commit ef643e2d6e7d223b7a41054c5a780eed5710044af5c12e142a994d3772efae04 Author: Richard Brown Date: Wed Jun 15 11:20:21 2022 +0000 Accepting request 982072 from home:ojkastl_buildservice:Branch_devel_kubic new package grype at version 0.38.0: A vulnerability scanner for container images and filesystems OBS-URL: https://build.opensuse.org/request/show/982072 OBS-URL: https://build.opensuse.org/package/show/devel:kubic/grype?expand=0&rev=1 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/_service b/_service new file mode 100644 index 0000000..c59472a --- /dev/null +++ b/_service @@ -0,0 +1,22 @@ + + + https://github.com/anchore/grype + git + .git + v0.38.0 + @PARENT_TAG@ + enable + v(.*) + v* + + + grype + + + *.tar + gz + + + grype-0.38.0.tar.gz + + diff --git a/_servicedata b/_servicedata new file mode 100644 index 0000000..222074e --- /dev/null +++ b/_servicedata @@ -0,0 +1,4 @@ + + + https://github.com/anchore/grype + 06d28dad9f7e7d9aa65fc16d45c6ce785826664c \ No newline at end of file diff --git a/grype-0.38.0.tar.gz b/grype-0.38.0.tar.gz new file mode 100644 index 0000000..ab972ba --- /dev/null +++ b/grype-0.38.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c8878268176a28745830f5d022ceafec521d40d45e0c253fbc7f3558c433403d +size 1045026 diff --git a/grype.changes b/grype.changes new file mode 100644 index 0000000..eb31b6b --- /dev/null +++ b/grype.changes @@ -0,0 +1,4 @@ +------------------------------------------------------------------- +Mon Jun 6 19:46:12 UTC 2022 - Johannes Kastl + +- new package grype at version 0.38.0: A vulnerability scanner for container images and filesystems diff --git a/grype.spec b/grype.spec new file mode 100644 index 0000000..3c9d52a --- /dev/null +++ b/grype.spec @@ -0,0 +1,56 @@ +# +# spec file for package grype +# +# Copyright (c) 2022 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define __arch_install_post export NO_BRP_STRIP_DEBUG=true + +Name: grype +Version: 0.38.0 +Release: 0 +Summary: A vulnerability scanner for container images and filesystems +License: Apache-2.0 +URL: https://github.com/anchore/grype +Source: grype-%{version}.tar.gz +Source1: vendor.tar.gz +BuildRequires: go >= 1.18 + +%description +A vulnerability scanner for container images and filesystems. Easily install the binary to try it out. Works with Syft, the powerful SBOM (software bill of materials) tool for container images and filesystems. + +%prep +%setup -q +%setup -q -T -D -a 1 + +%build +DATE_FMT="+%%Y-%%m-%%dT%%H:%%M:%%SZ" +BUILD_DATE=$(date -u -d "@${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u -r "${SOURCE_DATE_EPOCH}" "${DATE_FMT}" 2>/dev/null || date -u "${DATE_FMT}") +go build \ + -mod=vendor \ + -buildmode=pie \ + -ldflags="-X github.com/anchore/grype/internal/version.version=%{version} -X github.com/anchore/grype/internal/version.buildDate=$BUILD_DATE" \ + -o bin/grype . + +%install +# Install the binary. +install -D -m 0755 bin/%{name} "%{buildroot}/%{_bindir}/%{name}" + +%files +%doc README.md +%license LICENSE +%{_bindir}/%{name} + +%changelog diff --git a/vendor.tar.gz b/vendor.tar.gz new file mode 100644 index 0000000..2e78cbd --- /dev/null +++ b/vendor.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:edafbf6bcaee52faf420c961038c930dd6c0eed34870f6ae0f707795c22457f2 +size 44975197