v0.19.1

Changelog

v0.19.1 (2021-06-30)

Full Changelog

Fixed bugs:

• Redirect cursor hide/show to stderr #456 (wagoodman)
• Add help message when no arguments are provided #455 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.19.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.19

v0.19.0

Changelog

v0.19.0 (2021-06-29)

Full Changelog

Enhancements:

• Support Scanning a root filesystem #283

Fixed bugs:

• Disk space not freed after syft command #416

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.19.0
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.19

v0.18.0

Changelog

v0.18.0 (2021-06-29)

Full Changelog

Implemented enhancements:

• Add support for SPDX SBOM format #213
• Split UI from event handling #448 (wagoodman)

Fixed bugs:

• Disk space not freed after syft command #416

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.18.0
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.18

v0.17.1

Changelog

v0.17.1 (2021-06-19)

Full Changelog

Fixed bugs:

• Incorrect version detection for NPM packages found via yarn.lock #430

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.17.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.17

v0.17.0

Changelog

v0.17.0 (2021-06-04)

Full Changelog

Implemented enhancements:

• Improve discovery of app.jar packaging (self-executing Jars) #413
• Report Epoch in RPM version #408

Fixed bugs:

• How to join the Anchore Community Slack? #423

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.17.0
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.17

v0.16.1

Changelog

v0.16.1 (2021-05-25)

Full Changelog

Implemented enhancements:

• Add all package metadata types slice for use in downstream testing #418
• Add config option for import timeout #421 (luhring)

Fixed bugs:

• Allow registry auth config without authority value #420 (luhring)
• Fix go mod tidy release problem #422 (luhring)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.16.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.16

v0.15.2

Changelog

v0.15.2 (2021-05-12)

Full Changelog

Fixed bugs:

• Close all ReadClosers explicitly retrieved from resolvers #414 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.15.2
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.15

v0.15.1

Changelog

v0.15.1 (2021-04-22)

Full Changelog

Implemented enhancements:

• Account for known mappings of package name to CPE products #393
• Implement binary package identification #372
• Report package DB verification metadata #371
• Implement selective "retrieve files" cataloger #369
• Add hyphen replacement in CPE generator #361
• Cataloger for Rust crates from Cargo.lock #338
• Add file metadata cataloger #335
• Introduce an additional command line switch so that syft command understands I am passing a directory #277
• Add for known bad CPE field combinations for jenkins package #405 (wagoodman)
• Add additional cases for categorizing jenkins package type by group id #404 (wagoodman)
• Enhance CPE generation for java GroupId and filtering #402 (wagoodman)
• Add hyphen replacement logic for CPE generation #397 (wagoodman)
• Add ability to pull images directly from a registry #378 (wagoodman)
• Add secrets cataloger #362

Fixed bugs:

• Using pom groupId leading to bad CPEs for plugins, leading to false positives #395
• Registry credentials should require username and password #385
• Malformed Python package metadata can cause parse failure #365
• Java cataloger missing packages when parsing partially fails #349
• Syft BOM ordering is not always consistent #331
• Update parent pom persistence with regard to shaded jars #403 (wagoodman)
• Refactor pom properties handling relative to parent package #392 (wagoodman)
• Safely join paths derived from archive headers #386 (wagoodman)
• Add manifest + repo digests on registry source #382 (wagoodman)
• Ensure credentials are not HTML encoded #368 (wagoodman)
• Ensure pkg.Catalog path index deduplicates real vs virtual paths #356 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.15.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.15

v0.14.0

Changelog

v0.14.0 (2021-03-20)

Full Changelog

Implemented enhancements:

• Add Docker image to release process #344 (wagoodman)
• Added Photon OS to the list of distros #341 (thehh1974)
• Add distroless image identification #44

Fixed bugs:

• Allow for multiple pom.properties delimiters #349 #348 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

v0.13.1

Changelog

v0.13.1 (2021-02-26)

Full Changelog

Fixed bugs:

• Ignore ownership for shared copyright resources #334 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator