Changelog

v0.18.0 (2021-06-29)

Full Changelog

Implemented enhancements:

• Add support for SPDX SBOM format #213
• Split UI from event handling #448 (wagoodman)

Fixed bugs:

• Disk space not freed after syft command #416

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.18.0
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.18

Changelog

v0.17.1 (2021-06-19)

Full Changelog

Fixed bugs:

• Incorrect version detection for NPM packages found via yarn.lock #430

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.17.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.17

Changelog

v0.17.0 (2021-06-04)

Full Changelog

Implemented enhancements:

• Improve discovery of app.jar packaging (self-executing Jars) #413
• Report Epoch in RPM version #408

Fixed bugs:

• How to join the Anchore Community Slack? #423

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.17.0
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.17

Changelog

v0.16.1 (2021-05-25)

Full Changelog

Implemented enhancements:

• Add all package metadata types slice for use in downstream testing #418
• Add config option for import timeout #421 (luhring)

Fixed bugs:

• Allow registry auth config without authority value #420 (luhring)
• Fix go mod tidy release problem #422 (luhring)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.16.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.16

Changelog

v0.15.2 (2021-05-12)

Full Changelog

Fixed bugs:

• Close all ReadClosers explicitly retrieved from resolvers #414 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.15.2
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.15

Changelog

v0.15.1 (2021-04-22)

Full Changelog

Implemented enhancements:

• Account for known mappings of package name to CPE products #393
• Implement binary package identification #372
• Report package DB verification metadata #371
• Implement selective "retrieve files" cataloger #369
• Add hyphen replacement in CPE generator #361
• Cataloger for Rust crates from Cargo.lock #338
• Add file metadata cataloger #335
• Introduce an additional command line switch so that syft command understands I am passing a directory #277
• Add for known bad CPE field combinations for jenkins package #405 (wagoodman)
• Add additional cases for categorizing jenkins package type by group id #404 (wagoodman)
• Enhance CPE generation for java GroupId and filtering #402 (wagoodman)
• Add hyphen replacement logic for CPE generation #397 (wagoodman)
• Add ability to pull images directly from a registry #378 (wagoodman)
• Add secrets cataloger #362

Fixed bugs:

• Using pom groupId leading to bad CPEs for plugins, leading to false positives #395
• Registry credentials should require username and password #385
• Malformed Python package metadata can cause parse failure #365
• Java cataloger missing packages when parsing partially fails #349
• Syft BOM ordering is not always consistent #331
• Update parent pom persistence with regard to shaded jars #403 (wagoodman)
• Refactor pom properties handling relative to parent package #392 (wagoodman)
• Safely join paths derived from archive headers #386 (wagoodman)
• Add manifest + repo digests on registry source #382 (wagoodman)
• Ensure credentials are not HTML encoded #368 (wagoodman)
• Ensure pkg.Catalog path index deduplicates real vs virtual paths #356 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Docker images

• docker pull anchore/syft:latest
• docker pull anchore/syft:v0.15.1
• docker pull anchore/syft:v0
• docker pull anchore/syft:v0.15

Changelog

v0.14.0 (2021-03-20)

Full Changelog

Implemented enhancements:

• Add Docker image to release process #344 (wagoodman)
• Added Photon OS to the list of distros #341 (thehh1974)
• Add distroless image identification #44

Fixed bugs:

• Allow for multiple pom.properties delimiters #349 #348 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.13.1 (2021-02-26)

Full Changelog

Fixed bugs:

• Ignore ownership for shared copyright resources #334 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.13.0 (2021-02-25)

Full Changelog

Implemented enhancements:

• Add package relationships and add ownership-by-file-overlap relationship #326 #198 #329 (wagoodman)

Fixed bugs:

• Failure when working on odoo:latest #309
• global incremental ID creates issues for consumers #166

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.7 (2021-02-17)

Full Changelog

Fixed bugs:

• Be lenient on invalid fields in PKG-INFO #328 (alfredodeza)
• Add handling of interrupting signals to the UI #324 (luhring)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.6 (2021-02-05)

Full Changelog

Fixed bugs:

• Missing support for path prefixes during import to Anchore API #315

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.5 (2021-02-01)

Full Changelog

Fixed bugs:

• Bring in fix from stereoscope for zero-layers panic #316 (luhring)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.4 (2021-01-27)

Full Changelog

Fixed bugs:

• SIGSEGV in discoverPkgsFromPomProperties on parsing Java pom.properties #252

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.3 (2021-01-22)

Full Changelog

Fixed bugs:

• Partial package.json files lead to empty packages in output #311 (luhring)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.2 (2021-01-06)

Full Changelog

Fixed bugs:

• Prefer real paths over those with links for glob results #308 (wagoodman)
• Duplicate reference readers for duplicate location resolutions #307 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.1 (2021-01-05)

Full Changelog

Fixed bugs:

• Update gemspec glob to include named nested specification directories #306 (wagoodman)
• Add HasPath() to Resolver interface for existence check #305 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.12.0 (2021-01-04)

Full Changelog

Implemented enhancements:

• Bump stereoscope to pull in content API refactors #299 (wagoodman)

Fixed bugs:

• Fix symlink resolutions for constituent paths #304 (wagoodman)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.11.1 (2020-12-23)

Full Changelog

Fixed bugs:

• Handle site packages based on which egg file is parsed #303 (luhring)
• Python runtime is not a Python package itself, ignore it #301 (alfredodeza)

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.11.0 (2020-12-18)

Full Changelog

Implemented enhancements:

• Update dpkg license to only include single-word entries #298 (wagoodman)
• Incorporate import changes + add image overwrite option #294 (wagoodman)
• Improve performance of the python cataloger #290 (wagoodman)
• Sort generated CPEs by specificity #289 (luhring)
• Upload SBOM results to Anchore Engine #38

Fixed bugs:

• Python egg-info may be a directory or file, Syft only looks for directories #295

* This Changelog was automatically generated by github_changelog_generator

Changelog

v0.10.0 (2020-12-10)

Full Changelog

Enhancements:

• Include in JSON output the raw manifest (and digest) from registry if available or a computed manifest (and digest) #272
• Add support for uploading SBOM results to Anchore Engine #38

* This Changelog was automatically generated by github_changelog_generator