4c08c8f959
Merge pull request #653 from brosander/helm-dep
...
Pinning helm postgres dep to the working 1.0.0
6 years ago
00db964497
Pinning helm postgres dep to the working 1.0.0
6 years ago
6c682da3e1
database: add mapping for Ubuntu Cosmic (18.10)
6 years ago
c123c95590
Merge pull request #648 from HaraldNordgren/go_versions
...
Bump Go versions and use '.x' to always get latest patch versions
6 years ago
be24096183
Bump Go versions and use '.x' to always get latest patch versions
6 years ago
05cbf328aa
Merge pull request #647 from KeyboardNerd/spkg/cvrf
...
vulnsrc: Refactor debian and alpine sources
6 years ago
4106322107
vendor: Update gopkg.in/yaml.v2 package
...
* Update gopkg.in/yaml.v2 package and glide setting
* Update other packages
6 years ago
72674ca871
vulnsrc: Refactor vulnerability sources to use utility functions
6 years ago
a3f7387ff1
database: Add FindKeyValue function wrapper
6 years ago
c3904c9696
pkg: Add fsutil to contian file system utility functions
6 years ago
1ee1b95afc
Merge pull request #644 from KeyboardNerd/bug/git
...
gitutil: Fix git pull on non-git repository directory
6 years ago
0c2e5e73c2
Merge pull request #645 from Katee/include-cvssv3
...
Switch to NVD JSON feed and include CVSSv3
6 years ago
081ae34af1
ext: remove duplicate vectorValuesToLetters definition
6 years ago
4f0da12b12
ext: pass through CVSSv3 impact and exploitability score
6 years ago
8efc3e4038
ext: remove unneeded use of init()
6 years ago
699d1143e5
ext: fixup incorrect copyright year
6 years ago
335cb65917
Merge pull request #646 from KeyboardNerd/spkg/model
6 years ago
2236b0a5c9
updater: Add vulnsrc affected feature type
...
Each vulnerability source has a specific type of feature that it affects
We assume the following:
* Alpine: Binary Package
* Debian: Source Package
* Ubuntu: Source Package
* Oracle OVAL: Binary Package
* RHEL OVAL: Binary Package
6 years ago
00fadfc3e3
database: Add affected feature type
...
Affected feature type is for determining either the source feature or
the binary feature that an vulnerability affects.
6 years ago
11b67e612c
gitutil: Fix git pull on non-git repository directory
...
* Add conditional check: if the git repo directory is newly created, we
clone.
* Add tests
Fixes #641
6 years ago
b81e4454fb
ext: Parse CVSSv3 data from JSON NVD feed
6 years ago
14277a8f5d
ext: Add JSON NVD parsing tests
6 years ago
aab46f5658
ext: Parse NVD JSON feed instead of XML
...
The JSON feed provides some values that are not available in the XML
feed such as CVSSv3.
6 years ago
17539bda60
Merge pull request #640 from KeyboardNerd/sourcePackage
...
database: Replace Parent Feature with source metadata
6 years ago
f759dd54c0
database: Replace Parent Feature with source metadata
...
Feature's source feature string is directly stored in the database
instead of having the parent pointer to simplify the database.
6 years ago
2ac088dd0f
Merge pull request #639 from Katee/update-sha1-to-sha256
...
Use SHA256 instead of SHA1 for fingerprinting
6 years ago
fe614f2b01
Merge pull request #638 from KeyboardNerd/featureTree
...
Parse Source package from package information databases
6 years ago
8d5a0131c4
ext: Use SHA256 instead of SHA1 for fingerprinting
...
To make static analysis tools happy.
The current use of SHA1 for fingerprinting is safe. However, there is very
little downside to switching to SHA256.
6 years ago
2cc61f9fc0
ext/featurefmt/apk: Extract origin package information from database
...
"o" field is used to extract the Package Origin from the APK database.
6 years ago
a057e4a943
ext/featurefmt/rpm: Extract source package from rpm database
...
Source package is now extracted from the RPM database by using
${SourceRPM} option in the rpm --qf argument.
6 years ago
4ac046642f
ext/featurefmt/dpkg: Extract source package metadata
...
The source package metadata is extracted from the source line instead
of forcing the binary package to have source package information.
6 years ago
1c40e7d016
ext/featurefmt: Refactor featurefmt testing code
...
1. Featurefmt testing code is moved to featurefmttest package.
2. Featurefmt now can be tested against a csv file, which contains the
expected package information result.
6 years ago
3fe894c5ad
database: Add parent feature pointer to Feature struct
...
Feature now has a pointer to parent feature. If a vulnerability affects
a parent feature, this child feature will be affected.
6 years ago
ddaf19b3a6
Merge pull request #633 from coreos/roadmap-1
...
*: update roadmap
6 years ago
3c72fa29a6
Merge pull request #620 from KeyboardNerd/feature/detector
...
Internally version all detected content by extension
6 years ago
74efdf6b51
*: update roadmap
...
Fixes #626 .
6 years ago
69c0c84348
api: Rename detector type to DType
...
Rename detector type to DType because all reserved key words should be
avoided used as type name or variable name.
6 years ago
a3e9b5b55d
database: rename utility functions with commit/rollback
...
All database utility functions are renamed to explicitly say if it will
commit changes or rollback changes on success.
6 years ago
e657d26313
database: move dbutil and testutil to database from pkg
...
Move dbutil and testutil to database from pkg
Rename all "result"
6 years ago
0c1b80b2ed
pgsql: Implement database queries for detector relationship
...
* Refactor layer and ancestry
* Add tests
* Fix bugs introduced when the queries were moved
6 years ago
028324014b
clair: Implement worker detector support
...
The worker is changed to accommodate the new database model and API.
Worker is refactored to move the database query helper functions to pkg.
6 years ago
48427e9b88
api: Add detectors for RPC
...
Change the V3 implementation to accommondate the detectors.
6 years ago
9c49d9dc55
pgsql: Move queries to corresponding files
...
Aggregate queries in their corresponding files instead of having the
single file for every queries because the database is more complicated.
6 years ago
53bf19aecf
ext: Lister and Detector returns detector info with detected content
...
1. Every Lister and Detector are versioned
2. detected content, are returned in a map with detector info as the key
6 years ago
34d0e516e0
vendor: Add golang-set dependency
...
Golang-set library is added to make it easier to support set operations.
6 years ago
dca2d4e597
pgsql: Add detector to database schema
...
'detector' table is added to store the metadata of detectors.
'layer_feature', 'layer_namespace', and 'ancestry_feature' tables are
modified to store the detection relationship between the
feature/namespace with the detector.
6 years ago
db2db8bbe8
database: Update database model and interface for detectors
...
All detected features and namespaces under the context of Layer and
Ancestry will now have the detectors associated, so that the API can
provide the detection information to the Client.
6 years ago
9f5d1ea4e1
v3: associate feature and namespace with detector
6 years ago
8cf7ad454c
Merge pull request #627 from haydenhughes/master
...
Add build-base to docker image
6 years ago
5d1c30218e
Merge pull request #624 from jzelinskie/probot
...
.github: add stale and issue template enforcement
6 years ago
Jimmy Zelinskie