SHA256
1
0
forked from pool/syft

Accepting request 1137361 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1137361
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/syft?expand=0&rev=58
This commit is contained in:
Dominique Leuenberger 2024-01-07 20:40:16 +00:00 committed by Git OBS Bridge
commit cddbe9fac9
8 changed files with 104 additions and 47 deletions

View File

@ -3,7 +3,7 @@
<param name="url">https://github.com/anchore/syft</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
<param name="revision">v0.99.0</param>
<param name="revision">v0.100.0</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="changesgenerate">enable</param>
<param name="versionrewrite-pattern">v(.*)</param>

View File

@ -1,4 +1,4 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/anchore/syft</param>
<param name="changesrevision">3cffa0b7fd276a35123c48e45407c4f402f2c58f</param></service></servicedata>
<param name="changesrevision">a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff</param></service></servicedata>

3
syft-0.100.0.obscpio Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3d504fdbb3c34b9f30f047c40bebe980fbb8c81b6d48d2a2187149f9f46ed319
size 23084045

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ba9e17826f3a5e818c3466f8d168ee7b82fd8c5f7321694f01556b840aec1504
size 23071245

View File

@ -1,62 +1,119 @@
-------------------------------------------------------------------
Sat Jan 06 15:26:12 UTC 2024 - andrea.manzini@suse.com
- Update to version 0.100.0:
* Add ability to extend the binaries cataloguers (#2469)
* chore(deps): bump anchore/sbom-action from 0.15.1 to 0.15.2
(#2464)
* fix: add missing purl for busybox (#2457)
* Fix diff error obfuscating binary test failures message (#2468)
* Replace `packages` command with `scan` (#2446)
* fix: PURLs with "nuget" type are dotnet packages (#2466)
* chore(deps): update tools to latest versions (#2459)
* chore(deps): update CPE dictionary index (#2458)
* chore: update binary to -x (#2456)
* Add more functionality to the ErLang parser (#2390)
* Added OpenSSL binary matcher (#2416)
* chore(deps): update stereoscope to
590920dabc5479216e755983d41367b6be3544f3 (#2452)
* chore(deps): update tools to latest versions (#2451)
* chore(deps): bump github/codeql-action from 3.22.11 to 3.22.12
(#2455)
-------------------------------------------------------------------
Thu Dec 21 16:26:53 UTC 2023 - opensuse_buildservice@ojkastl.de
- Update to version 0.99.0:
* chore: remove execute from test fixtures (#2450)
* chore(deps): update tools to latest versions (#2447)
* fix: don't panic when hackage missing in haskell stack yaml lock (#2448)
* fix: don't panic when hackage missing in haskell stack yaml
lock (#2448)
* Add binary classifier for the ERLang interpretter (#2417)
* Add binary classifier for Julia lang (#2427)
* Add binary detection for PHP composer (#2432)
* chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (#2433)
* chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
(#2433)
* chore(deps): update CPE dictionary index (#2442)
* chore(deps): update stereoscope to 4b999b76ca8901d15bb97aef445dc94c38d11d5c (#2440)
* fix syft-json test to use pretty json for snapshot testing (#2441)
* chore(deps): update stereoscope to
4b999b76ca8901d15bb97aef445dc94c38d11d5c (#2440)
* fix syft-json test to use pretty json for snapshot testing
(#2441)
* refactor pkg.Collection (#2439)
* refactor javascript cataloger to use configuration options when creating packages (#2438)
* refactor javascript cataloger to use configuration options when
creating packages (#2438)
* use single source of truth for archive options (#2437)
* fix file digest cataloger when passed coordinates (#2436)
* chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0 (#2413)
* Look for a maven version in a pom from a parent dependency management section (#2423)
* Parse Python licenses from LicenseExpression entry in the Wheel Metadata (#2431)
* chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11 (#2430)
* chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0 (#2429)
* chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2
to 0.8.0 (#2413)
* Look for a maven version in a pom from a parent dependency
management section (#2423)
* Parse Python licenses from LicenseExpression entry in the Wheel
Metadata (#2431)
* chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11
(#2430)
* chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0
(#2429)
* chore(deps): update tools to latest versions (#2428)
* Parse Python licenses from LicenseFile entry in the Wheel Metadata (#2331)
* fix: use filepath instead of path for file source exclusions (#2411)
* Parse Python licenses from LicenseFile entry in the Wheel
Metadata (#2331)
* fix: use filepath instead of path for file source exclusions
(#2411)
* chore(deps): bump github.com/charmbracelet/bubbletea (#2424)
* chore(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 (#2425)
* chore(deps): bump github/codeql-action from 2.22.9 to 2.22.10 (#2426)
* chore(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0
(#2425)
* chore(deps): bump github/codeql-action from 2.22.9 to 2.22.10
(#2426)
* chore(deps): bump dawidd6/action-homebrew-bump-formula (#2420)
* feat: add the option to retrieve remote licenses for projects defined in a maven pom (#2409)
* chore(deps): bump github/codeql-action from 2.22.8 to 2.22.9 (#2400)
* chore(deps): bump github.com/saferwall/pe from 1.4.7 to 1.4.8 (#2415)
* chore(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 (#2414)
* feat: add the option to retrieve remote licenses for projects
defined in a maven pom (#2409)
* chore(deps): bump github/codeql-action from 2.22.8 to 2.22.9
(#2400)
* chore(deps): bump github.com/saferwall/pe from 1.4.7 to 1.4.8
(#2415)
* chore(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to
5.11.0 (#2414)
* chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 (#2401)
* chore(deps): update tools to latest versions (#2408)
* chore(deps): update CPE dictionary index (#2412)
* fix(java): improve identification for org.codehaus.groovy artifacts (#2404)
* fix(java): improve identification for commons-jelly artifacts (#2399)
* fix(java): improve identification for io.minio artifacts (#2398)
* fix(java): improve identification for com.graphql-java artifacts (#2397)
* fix(java): improve identification for org.codehaus.groovy
artifacts (#2404)
* fix(java): improve identification for commons-jelly artifacts
(#2399)
* fix(java): improve identification for io.minio artifacts
(#2398)
* fix(java): improve identification for com.graphql-java
artifacts (#2397)
* chore(deps): update tools to latest versions (#2395)
* chore: enhance java purl generation integration test (#2393)
* feat: add ability to retrieve remote licenses for yarn.lock (#2338)
* chore(deps): bump anchore/sbom-action from 0.15.0 to 0.15.1 (#2392)
* Retrieve remote licenses using pom.properties when there is no pom.xml (#2315)
* fix(java): improve identification for org.apache.tapestry artifacts (#2384)
* fix(java): improve identification for io.ratpack artifacts (#2379)
* fix(java): improve identification for org.apache.cassandra artifacts (#2386)
* fix(java): improve identification for org.neo4j.procedure artifacts (#2388)
* feat: add ability to retrieve remote licenses for yarn.lock
(#2338)
* chore(deps): bump anchore/sbom-action from 0.15.0 to 0.15.1
(#2392)
* Retrieve remote licenses using pom.properties when there is no
pom.xml (#2315)
* fix(java): improve identification for org.apache.tapestry
artifacts (#2384)
* fix(java): improve identification for io.ratpack artifacts
(#2379)
* fix(java): improve identification for org.apache.cassandra
artifacts (#2386)
* fix(java): improve identification for org.neo4j.procedure
artifacts (#2388)
* fix: bump fangs for ptr summarize fix (#2387)
* fix(java): improve identification for org.elasticsearch artifacts (#2383)
* fix(java): improve identification for org.apache.geode artifacts (#2382)
* fix(java): improve identification for org.apache.tomcat.embed artifacts (#2381)
* fix(java): improve identification for io.projectreactor.netty artifacts (#2378)
* fix(java): improve identification for org.eclipse.platform artifacts (#2349)
* fix(java): improve identification for org.elasticsearch
artifacts (#2383)
* fix(java): improve identification for org.apache.geode
artifacts (#2382)
* fix(java): improve identification for org.apache.tomcat.embed
artifacts (#2381)
* fix(java): improve identification for io.projectreactor.netty
artifacts (#2378)
* fix(java): improve identification for org.eclipse.platform
artifacts (#2349)
* Generalize UI events for cataloging tasks (#2369)
* chore(deps): update tools to latest versions (#2376)
* chore(deps): bump github.com/google/go-containerregistry (#2377)
* chore(deps): bump github.com/google/go-containerregistry
(#2377)
* chore: fix tests failing due to Mac Rosetta cache (#2374)
* fix: improve dotnet portable executable identification (#2133)

View File

@ -1,4 +1,4 @@
name: syft
version: 0.99.0
mtime: 1703111669
commit: 3cffa0b7fd276a35123c48e45407c4f402f2c58f
version: 0.100.0
mtime: 1704486727
commit: a16a4ad6c993aaaa1ec502667c215b0e8c8e51ff

View File

@ -1,7 +1,7 @@
#
# spec file for package syft
#
# Copyright (c) 2023 SUSE LLC
# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -19,7 +19,7 @@
%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
Name: syft
Version: 0.99.0
Version: 0.100.0
Release: 0
Summary: CLI tool and library for generating a Software Bill of Materials
License: Apache-2.0

View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1f6370d23bdbdac748fbcd5cd4bdc116e5dfe7ed079437e65343b1604149975d
size 36001357
oid sha256:2c0f3b2c191c29953b4c2b74d5ee419c19661d9c22e80d29033473934845bd44
size 36085834