mirror of
https://github.com/aquasecurity/trivy.git
synced 2025-12-13 00:00:19 -08:00
17b84f6c09
* wip: Add a failing test to demo severity override Signed-off-by: Simarpreet Singh <simar@linux.com> * scan.go: Return osFound for use in determining vendor. Signed-off-by: Simarpreet Singh <simar@linux.com> * pkg: Fix ScanImage return in case an OSFound Signed-off-by: Simarpreet Singh <simar@linux.com> * scan_test: Include a package-lock.json for happy path Signed-off-by: Simarpreet Singh <simar@linux.com> * wip: Add a test to include various reportResult types Signed-off-by: Simarpreet Singh <simar@linux.com> * Makefile: Add a target to generate mocks. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Pass reportType as argument for FillInfo. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Add other types of vulnerabilities. Signed-off-by: Simarpreet Singh <simar@linux.com> * integration: Update golden files. Signed-off-by: Simarpreet Singh <simar@linux.com> * ospkg: Fix FillInfo for ospkg/server Signed-off-by: Simarpreet Singh <simar@linux.com> * rpc: Add os.Family type to Response. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability_test.go: Add case where no vendor severity exists. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Fallback to NVD if it exists. Also add tests for other cases. Signed-off-by: Simarpreet Singh <simar@linux.com> * rpc: Fix a few sites with reportType info and tests. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Remove VendorSeverity from displayed results Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Add vulnerability source information. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Add VendorSeverity logic for lightDB as well. This commit also makes FillInfo logic common to both light and full DBs. Signed-off-by: Simarpreet Singh <simar@linux.com> * remove some crufty TODOs Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability_test: Add a case for light db for documentation purposes Signed-off-by: Simarpreet Singh <simar@linux.com> * mod: update trivy-db to point to master Signed-off-by: Simarpreet Singh <simar@linux.com> * scan_test: Remove cruft and bring back test cases Signed-off-by: Simarpreet Singh <simar@linux.com> * scan_test: Add pkg Type to mock return Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: reorder err check after err Signed-off-by: Simarpreet Singh <simar@linux.com> * client_test: Fix import ordering Signed-off-by: Simarpreet Singh <simar@linux.com> * convert.go: Use result.Type Signed-off-by: Simarpreet Singh <simar@linux.com> * convert: Use result.Type and simplify ConvertFromRpcResults signature Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Refactor calls to getVendorSeverity Signed-off-by: Simarpreet Singh <simar@linux.com> * integration: Remove centos-7-critical.json.golden There's no critical vulnerability in CentOS 7 anymore. In addition this test was not adding any value that is already not covered by existing tests cases. Signed-off-by: Simarpreet Singh <simar@linux.com> * rpc: Include severity source in tests. Signed-off-by: Simarpreet Singh <simar@linux.com> * integration: Update test db to include VendorSeverity. Test DB is now a snapshot of full database from trivy-db. Also update golden files to include SeveritySource. Signed-off-by: Simarpreet Singh <simar@linux.com> * vulnerability: Make centos7 use RHEL vendor severities Signed-off-by: Simarpreet Singh <simar@linux.com>
34 lines
1.3 KiB
Modula-2
34 lines
1.3 KiB
Modula-2
module github.com/aquasecurity/trivy
|
|
|
|
go 1.13
|
|
|
|
require (
|
|
github.com/aquasecurity/fanal v0.0.0-20200413182139-9213b79eba1a
|
|
github.com/aquasecurity/go-dep-parser v0.0.0-20190819075924-ea223f0ef24b
|
|
github.com/aquasecurity/trivy-db v0.0.0-20200408191531-0a25a37ec16f
|
|
github.com/caarlos0/env/v6 v6.0.0
|
|
github.com/cenkalti/backoff v2.2.1+incompatible
|
|
github.com/cheggaaa/pb/v3 v3.0.3
|
|
github.com/docker/docker v1.4.2-0.20190924003213-a8608b5b67c7
|
|
github.com/genuinetools/reg v0.16.0
|
|
github.com/golang/protobuf v1.3.3
|
|
github.com/google/go-github/v28 v28.1.1
|
|
github.com/google/wire v0.3.0
|
|
github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d
|
|
github.com/knqyf263/go-rpm-version v0.0.0-20170716094938-74609b86c936
|
|
github.com/knqyf263/go-version v1.1.1
|
|
github.com/kylelemons/godebug v1.1.0
|
|
github.com/mattn/go-colorable v0.1.4 // indirect
|
|
github.com/olekukonko/tablewriter v0.0.2-0.20190607075207-195002e6e56a
|
|
github.com/spf13/afero v1.2.2
|
|
github.com/stretchr/testify v1.4.0
|
|
github.com/twitchtv/twirp v5.10.1+incompatible
|
|
github.com/urfave/cli v1.22.1
|
|
go.uber.org/atomic v1.5.1 // indirect
|
|
go.uber.org/multierr v1.4.0 // indirect
|
|
go.uber.org/zap v1.13.0
|
|
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45
|
|
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543
|
|
k8s.io/utils v0.0.0-20191114184206-e782cd3c129f
|
|
)
|