feat: add support for Bitnami cataloguer #3341
Open
+3,783
−134
Commits on Oct 16, 2024
-
prototype: start bitnami cataloger
Bitnami images have spdx SBOMs at predictable paths, and Syft could more accurately identify the software in these images by scanning those SBOMs. Start work on this by forking the sbom-cataloger as a new bitnami-cataloger. Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com>
-
wire up bitnami cataloger to run on images by default
Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com>
-
feat: add support for Bitnami cataloguer
Signed-off-by: juan131 <jariza@vmware.com>
-
feat: use a better SPDX sample for unit tests
Signed-off-by: juan131 <jariza@vmware.com>
Commits on Oct 17, 2024
-
bugfix: only report bitnami pkgs
Signed-off-by: juan131 <jariza@vmware.com>
-
feat: adapt JSON schema, spdxutil and packagemetadata
Signed-off-by: juan131 <jariza@vmware.com>
Commits on Oct 18, 2024
-
-
bugfix: use new bitnami purl type
Signed-off-by: juan131 <jariza@vmware.com>
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.