Matthieu MOREL
|
48bdc6e734
|
ci(deps): fix gci and gofmt in ".*_test.go$" (#6721)
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
|
2024-05-22 02:55:16 +00:00 |
|
Teppei Fukuda
|
9515695d45
|
feat(vex): support non-root components for products in OpenVEX (#6728)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
|
2024-05-21 10:00:51 +00:00 |
|
Teppei Fukuda
|
6a72dd47ae
|
refactor: move artifact types under artifact package to avoid import cycles (#6652)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
|
2024-05-09 16:18:37 +00:00 |
|
Teppei Fukuda
|
c4022d61b3
|
feat(vex): consider root component for relationships (#6313)
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
|
2024-03-19 00:51:18 +00:00 |
|
Teppei Fukuda
|
8fcef352b3
|
refactor(sbom): add intermediate representation for BOM (#6240)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
|
2024-03-12 06:56:10 +00:00 |
|
Juan Ariza Toledano
|
9c5e5a04ee
|
fix(vex): CSAF filtering should consider relationships (#5923)
Signed-off-by: juan131 <jariza@vmware.com>
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
|
2024-02-22 10:23:11 +00:00 |
|
Teppei Fukuda
|
3c1601b6cb
|
feat(vuln): show suppressed vulnerabilities in table (#6084)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
|
2024-02-13 12:35:06 +00:00 |
|
DmitriyLewen
|
6ccc0a554b
|
fix: check unescaped BomRef when matching PkgIdentifier (#6025)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
|
2024-02-06 11:09:53 +00:00 |
|
Teppei Fukuda
|
d0c81e23c4
|
feat(vex): add PURL matching for CSAF VEX (#5890)
Signed-off-by: knqyf263 <knqyf263@gmail.com>
|
2024-01-10 06:37:19 +00:00 |
|
Juan Ariza Toledano
|
c47ed0d816
|
feat(vex): Add support for CSAF format (#5535)
Signed-off-by: juan131 <jariza@vmware.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
|
2024-01-06 10:48:39 +00:00 |
|
Juan Ariza Toledano
|
1f0d6290c3
|
feat(vuln): include pkg identifier on detected vulnerabilities (#5439)
Signed-off-by: juan131 <jariza@vmware.com>
Signed-off-by: knqyf263 <knqyf263@gmail.com>
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
Co-authored-by: Nikita Pivkin <nikita.pivkin@smartforce.io>
Co-authored-by: knqyf263 <knqyf263@gmail.com>
|
2023-12-27 07:54:56 +00:00 |
|
Teppei Fukuda
|
49fdd584ba
|
feat: PURL matching with qualifiers in OpenVEX (#5061)
* feat: PURL match in OpenVEX
* test: fix fixture
* Update docs/docs/supply-chain/vex.md
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
* docs: add a comment about overriding statements
---------
Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
|
2023-08-30 07:48:32 +00:00 |
|
Teppei Fukuda
|
11a5b91a1a
|
feat(sbom): add VEX support (#4053)
|
2023-04-27 10:21:06 +03:00 |
|