automatically generated by github_changelog_generator

v0.12.4

Changelog

v0.12.4 (2021-01-27)

Full Changelog

Fixed bugs:

• SIGSEGV in discoverPkgsFromPomProperties on parsing Java pom.properties #252

* This Changelog was automatically generated by github_changelog_generator

v0.12.3

Changelog

v0.12.3 (2021-01-22)

Full Changelog

Fixed bugs:

• Partial package.json files lead to empty packages in output #311 (luhring)

* This Changelog was automatically generated by github_changelog_generator

v0.12.2

Changelog

v0.12.2 (2021-01-06)

Full Changelog

Fixed bugs:

• Prefer real paths over those with links for glob results #308 (wagoodman)
• Duplicate reference readers for duplicate location resolutions #307 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator