DmitriyLewen
eaa5bcf7d2
feat: add support for mix.lock files for elixir language ( #3328 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-12-29 15:18:51 +02:00
DmitriyLewen
aea298b3dc
feat: add support for swift cocoapods lock files ( #2956 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-12-11 19:15:10 +02:00
DmitriyLewen
4839075c28
feat: add support for conan.lock file ( #2779 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-09-06 21:59:13 +03:00
DmitriyLewen
a000adeed0
feat: add support for gradle.lockfile ( #2759 )
2022-09-01 11:27:36 +03:00
Tom Fay
517d2e0109
feat(rust): Add support for cargo-auditable ( #2675 )
2022-08-10 13:43:23 +03:00
afdesk
a6685b1bad
feat(dotnet): add support for .Net core .deps.json files ( #2487 )
...
Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io >
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-07-11 13:32:38 +03:00
mycodeself
c36a373def
feat(nodejs): add pnpm support ( #2414 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-06-29 13:31:04 +03:00
Liam Galvin
094db23a03
refactor: Fix fanal import paths and remove dotfiles
2022-06-20 09:43:33 +01:00
AndreyLevchenko
3e3c119555
feat(lang): add dependency origin graph ( #1970 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2022-06-16 10:34:26 +03:00
afdesk
485637c28a
fix(go): set correct go modules type ( #1990 )
2022-04-14 09:55:37 +03:00
Teppei Fukuda
8d5882be03
refactor: migrate to prefixed buckets ( #1644 )
2022-01-31 10:05:38 +02:00
Teppei Fukuda
50bb938a21
feat(lang-pkg): add data sources ( #1625 )
2022-01-27 14:22:06 +02:00
DmitriyLewen
4f7b768369
refactor(rust): move rust-advisory-db to OSV ( #1591 )
2022-01-17 15:38:35 +02:00
Teppei Fukuda
7fcbf44bb8
refactor(python): drop Safety DB ( #1580 )
2022-01-16 15:23:49 +02:00
Teppei Fukuda
b713ad0fd3
feat(java): support pom.xml ( #1501 )
2021-12-23 16:45:38 +02:00
Naimuddin Shaik
af3eaefdb2
Lang advisory order ( #1409 )
...
* chore(advisory reorder)
Reorder language advisory.
* fixed integration tests.
2021-11-24 10:27:12 +02:00
santhosh1729
d8d692b8ba
feat(javascript) : Initialize npm driver for javascript packages ( #1289 )
2021-10-10 08:37:15 +03:00
Ankush K
8edcc62a8d
feat(nodejs): support package.json ( #1225 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2021-09-15 14:23:35 +03:00
Ankush K
dbc7a83e8c
feat(python): add packaging detector and respective hook ( #1223 )
...
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2021-09-13 20:59:11 +03:00
AndreyLevchenko
4a8db20a9a
feat(python): add support for requirements.txt ( #1169 )
2021-08-11 11:14:37 +03:00
Teppei Fukuda
1b66b77f69
feat: prepare for config scanning ( #1005 )
...
* temp: disable config scanning
2021-05-20 09:05:36 +03:00
rahul2393
04e7ccabea
feat(go): added support of gomod analyzer ( #978 )
...
* Added support of gomod analyzer.
* add imports
* fix gocyclo
* Ran go fmt
2021-05-11 04:18:13 +03:00
Masahiro331
c88bbbd6cc
feat(go): support binary scan ( #948 )
...
* feature(gobinary) support gobinary scan
* chore(mod): update fanal
* update(go.mod) update trivy-db
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2021-04-29 19:47:50 +03:00
Teppei Fukuda
c9f22f4e55
feat(java): support jar/war/ear ( #837 )
...
* refactor(server): remove Detect endpoint
* refactor(library): do not use interface
* refactor: add dbtest package
* test: add bolt fixtures
* feat: support jar scanning
* refactor: rename node to npm
* refactor: fix lint issues
* test(maven): remove some tests
* chore(mod): update fanal
* docs: update README
* chore(mod): update trivy-db
* fix(library/drive): add ecosystem
* fix: do not display 0 vulnerabilities
* refactor(table): split method
* Update README.md (#838 )
* fix(app): increase the default value of timeout (#842 )
* feat(maven): use go-mvn-version
* test(maven): update tests
* fix(scan): skip files and dirs before vulnerability detection
* fix: display log messages only once per type
* docs(README): add file suffixes
* chore(mod): update go-mvn-version
* feat(log): set go-dep-parser logger
* chore(mod): update fanal
* docs: update README
* docs(README): add java source
* test(maven): fix invalid case
2021-02-14 18:19:42 +02:00
Johannes
08ca1b00b7
Feat: NuGet Scanner ( #686 )
...
* Initial nuget advisory detector code.
Signed-off-by: Johannes Tegnér <johannes@jitesoft.com >
* Added nuget package to scan.go
Signed-off-by: Johannes Tegnér <johannes@jitesoft.com >
* Removed nuget advisory file and instead added csharp/nuget as a driver in driver.go.
Signed-off-by: Johannes Tegnér <johannes@jitesoft.com >
* Removed nuget package from driver. Added ghasnuget as a source in vulnerability.go
Signed-off-by: Johannes Tegnér <johannes@jitesoft.com >
* Updated nuget driver to use correct name and to initialize with the new generic scanner.
Signed-off-by: Johannes Tegnér <johannes@jitesoft.com >
* refactor: cut out to a separate method
* chore(mod): update trivy-db
* fix(driver): add a general driver
* test(ghsa): add nuget
* chore: update README
Co-authored-by: knqyf263 <knqyf263@gmail.com >
2020-12-21 10:17:15 +02:00
Teppei Fukuda
b6d5b82c48
fix: version comparison ( #740 )
...
* feat: add comparer
* refactor: rename lang with ecosystem
* feat(bundler): add comparer
* feat(node): add comparer
* feat(bundler): integrate comparer
* feat(cargo): integrate comparer
* feat(composer): add comparer
* feat(ghsa): integrate comparer
* feat(node): integrate comparer
* feat(python): integrate comparer
* test(bundler): add tests
* test(cargo): add tests
* test(composer): add tests
* test(ghsa): add tests
* test(node): add tests
* test(python): add tests
* refactor(utils): remove unnecessary functions
* test(utils): add tests
* test: rename bucket prefixes
* fix(detect): use string
* chore: update dependencies
* docs: add comments
* fix(cargo): handle unpatched vulnerability
* test(db): update trivy-db for integration tests
* test(integration): update a golden file
* test(cargo): Add a case for missing patched version
Signed-off-by: Simarpreet Singh <simar@linux.com >
* refactor(advisory): update comments
* refactor(node/advisory): change the receiver
* chore(mod): update dependencies
* refactor(comparer): unexport MatchVersion
* refactor: fix maligned structs
* test(node): add empty value
* refactor
* refactor: sort imports
* chore(mod): update trivy-db
Co-authored-by: Simarpreet Singh <simar@linux.com >
2020-11-17 11:38:58 +02:00
rahul2393
793a1aa3c8
Add linter check support ( #679 )
...
* add linter supports
* add only minor version
* use latest version
* Fix println with format issue
* Fix test
* Fix tests
* For slice with unknown length, preallocating the array
* fix code-coverage
* Removed linter rules
* Reverting linter fixes, adding TODO for later
* Ignore linter error for import
* Remove another err var.
* Ignore shadow error
* Fixes
* Fix issue
* Add back goimports local-prefixes
* Update local prefixes
* Removed extra spaces and merge the imports
* more refactoring
* Update photon.go
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com >
2020-10-20 15:20:04 +03:00
Teppei Fukuda
f50b0ce8af
feat(library): support a custom data source ( #613 )
...
* chore(mod): update trivy-db
* refactor(detector/library): use programming language instead of package
manager
* feat(library): add general advisory
* test(utils): add a util function initializing DB
* test(advisory): add tests
* chore: use aquasecurity/bolt-fixtures
* refactor: add comments
* chore(mod): revert fanal version
* chore(mod): update trivy-db
* refactor: update the comment
2020-08-30 10:11:32 +03:00
rahul2393
6eebed33b2
improve ruby comparison version check. ( #552 )
...
* Implemented ruby comparison version check.
* Added semver package to validate and check version
* Added more tests
* Replaced go-version with semver
* Removing go-version from dependency
* Added check for ruby gem version format
* Updated semver model and patch rewrite process
* Refactoring
2020-07-19 18:03:56 +03:00
Masahiro331
03ad8a3cd0
Add GHSA support ( #467 )
...
* Change library advisory use github security advisory
* Add java scanner
* Add multi vulnsrc support
* Fix null pointer exception
* Add ghsa mock test
* Delete nuget & java
* Update README
* Fix bug
* refactor: add ghsa
* refactor: Add multi scanner in driver.go
* fix go.mod
* Add scanner.go
* Add parse lockfile
* unexport Driver & delete parse lockfile
* Fix scanner struct
* refactor: scanner -> advisory
* Add Driver
* delete Driver interface
* Add new drivers
* delete types.go
* Fix review
* Merge driver.go ← advisory.go
* Change NewDriver interface
Co-authored-by: Teppei Fukuda <knqyf263@gmail.com >
2020-05-30 09:34:00 +03:00
Teppei Fukuda
74717b888e
feat: support client/server mode ( #295 )
...
* chore(app): change dir
* feat(rpc): add a proto file and auto-generated files
* chore(dep): add dependencies
* fix(app): fix import path
* fix(integration): fix import path
* fix(protoc): use enum for severity
* chore(Makefile): add fmt andd protoc
* chore(clang): add .clang-format
* refactor: split functions for client/server (#296 )
* refactor(db): split db.Download
* refactor(standalone): create a different package
* refactor(vulnerability): split FillAndFilter
* fix(protoc): use enum for severity
* chore(Makefile): add fmt andd protoc
* chore(clang): add .clang-format
* fix(db): remove an unused variable
* fix(db): expose the github client as an argument of constructor
* refactor(vulnerability): add the detail message
* feat(rpc): add rpc client (#302 )
* fix(protoc): use enum for severity
* chore(Makefile): add fmt andd protoc
* chore(clang): add .clang-format
* feat(rpc): convert types
* feat(rpc): add rpc client
* token: Refactor to handle bad headers being set
Signed-off-by: Simarpreet Singh <simar@linux.com >
* feat(rpc): add rpc server (#303 )
* feat(rpc): add rpc server
* feat(utils): add CopyFile
* feat(server/config): add config struct
* feat(detector): add detector
* feat(scanner): delegate procedures to detector
* fix(scanner): fix the interface
* test(mock): add mocks
* test(rpc/server): add tests
* test(rpc/ospkg/server): add tests
* tets(os/detector): add tests
* refactor(library): move directories
* chore(dependency): add google/wire
* refactor(library): introduce google/wire
* refactor(ospkg/detector): move directory
* feat(rpc): add eosl
* refactor(ospkg): introduce google/wire
* refactor(wire): bind an interface
* refactor(client): use wire.Struct
* chore(Makefile): fix wire
* test(server): add AssertExpectations
* test(server): add AssertExpectations
* refactor(server): remove debug log
* refactor(error): add more context messages
* test(server): fix error message
* refactor(test): create a constructor of mock
* refactor(config): remove an unused variable
* test(config): add an assertion to test the config struct
* feat(client/server): add sub commands (#304 )
* feat(rpc): add rpc server
* feat(utils): add CopyFile
* feat(server/config): add config struct
* feat(detector): add detector
* feat(scanner): delegate procedures to detector
* fix(scanner): fix the interface
* feat(client/server): add sub commands
* merge(server3)
* test(scan): remove an unused mock
* refactor(client): generate the constructor by wire
* fix(cli): change the default port
* fix(server): use auto-generated constructor
* feat(ospkg): return eosl
* test(integration): add integration tests for client/server (#306 )
* fix(server): remove unnecessary options
* test(integration): add integration tests for client/server
* fix(server): wrap an error
* fix(server): change the update interval
* fix(server): display the error detail
* test(config): add an assertion to test the config struct
* fix(client): returns an error when failing to initizlie a logger
* test(ospkg/server): add eosl
* Squashed commit of the following:
* test(server): refactor and add tests (#307 )
* test(github): create a mock
* test(db): create a mock
* test(server): add tests for DB hot update
* chore(db): add a log message
* refactor(db): introduce google/wire
* refactor(rpc): move directory
* refactor(injector): fix import name
* refactor(import): remove new lines
* fix(server): display the error detail
* fix(server): change the update interval
* fix(server): wrap an error
* test(integration): add integration tests for client/server
* fix(server): remove unnecessary options
* refactor(server): return an error when failing to initialize a logger
* refactor(server): remove unused error
* fix(client/server): fix default port
* chore(README): add client/server
* chore(README): update
2019-12-13 15:00:11 +02:00
