Code

feat(vex): VEX Repository support#7206

Code

Merged

knqyf263 merged 56 commits intoaquasecurity:mainaquasecurity/trivy:mainfrom knqyf263:feat/vexrepoknqyf263/trivy:feat/vexrepoCopy head branch name to clipboardJul 25, 2024

+3,504-650

Commits

Commits on Jul 18, 2024

• feat: add vex subcommand

  Show description for 547363a
  knqyf263

  committed
  547363a

  Copy full SHA for 547363a

• feat: adhere to VEX Repository Specification

  Show description for 6ab7fc8
  knqyf263

  committed
  6ab7fc8

  Copy full SHA for 6ab7fc8

• fix: inherit logger options for fatal errors

  Show description for 476dcfc
  knqyf263

  committed
  476dcfc

  Copy full SHA for 476dcfc

• feat: download VEX repos

  Show description for d885ecf
  knqyf263

  committed
  d885ecf

  Copy full SHA for d885ecf

• feat: add --vex-repos to 'trivy clean'

  Show description for 8ba0871
  knqyf263

  committed
  8ba0871

  Copy full SHA for 8ba0871

• add 'trivy vex repo download'

  Show description for 319eb65
  knqyf263

  committed
  319eb65

  Copy full SHA for 319eb65

• feat: cache ETag

  Show description for 2b18878
  knqyf263

  committed
  2b18878

  Copy full SHA for 2b18878

• TODO: refactor CycloneDX

  Show description for d2ec227
  knqyf263

  committed
  d2ec227

  Copy full SHA for d2ec227

• refactor: always create parent map

  Show description for c548e38
  knqyf263

  committed
  c548e38

  Copy full SHA for c548e38

• refactor: rename library to package

  Show description for 9787609
  knqyf263

  committed
  9787609

  Copy full SHA for 9787609

• refactor: rename FilterOption to FilterOptions

  Show description for 71b8ca3
  knqyf263

  committed
  71b8ca3

  Copy full SHA for 71b8ca3

• fix: re-use the existing UID

  Show description for 6a0533d
  knqyf263

  committed
  6a0533d

  Copy full SHA for 6a0533d

• refactor: re-define interface

  Show description for 7b35ccc
  knqyf263

  committed
  7b35ccc

  Copy full SHA for 7b35ccc

• test: fit for new interface

  Show description for abd6ab9
  knqyf263

  committed
  abd6ab9

  Copy full SHA for abd6ab9

• fix: re-use serial number from SBOM

  Show description for 7458b32
  knqyf263

  committed
  7458b32

  Copy full SHA for 7458b32

• fix: go-github may return nil for transport

  Show description for 1353291
  knqyf263

  committed
  1353291

  Copy full SHA for 1353291

• feat: store cache metadata for VEX repos

  Show description for e969bf8
  knqyf263

  committed
  e969bf8

  Copy full SHA for e969bf8

• feat: add RepositorySet

  Show description for d098fb6
  knqyf263

  committed
  d098fb6

  Copy full SHA for d098fb6

• feat(csaf): support VEX source

  Show description for 430954e
  knqyf263

  committed
  430954e

  Copy full SHA for 430954e

• test: fix sources

  Show description for 34ade4b
  knqyf263

  committed
  34ade4b

  Copy full SHA for 34ade4b

• test(vex): add tests for repository set

  Show description for 33f8207
  knqyf263

  committed
  33f8207

  Copy full SHA for 33f8207

• test: add more vexr tests

  Show description for 3d6e0e3
  knqyf263

  committed
  3d6e0e3

  Copy full SHA for 3d6e0e3

• feat: skip repos that hasn't been downloaded

  Show description for 02e173a
  knqyf263

  committed
  02e173a

  Copy full SHA for 02e173a

• feat: use repository_url for OCI

  Show description for ab19441
  knqyf263

  committed
  ab19441

  Copy full SHA for ab19441

• feat: add "--vex repo"

  Show description for 0b8c2fd
  knqyf263

  committed
  0b8c2fd

  Copy full SHA for 0b8c2fd

• feat: add "enabled" field

  Show description for 03c707f
  knqyf263

  committed
  03c707f

  Copy full SHA for 03c707f

• feat: add authentication

  Show description for 82f9595
  knqyf263

  committed
  82f9595

  Copy full SHA for 82f9595

• test(vex): add tests for vex-repo

  Show description for a22ad36
  knqyf263

  committed
  a22ad36

  Copy full SHA for a22ad36

• feat: support version array

  Show description for 2609053
  knqyf263

  committed
  2609053

  Copy full SHA for 2609053

Commits on Jul 20, 2024

• test(vex): add tests for manager

  Show description for 438187d
  knqyf263

  committed
  438187d

  Copy full SHA for 438187d

• feat: add "vex repo list"

  Show description for 74ebecf
  knqyf263

  committed
  74ebecf

  Copy full SHA for 74ebecf

• chore: rename --vex-repos to --vex-repo

  Show description for 83d5ae0
  knqyf263

  committed
  83d5ae0

  Copy full SHA for 83d5ae0

• docs: add VEX Repository

  Show description for db16176
  knqyf263

  committed
  db16176

  Copy full SHA for db16176

• feat(vex): add --skip-vex-repo-update

  Show description for 2f04b6e
  knqyf263

  committed
  2f04b6e

  Copy full SHA for 2f04b6e

Commits on Jul 22, 2024

• Merge branch 'main' into feat/vexrepo

  knqyf263

  committed
  1f4ccb9

  Copy full SHA for 1f4ccb9

• test(integration): add VEX tests

  Show description for 8fcd8d2
  knqyf263

  committed
  8fcd8d2

  Copy full SHA for 8fcd8d2

• fix(plugin): join plugins dir

  Show description for e2ce02f
  knqyf263

  committed
  e2ce02f

  Copy full SHA for e2ce02f

• test(vex): comply with new spec

  Show description for bfb24cf
  knqyf263

  committed
  bfb24cf

  Copy full SHA for bfb24cf

• test(vex): show a file path

  Show description for ba16b88
  knqyf263

  committed
  ba16b88

  Copy full SHA for ba16b88

• test(vex): add enabled field

  Show description for 6dff269
  knqyf263

  committed
  6dff269

  Copy full SHA for 6dff269

• feat(download): support client mode

  Show description for 8ee2353
  knqyf263

  committed
  8ee2353

  Copy full SHA for 8ee2353

• fix: support insecure in custom transport

  Show description for 7e24dca
  knqyf263

  committed
  7e24dca

  Copy full SHA for 7e24dca

• fix: lint issues

  Show description for aec8684
  knqyf263

  committed
  aec8684

  Copy full SHA for aec8684

Commits on Jul 23, 2024

• ci: switch to ubuntu-latest

  Show description for 32bcd21
  knqyf263

  committed
  32bcd21

  Copy full SHA for 32bcd21

• docs: auto-generate

  Show description for d5cc59d
  knqyf263

  committed
  d5cc59d

  Copy full SHA for d5cc59d

• Update manager.go

  Show description for 422e03c
  

  knqyf263

  and

  DmitriyLewen

  authored
  422e03c

  Copy full SHA for 422e03c

Commits on Jul 25, 2024

• fix: cli usage

  Show description for fca16cb
  knqyf263

  committed
  fca16cb

  Copy full SHA for fca16cb

• Update pkg/commands/operation/operation.go

  Show description for 71c9bf3
  

  knqyf263

  and

  DmitriyLewen

  authored
  71c9bf3

  Copy full SHA for 71c9bf3

• docs(cache): add a link to vex repo

  Show description for 642f2d9
  knqyf263

  committed
  642f2d9

  Copy full SHA for 642f2d9

• revert: add parents flag

  Show description for 9881b0f
  knqyf263

  committed
  9881b0f

  Copy full SHA for 9881b0f

• chore: add a comment

  Show description for 19e60ba
  knqyf263

  committed
  19e60ba

  Copy full SHA for 19e60ba

• chore: add a long description

  Show description for e02af76
  knqyf263

  committed
  e02af76

  Copy full SHA for e02af76

• fix: delete unused field

  Show description for 424759e
  knqyf263

  committed
  424759e

  Copy full SHA for 424759e

• fix: delete debug code

  Show description for 07ba807
  knqyf263

  committed
  07ba807

  Copy full SHA for 07ba807

• docs: generate references

  Show description for ae853ce
  knqyf263

  committed
  ae853ce

  Copy full SHA for ae853ce

• feat: show debug message once per package

  Show description for 1479468
  knqyf263

  committed
  1479468

  Copy full SHA for 1479468