new package grype-db: create a Grype vulnerability database from upstream vulnerability data sources
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/grype-db?expand=0&rev=1
This commit is contained in:
Johannes Kastl
Git OBS Bridge
commit
64cb19b340
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
||||
## Default LFS
|
||||
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||
*.png filter=lfs diff=lfs merge=lfs -text
|
||||
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||
*.zst filter=lfs diff=lfs merge=lfs -text
|
||||
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
||||
.osc
|
||||
20
_service
Normal file
20
_service
Normal file
@ -0,0 +1,20 @@
|
||||
<services>
|
||||
<service name="obs_scm" mode="manual">
|
||||
<param name="url">https://github.com/anchore/grype-db</param>
|
||||
<param name="scm">git</param>
|
||||
<param name="exclude">.git</param>
|
||||
<param name="revision">v0.26.0</param>
|
||||
<param name="versionformat">@PARENT_TAG@</param>
|
||||
<param name="versionrewrite-pattern">v(.*)</param>
|
||||
<param name="changesgenerate">enable</param>
|
||||
</service>
|
||||
<service name="set_version" mode="manual">
|
||||
</service>
|
||||
<service name="tar" mode="buildtime"/>
|
||||
<service name="recompress" mode="buildtime">
|
||||
<param name="file">*.tar</param>
|
||||
<param name="compression">gz</param>
|
||||
</service>
|
||||
<service name="go_modules" mode="manual">
|
||||
</service>
|
||||
</services>
|
||||
4
_servicedata
Normal file
4
_servicedata
Normal file
@ -0,0 +1,4 @@
|
||||
<servicedata>
|
||||
<service name="tar_scm">
|
||||
<param name="url">https://github.com/anchore/grype-db</param>
|
||||
<param name="changesrevision">9c21aeed9b6e365d74465ab63fa5926c1272d5ec</param></service></servicedata>
|
||||
3
grype-db-0.26.0.obscpio
Normal file
3
grype-db-0.26.0.obscpio
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:a46af0e01d34868ca53b0c62d3b0e42a401e4b1bc8ac3da9327acdae05ea1cfb
|
||||
size 16137741
|
||||
5
grype-db.changes
Normal file
5
grype-db.changes
Normal file
@ -0,0 +1,5 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Oct 24 13:31:04 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
||||
|
||||
- new package grype-db: create a Grype vulnerability database from
|
||||
upstream vulnerability data sources
|
||||
4
grype-db.obsinfo
Normal file
4
grype-db.obsinfo
Normal file
@ -0,0 +1,4 @@
|
||||
name: grype-db
|
||||
version: 0.26.0
|
||||
mtime: 1729718412
|
||||
commit: 9c21aeed9b6e365d74465ab63fa5926c1272d5ec
|
||||
116
grype-db.spec
Normal file
116
grype-db.spec
Normal file
@ -0,0 +1,116 @@
|
||||
#
|
||||
# spec file for package grype-db
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
|
||||
Name: grype-db
|
||||
Version: 0.26.0
|
||||
Release: 0
|
||||
Summary: A vulnerability scanner for container images and filesystems
|
||||
License: Apache-2.0
|
||||
URL: https://github.com/anchore/grype-db
|
||||
Source: %{name}-%{version}.tar.gz
|
||||
Source1: vendor.tar.gz
|
||||
BuildRequires: bash-completion
|
||||
BuildRequires: fish
|
||||
BuildRequires: go >= 1.23
|
||||
BuildRequires: zsh
|
||||
|
||||
%description
|
||||
Application to create a Grype vulnerability database from upstream
|
||||
vulnerability data sources.
|
||||
|
||||
%package -n %{name}-bash-completion
|
||||
Summary: Bash Completion for %{name}
|
||||
Group: System/Shells
|
||||
Requires: %{name} = %{version}
|
||||
Requires: bash-completion
|
||||
Supplements: (%{name} and bash-completion)
|
||||
BuildArch: noarch
|
||||
|
||||
%description -n %{name}-bash-completion
|
||||
Bash command line completion support for %{name}.
|
||||
|
||||
%package -n %{name}-fish-completion
|
||||
Summary: Fish Completion for %{name}
|
||||
Group: System/Shells
|
||||
Requires: %{name} = %{version}
|
||||
Supplements: (%{name} and fish)
|
||||
BuildArch: noarch
|
||||
|
||||
%description -n %{name}-fish-completion
|
||||
Fish command line completion support for %{name}.
|
||||
|
||||
%package -n %{name}-zsh-completion
|
||||
Summary: Zsh Completion for %{name}
|
||||
Group: System/Shells
|
||||
Requires: %{name} = %{version}
|
||||
Supplements: (%{name} and zsh)
|
||||
BuildArch: noarch
|
||||
|
||||
%description -n %{name}-zsh-completion
|
||||
zsh command line completion support for %{name}.
|
||||
|
||||
%prep
|
||||
%autosetup -p 1 -a 1
|
||||
|
||||
%build
|
||||
COMMIT_HASH="$(sed -n 's/commit: \(.*\)/\1/p' %_sourcedir/%{name}.obsinfo)"
|
||||
|
||||
DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ"
|
||||
BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}")
|
||||
|
||||
go build \
|
||||
-mod=vendor \
|
||||
-buildmode=pie \
|
||||
-ldflags=" \
|
||||
-X github.com/anchore/grype-db/cmd/grype-db/application.version=v%{version} \
|
||||
-X github.com/anchore/grype-db/cmd/grype-db/application.gitCommit=${COMMIT_HASH} \
|
||||
-X github.com/anchore/grype-db/cmd/grype-db/application.gitDescription=v%{version} \
|
||||
-X github.com/anchore/grype-db/cmd/grype-db/application.buildDate=$BUILD_DATE" \
|
||||
-o bin/%{name} ./cmd/%{name}/
|
||||
|
||||
%install
|
||||
# Install the binary.
|
||||
install -D -m 0755 bin/%{name} %{buildroot}/%{_bindir}/%{name}
|
||||
|
||||
# create the bash completion file
|
||||
mkdir -p %{buildroot}%{_datarootdir}/bash-completion/completions/
|
||||
%{buildroot}/%{_bindir}/%{name} completion bash > %{buildroot}%{_datarootdir}/bash-completion/completions/%{name}
|
||||
|
||||
# create the fish completion file
|
||||
mkdir -p %{buildroot}%{_datarootdir}/fish/vendor_completions.d/
|
||||
%{buildroot}/%{_bindir}/%{name} completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
|
||||
|
||||
# create the zsh completion file
|
||||
mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
|
||||
%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name}
|
||||
|
||||
%files
|
||||
%doc README.md
|
||||
%license LICENSE
|
||||
%{_bindir}/%{name}
|
||||
|
||||
%files -n %{name}-bash-completion
|
||||
%{_datarootdir}/bash-completion/completions/%{name}
|
||||
|
||||
%files -n %{name}-fish-completion
|
||||
%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
|
||||
|
||||
%files -n %{name}-zsh-completion
|
||||
%{_datarootdir}/zsh/site-functions/_%{name}
|
||||
|
||||
%changelog
|
||||
3
vendor.tar.gz
Normal file
3
vendor.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:cc0e4e7c686b3244df780811d82677985fb152dbe6d48e70ce7cefbdfa736de8
|
||||
size 53406649
|
||||
Loading…
Reference in New Issue
Block a user