admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-01-31 13:53:14 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
7299867c21f18a2a7af9e90c1fce3dfba6f7e4f0
aquasecurity-trivy/go.mod

408 lines
21 KiB
Modula-2
Raw Normal View History

Transfer repositoriy
2019-08-18 22:22:54 -10:00
module github.com/aquasecurity/trivy
Initial commit (#1) * initial
2019-05-07 15:41:03 +09:00
chore: bump Go to `1.20` (#5067) * update go.mod, linter, protoc dockerfile * bump go version in .golangci.yaml
2023-08-30 16:22:33 +06:00
go 1.20
Initial commit (#1) * initial
2019-05-07 15:41:03 +09:00
require (
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#5098) Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.3.0 to 1.3.1. - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.3.0...sdk/azcore/v1.3.1) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:18:15 +03:00
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.7.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.1
fix(nodejs): remove unused fields for the pnpm lockfile (#4630) * refactor(nodejs): remove unused fields for the pnpm lockfile * run go mod tidy --------- Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-06-19 06:17:31 +03:00
github.com/BurntSushi/toml v1.3.2
chore(deps): bump github.com/CycloneDX/cyclonedx-go (#5102) Bumps [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) from 0.7.2-0.20230625092137-07e2f29defc3 to 0.7.2. - [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml) - [Commits](https://github.com/CycloneDX/cyclonedx-go/commits/v0.7.2) --- updated-dependencies: - dependency-name: github.com/CycloneDX/cyclonedx-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-10 15:57:56 +03:00
github.com/CycloneDX/cyclonedx-go v0.7.2
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/GoogleCloudPlatform/docker-credential-gcr v2.0.5+incompatible
chore(deps): bump github.com/Masterminds/sprig/v3 from 3.2.2 to 3.2.3 (#3253) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-11 19:16:10 +02:00
github.com/Masterminds/sprig/v3 v3.2.3
chore(deps): bump github.com/open-policy-agent/opa from 0.39.0 to 0.40.0 (#2079)
2022-05-02 08:47:19 +03:00
github.com/NYTimes/gziphandler v1.1.1
chore(deps): bump github.com/alicebob/miniredis/v2 from 2.30.3 to 2.30.4 (#4758) Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.3 to 2.30.4. - [Release notes](https://github.com/alicebob/miniredis/releases) - [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md) - [Commits](https://github.com/alicebob/miniredis/compare/v2.30.3...v2.30.4) --- updated-dependencies: - dependency-name: github.com/alicebob/miniredis/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-06 16:23:01 +03:00
github.com/alicebob/miniredis/v2 v2.30.4
Sunsetting VendorVectors (#718)
2020-10-25 19:45:56 +08:00
github.com/aquasecurity/bolt-fixtures v0.0.0-20200903104109-d34e7f983986
chore(deps): Upgrade defsec to v0.93.1 (#5348)
2023-10-08 06:40:21 -06:00
github.com/aquasecurity/defsec v0.93.1
fix(java): fix infinite loop when `relativePath` field points to `pom.xml` being scanned (#5470)
2023-10-31 07:47:58 +06:00
github.com/aquasecurity/go-dep-parser v0.0.0-20231030050624-4548cca9a5c9
fix: version comparison (#740) * feat: add comparer * refactor: rename lang with ecosystem * feat(bundler): add comparer * feat(node): add comparer * feat(bundler): integrate comparer * feat(cargo): integrate comparer * feat(composer): add comparer * feat(ghsa): integrate comparer * feat(node): integrate comparer * feat(python): integrate comparer * test(bundler): add tests * test(cargo): add tests * test(composer): add tests * test(ghsa): add tests * test(node): add tests * test(python): add tests * refactor(utils): remove unnecessary functions * test(utils): add tests * test: rename bucket prefixes * fix(detect): use string * chore: update dependencies * docs: add comments * fix(cargo): handle unpatched vulnerability * test(db): update trivy-db for integration tests * test(integration): update a golden file * test(cargo): Add a case for missing patched version Signed-off-by: Simarpreet Singh <simar@linux.com> * refactor(advisory): update comments * refactor(node/advisory): change the receiver * chore(mod): update dependencies * refactor(comparer): unexport MatchVersion * refactor: fix maligned structs * test(node): add empty value * refactor * refactor: sort imports * chore(mod): update trivy-db Co-authored-by: Simarpreet Singh <simar@linux.com>
2020-11-17 18:38:58 +09:00
github.com/aquasecurity/go-gem-version v0.0.0-20201115065557-8eed6fe000ce
github.com/aquasecurity/go-npm-version v0.0.0-20201110091526-0b796d180798
fix(python): follow PEP 440 (#816) * feat(python): replace go-version with go-pep440-version * chore(mod): add go-pep440-version * refactor: add trick for golangci-lint * refactor: rename test functions
2021-01-25 14:44:07 +02:00
github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46
github.com/aquasecurity/go-version v0.0.0-20210121072130-637058cfe492
chore: Switch github.com/liamg dependencies to github.com/aquasecurity (#3069)
2022-10-25 09:17:47 +01:00
github.com/aquasecurity/loading v0.0.5
chore(deps): bump github.com/aquasecurity/table from 1.7.2 to 1.8.0 (#2810)
2022-09-04 12:11:31 +03:00
github.com/aquasecurity/table v1.8.0
chore(deps): bump github.com/moby/buildkit from v0.10.6 to v0.11.0 (#3411)
2023-01-12 09:45:07 +03:00
github.com/aquasecurity/testdocker v0.0.0-20230111101738-e741bda259da
chore: Switch github.com/liamg dependencies to github.com/aquasecurity (#3069)
2022-10-25 09:17:47 +01:00
github.com/aquasecurity/tml v0.6.1
feat(k8s): add support for vulnerability detection (#5268) Signed-off-by: knqyf263 <knqyf263@gmail.com> Signed-off-by: chenk <hen.keinan@gmail.com> Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io> Co-authored-by: chenk <hen.keinan@gmail.com>
2023-10-14 21:32:55 +09:00
github.com/aquasecurity/trivy-db v0.0.0-20231005141211-4fc651f7ac8d
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
github.com/aquasecurity/trivy-java-db v0.0.0-20230209231723-7cddb1406728
feat: scan vulns on k8s core component apps (#5418) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-11-01 11:31:48 +02:00
github.com/aquasecurity/trivy-kubernetes v0.5.9-0.20231019164303-dcdfdc50763f
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.17.18 to 1.21.0 (#5497) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-02 01:09:25 +00:00
github.com/aws/aws-sdk-go-v2 v1.22.0
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/config v1.18.45
github.com/aws/aws-sdk-go-v2/credentials v1.13.43
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.90
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 (#4536)
2023-06-04 11:13:44 +03:00
github.com/aws/aws-sdk-go-v2/service/ec2 v1.98.0
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.17.18 to 1.21.0 (#5497) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-02 01:09:25 +00:00
github.com/aws/aws-sdk-go-v2/service/ecr v1.21.0
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/service/s3 v1.40.2
github.com/aws/aws-sdk-go-v2/service/sts v1.23.2
feat: add support for .trivyignore.yaml (#5070) * feat: add support for .trivyignore.yaml Signed-off-by: knqyf263 <knqyf263@gmail.com> * add test for trivyignore.yaml * Add doublestar support Signed-off-by: knqyf263 <knqyf263@gmail.com> * go mod tidy Signed-off-by: knqyf263 <knqyf263@gmail.com> * update docs * test: fix Signed-off-by: knqyf263 <knqyf263@gmail.com> * fix: load .trivyignore once Signed-off-by: knqyf263 <knqyf263@gmail.com> * feat: add a debug log Signed-off-by: knqyf263 <knqyf263@gmail.com> * docs: add a table for fields Signed-off-by: knqyf263 <knqyf263@gmail.com> * fix: skip empty results Signed-off-by: knqyf263 <knqyf263@gmail.com> * revert the change Signed-off-by: knqyf263 <knqyf263@gmail.com> --------- Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2023-08-31 14:53:37 +03:00
github.com/bmatcuk/doublestar/v4 v4.6.0
feat(client): retry HTTP request when getting an unavailable error (#350) * feat(client): retry HTTP request when getting an unavailable error * fix(integration-test): use a snapshot database for Docker mode (#352) * fix(integration): add a binary name The first argument is used for the program name. --skip-update was ignored. * fix(integration): use a snapshot database After a new vulnerability is found, this test fails * chore(integration): add t.Run * refactor(client): functionalize common processes * refactor(client): remove unused const
2020-01-05 10:21:18 +02:00
github.com/cenkalti/backoff v2.2.1+incompatible
chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4 (#5092) Bumps [github.com/cheggaaa/pb/v3](https://github.com/cheggaaa/pb) from 3.1.2 to 3.1.4. - [Commits](https://github.com/cheggaaa/pb/compare/v3.1.2...v3.1.4) --- updated-dependencies: - dependency-name: github.com/cheggaaa/pb/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 23:50:58 +03:00
github.com/cheggaaa/pb/v3 v3.1.4
chore(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5 (#5097) Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.3 to 1.7.5. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](https://github.com/containerd/containerd/compare/v1.7.3...v1.7.5) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:19:50 +03:00
github.com/containerd/containerd v1.7.5
chore(deps): bump github.com/docker/docker from 24.0.5+incompatible to 24.0.7+incompatible (#5472) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-31 10:46:24 +09:00
github.com/docker/docker v24.0.7+incompatible
feat: support registry token (#482) * feat: support registry token * chore(mod): update * test(integration): add registry tests * chore(mod): update * test(integration): comment in terminate Co-authored-by: Simarpreet Singh <simar@linux.com>
2020-05-19 20:49:27 +03:00
github.com/docker/go-connections v0.4.0
chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4 (#5092) Bumps [github.com/cheggaaa/pb/v3](https://github.com/cheggaaa/pb) from 3.1.2 to 3.1.4. - [Commits](https://github.com/cheggaaa/pb/compare/v3.1.2...v3.1.4) --- updated-dependencies: - dependency-name: github.com/cheggaaa/pb/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 23:50:58 +03:00
github.com/fatih/color v1.15.0
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530)
2023-06-04 09:25:43 +03:00
github.com/go-git/go-git/v5 v5.7.0
chore(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1 (#4166)
2023-05-04 13:44:02 +03:00
github.com/go-openapi/runtime v0.26.0
chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)
2023-04-02 10:49:41 +03:00
github.com/go-openapi/strfmt v0.21.7
chore(deps): bump github.com/go-redis/redis/v8 from 8.11.4 to 8.11.5 (#1925)
2022-04-04 11:06:49 +03:00
github.com/go-redis/redis/v8 v8.11.5
refactor: Fix fanal import paths and remove dotfiles
2022-06-20 09:43:33 +01:00
github.com/golang-jwt/jwt v3.2.2+incompatible
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/golang/protobuf v1.5.3
feat: k8s private registries support (#4987) * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * fix: add non empty credential update Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-20 09:07:30 +03:00
github.com/google/go-containerregistry v0.16.1
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/google/licenseclassifier/v2 v2.0.0
chore(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#5286) Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.0 to 1.3.1. - [Release notes](https://github.com/google/uuid/releases) - [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md) - [Commits](https://github.com/google/uuid/compare/v1.3.0...v1.3.1) --- updated-dependencies: - dependency-name: github.com/google/uuid dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 18:45:32 +03:00
github.com/google/uuid v1.3.1
chore(deps): bump github.com/google/wire from 0.4.0 to 0.5.0 (#1712)
2022-02-21 18:46:55 +02:00
github.com/google/wire v0.5.0
chore(deps): bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.2 (#5289) Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.7.1 to 1.7.2. - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml) - [Commits](https://github.com/hashicorp/go-getter/compare/v1.7.1...v1.7.2) --- updated-dependencies: - dependency-name: github.com/hashicorp/go-getter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 18:45:07 +03:00
github.com/hashicorp/go-getter v1.7.2
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/hashicorp/go-multierror v1.1.1
chore(deps): bump github.com/hashicorp/golang-lru/v2 from 2.0.2 to 2.0.6 (#5094) Bumps [github.com/hashicorp/golang-lru/v2](https://github.com/hashicorp/golang-lru) from 2.0.2 to 2.0.6. - [Release notes](https://github.com/hashicorp/golang-lru/releases) - [Commits](https://github.com/hashicorp/golang-lru/compare/v2.0.2...v2.0.6) --- updated-dependencies: - dependency-name: github.com/hashicorp/golang-lru/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:23:20 +03:00
github.com/hashicorp/golang-lru/v2 v2.0.6
chore(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 (#4478)
2023-05-28 06:37:30 +03:00
github.com/in-toto/in-toto-golang v0.9.0
fix(alpine): replace go-deb-version with go-apk-version (#520) * fix(alpine): add a failing test with go-deb-version * fix(alpine): replace go-deb-version with go-apk-version * chore(mod): update dependencies * chore(mod): update go-apk-version
2020-06-11 12:55:34 +03:00
github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f
fix(cyclonedx): incompliant affect ref (#3679)
2023-02-26 23:04:29 +09:00
github.com/knqyf263/go-deb-version v0.0.0-20230223133812-3ed183d23422
feat(sbom): add cyclonedx sbom scan (#2203) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-07-04 02:03:21 +09:00
github.com/knqyf263/go-rpm-version v0.0.0-20220614171824-631e686d1075
fix: correct invalid MD5 hashes for rpms ending with one or more zero bytes (#5393)
2023-10-18 21:29:54 -06:00
github.com/knqyf263/go-rpmdb v0.0.0-20231008124120-ac49267ab4e1
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/knqyf263/nested v0.0.1
refactor: Fix fanal import paths and remove dotfiles
2022-06-20 09:43:33 +01:00
github.com/kylelemons/godebug v1.1.0
chore(deps): bump github.com/magefile/mage from 1.14.0 to 1.15.0 (#4915) Bumps [github.com/magefile/mage](https://github.com/magefile/mage) from 1.14.0 to 1.15.0. - [Release notes](https://github.com/magefile/mage/releases) - [Changelog](https://github.com/magefile/mage/blob/master/.goreleaser.yml) - [Commits](https://github.com/magefile/mage/compare/v1.14.0...v1.15.0) --- updated-dependencies: - dependency-name: github.com/magefile/mage dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-02 13:52:46 +03:00
github.com/magefile/mage v1.15.0
chore(deps): bump github.com/mailru/easyjson from 0.7.6 to 0.7.7 (#2448)
2022-07-07 11:18:26 +03:00
github.com/mailru/easyjson v0.7.7
feat: add virtual machine scan command (#2910) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-11-27 18:45:00 +09:00
github.com/masahiro331/go-disk v0.0.0-20220919035250-c8da316f91ac
fix(aws): resolve endpoint if endpoint is passed (#4925) * fix(aws): resolve endpoint to get identity if endpoint is passed * resolve endpoint for ami and ebs * return an error if aws region is missing
2023-08-08 10:19:40 +03:00
github.com/masahiro331/go-ebs-file v0.0.0-20230228042409-005c81d4ae43
fix(vm): update ext4-filesystem parser for parse multi block extents (#4616) * chore(deps): update ext4-filesystem parser for parse multi block extents * test(vm): update integration-vm test fixtures * test(vm): add gzip decompresser for sparse file * test(vm): add mage command update golden file for vm integration test * chore(magefile): [WIP] change test repository * Revert "chore(magefile): [WIP] change test repository" This reverts commit c015c8892f250698bd57f1d320b18bf19c77a76e. * fix(test): update fixtures and golden file * fix(test): revert fixVersion and PkgID
2023-06-19 01:41:55 +09:00
github.com/masahiro331/go-ext4-filesystem v0.0.0-20230612143131-27ccd485b7a1
feat(java): support GitLab Advisory Database (#917) * feature(maven) support requirements * test(maven) fix test name * update(go.mod) update fanal * refactor(maven compare) fix test * update(go.mod) update go-mvn-version
2021-04-30 00:40:51 +09:00
github.com/masahiro331/go-mvn-version v0.0.0-20210429150710-d3157d602a08
chore(deps): bump github.com/hashicorp/golang-lru from 0.5.4 to 2.0.1 (#3265) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: masahiro331 <m_fujimura@r.recruit.co.jp>
2022-12-25 12:39:26 +02:00
github.com/masahiro331/go-vmdk-parser v0.0.0-20221225061455-612096e4bbbd
fix(vm): support sector size of 4096 (#4564) Co-authored-by: masahiro331 <m_fujimura@r.recruit.co.jp>
2023-06-08 11:31:13 +03:00
github.com/masahiro331/go-xfs-filesystem v0.0.0-20230608043311-a335f4599b70
feat(misconf): Added fs.FS based scanning via latest defsec (#2084) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-05-10 13:05:00 +01:00
github.com/mitchellh/hashstructure/v2 v2.0.2
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/mitchellh/mapstructure v1.5.0
chore(deps): Update defsec to v0.90.3 (#4793) * chore(deps): Update defsec to v0.90.2 Signed-off-by: Simar <simar@linux.com> * go mod tidy --------- Signed-off-by: Simar <simar@linux.com>
2023-07-07 02:13:56 -06:00
github.com/moby/buildkit v0.11.6
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/open-policy-agent/opa v0.45.0
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/opencontainers/go-digest v1.0.0
chore(deps): bump github.com/opencontainers/image-spec (#5295) Bumps [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) from 1.1.0-rc4 to 1.1.0-rc5. - [Release notes](https://github.com/opencontainers/image-spec/releases) - [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md) - [Commits](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5) --- updated-dependencies: - dependency-name: github.com/opencontainers/image-spec dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 08:18:09 +03:00
github.com/opencontainers/image-spec v1.1.0-rc5
feat: PURL matching with qualifiers in OpenVEX (#5061) * feat: PURL match in OpenVEX * test: fix fixture * Update docs/docs/supply-chain/vex.md Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com> * docs: add a comment about overriding statements --------- Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2023-08-30 10:48:32 +03:00
github.com/openvex/go-vex v0.2.5
chore(deps): bump github.com/owenrumney/go-sarif/v2 from 2.2.0 to 2.2.2 (#5297) Bumps [github.com/owenrumney/go-sarif/v2](https://github.com/owenrumney/go-sarif) from 2.2.0 to 2.2.2. - [Release notes](https://github.com/owenrumney/go-sarif/releases) - [Changelog](https://github.com/owenrumney/go-sarif/blob/main/.goreleaser.yml) - [Commits](https://github.com/owenrumney/go-sarif/compare/v2.2.0...v2.2.2) --- updated-dependencies: - dependency-name: github.com/owenrumney/go-sarif/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-01 17:43:34 +00:00
github.com/owenrumney/go-sarif/v2 v2.2.2
chore(deps): bump github.com/package-url/packageurl-go from 0.1.2-0.20230812223828-f8bb31c1f10b to 0.1.2 (#5491) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-02 10:52:57 +09:00
github.com/package-url/packageurl-go v0.1.2
chore: enable go-critic (#5302) * chore: enable gocritic Signed-off-by: knqyf263 <knqyf263@gmail.com> * refactor: fix lint issues Signed-off-by: knqyf263 <knqyf263@gmail.com> * test: return true for latest versions Signed-off-by: knqyf263 <knqyf263@gmail.com> * chore(lint): enforce map and slice styles Signed-off-by: knqyf263 <knqyf263@gmail.com> --------- Signed-off-by: knqyf263 <knqyf263@gmail.com>
2023-10-02 11:33:21 +03:00
github.com/quasilyte/go-ruleguard/dsl v0.3.22
chore(deps): bump github.com/samber/lo from 1.37.0 to 1.38.1 (#4147)
2023-05-05 12:56:59 +03:00
github.com/samber/lo v1.38.1
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/saracen/walker v0.1.3
chore(deps): bump github.com/secure-systems-lab/go-securesystemslib (#4919) Bumps [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](https://github.com/secure-systems-lab/go-securesystemslib/compare/v0.6.0...v0.7.0) --- updated-dependencies: - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-02 14:37:09 +03:00
github.com/secure-systems-lab/go-securesystemslib v0.7.0
build: fix a compile error with Go 1.21 (#5339) Signed-off-by: knqyf263 <knqyf263@gmail.com>
2023-10-05 13:06:32 +03:00
github.com/sigstore/rekor v1.2.2
chore(deps): bump github.com/openvex/go-vex from 0.2.0 to 0.2.1 (#4914) Bumps [github.com/openvex/go-vex](https://github.com/openvex/go-vex) from 0.2.0 to 0.2.1. - [Release notes](https://github.com/openvex/go-vex/releases) - [Commits](https://github.com/openvex/go-vex/compare/v0.2.0...v0.2.1) --- updated-dependencies: - dependency-name: github.com/openvex/go-vex dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 16:07:12 +03:00
github.com/sirupsen/logrus v1.9.3
chore(deps): bump github.com/sosedoff/gitkit from 0.3.0 to 0.4.0 (#4916) Bumps [github.com/sosedoff/gitkit](https://github.com/sosedoff/gitkit) from 0.3.0 to 0.4.0. - [Commits](https://github.com/sosedoff/gitkit/compare/v0.3.0...v0.4.0) --- updated-dependencies: - dependency-name: github.com/sosedoff/gitkit dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-02 14:41:38 +03:00
github.com/sosedoff/gitkit v0.4.0
feat(spdx): add support for SPDX 2.3 (#4058) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-04-23 23:36:04 +03:00
github.com/spdx/tools-golang v0.5.0
chore(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 (#4532)
2023-06-04 11:11:32 +03:00
github.com/spf13/cast v1.5.1
chore(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1 (#4166)
2023-05-04 13:44:02 +03:00
github.com/spf13/cobra v1.7.0
refactor: move from urfave/cli to spf13/cobra (#2458) Co-authored-by: afdesk <work@afdesk.com> Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2022-07-09 19:40:31 +03:00
github.com/spf13/pflag v1.0.5
chore(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#5093) Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/spf13/viper/releases) - [Commits](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0) --- updated-dependencies: - dependency-name: github.com/spf13/viper dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 09:17:08 +03:00
github.com/spf13/viper v1.16.0
fix(nodejs): remove unused fields for the pnpm lockfile (#4630) * refactor(nodejs): remove unused fields for the pnpm lockfile * run go mod tidy --------- Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-06-19 06:17:31 +03:00
github.com/stretchr/testify v1.8.4
bump github.com/testcontainers/testcontainers-go from 0.21.0 to 0.23.0 (#5018)
2023-08-21 15:16:56 +06:00
github.com/testcontainers/testcontainers-go v0.23.0
test(aws): move part of unit tests to integration (#4884) * test(aws): move part of unit tests to integration * fix typo * fix test --------- Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-08-02 18:48:52 +03:00
github.com/testcontainers/testcontainers-go/modules/localstack v0.21.0
chore(deps): bump github.com/tetratelabs/wazero from 1.2.0 to 1.2.1 (#4755) Bumps [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/tetratelabs/wazero/releases) - [Commits](https://github.com/tetratelabs/wazero/compare/v1.2.0...v1.2.1) --- updated-dependencies: - dependency-name: github.com/tetratelabs/wazero dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-02 17:52:44 +03:00
github.com/tetratelabs/wazero v1.2.1
chore(deps): bump github.com/twitchtv/twirp (#2077)
2022-05-06 19:04:34 +03:00
github.com/twitchtv/twirp v8.1.2+incompatible
test: validate CycloneDX with the JSON schema (#4956) * test: validate CycloneDX with the JSON schema * fix(sbom): move licenses to `name` field in Cyclonedx format (#4941) * use license.Name instead of Expression * update tests * test: add uuid package * test: compare UUID --------- Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2023-08-08 15:51:10 +03:00
github.com/xeipuuv/gojsonschema v1.2.0
chore(deps): bump github.com/xlab/treeprint from 1.1.0 to 1.2.0 (#4917) Bumps [github.com/xlab/treeprint](https://github.com/xlab/treeprint) from 1.1.0 to 1.2.0. - [Release notes](https://github.com/xlab/treeprint/releases) - [Commits](https://github.com/xlab/treeprint/compare/v1.1.0...v1.2.0) --- updated-dependencies: - dependency-name: github.com/xlab/treeprint dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-10 11:21:41 +03:00
github.com/xlab/treeprint v1.2.0
chore(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 (#3732) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-01 20:53:53 +02:00
go.etcd.io/bbolt v1.3.7
fix: fix MIME warnings after updating to Go 1.20 (#5336)
2023-10-05 18:58:40 +06:00
go.uber.org/zap v1.26.0
fix(rocky): add architectures support for advisories (#4691) * add multi-arch support for rocky linux advisories * feat: comply with the new signagure * bump trivy-db * fix tests * chore(deps): remove fork replace --------- Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-07-03 14:48:57 +06:00
golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1
fix(python): override BOM in `requirements.txt` files (#5375)
2023-10-14 14:37:32 +06:00
golang.org/x/mod v0.13.0
chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#4750) Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.2.0 to 0.3.0. - [Commits](https://github.com/golang/sync/compare/v0.2.0...v0.3.0) --- updated-dependencies: - dependency-name: golang.org/x/sync dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-02 14:57:57 +00:00
golang.org/x/sync v0.3.0
chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 18:45:22 +03:00
golang.org/x/term v0.13.0
fix: fix MIME warnings after updating to Go 1.20 (#5336)
2023-10-05 18:58:40 +06:00
golang.org/x/text v0.13.0
feat: add virtual machine scan command (#2910) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-11-27 18:45:00 +09:00
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2
chore(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#4752) Bumps google.golang.org/protobuf from 1.30.0 to 1.31.0. --- updated-dependencies: - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-07 07:56:30 +03:00
google.golang.org/protobuf v1.31.0
fix(kubernetes): Support floats in manifest yaml (#2297) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-06-12 15:01:50 +01:00
gopkg.in/yaml.v3 v3.0.1
feat: scan vulns on k8s core component apps (#5418) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-11-01 11:31:48 +02:00
k8s.io/api v0.28.2
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
k8s.io/utils v0.0.0-20230406110748-d93618cff8a2
chore(deps): bump modernc.org/sqlite from 1.20.3 to 1.23.1 (#4756) Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.20.3 to 1.23.1. - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.20.3...v1.23.1) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 22:45:34 +03:00
modernc.org/sqlite v1.23.1
chore(deps): bump github.com/moby/buildkit from v0.10.6 to v0.11.0 (#3411)
2023-01-12 09:45:07 +03:00
)
feat(sbom): add support for scanning a sbom attestation (#2652) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-08-08 22:27:05 +09:00
require (
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
cloud.google.com/go v0.110.7 // indirect
cloud.google.com/go/compute v1.23.0 // indirect
chore(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0 (#3536) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-14 13:09:43 +02:00
cloud.google.com/go/compute/metadata v0.2.3 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
cloud.google.com/go/iam v1.1.1 // indirect
cloud.google.com/go/storage v1.31.0 // indirect
bump github.com/testcontainers/testcontainers-go from 0.21.0 to 0.23.0 (#5018)
2023-08-21 15:16:56 +06:00
dario.cat/mergo v1.0.0 // indirect
chore(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5 (#5097) Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.3 to 1.7.5. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](https://github.com/containerd/containerd/compare/v1.7.3...v1.7.5) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:19:50 +03:00
github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0 // indirect
feat: azure workload identity support (#4489) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-01 10:16:23 +03:00
github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
feat: azure workload identity support (#4489) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-01 10:16:23 +03:00
github.com/Azure/go-autorest/autorest v0.11.29 // indirect
github.com/Azure/go-autorest/autorest/adal v0.9.22 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
github.com/Azure/go-autorest/logger v0.2.1 // indirect
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#5098) Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.3.0 to 1.3.1. - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.3.0...sdk/azcore/v1.3.1) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:18:15 +03:00
github.com/AzureAD/microsoft-authentication-library-for-go v1.1.1 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/MakeNowJust/heredoc v1.0.0 // indirect
github.com/Masterminds/goutils v1.1.1 // indirect
github.com/Masterminds/semver v1.5.0 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/Masterminds/semver/v3 v3.2.1 // indirect
github.com/Masterminds/squirrel v1.5.4 // indirect
chore(deps): bump go-containerregistry (#4639)
2023-06-15 12:44:24 +03:00
github.com/Microsoft/go-winio v0.6.1 // indirect
feat: k8s private registries support (#4987) * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * fix: add non empty credential update Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-20 09:07:30 +03:00
github.com/Microsoft/hcsshim v0.10.0-rc.8 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/OneOfOne/xxhash v1.2.8 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530)
2023-06-04 09:25:43 +03:00
github.com/ProtonMail/go-crypto v0.0.0-20230518184743-7afd39499903 // indirect
chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.0 to 3.1.2 (#3736)
2023-03-20 14:13:30 +02:00
github.com/VividCortex/ewma v1.2.0 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.1 (#3962)
2023-04-03 11:23:30 +03:00
github.com/acomagu/bufpipe v1.0.4 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/agext/levenshtein v1.2.3 // indirect
github.com/agnivade/levenshtein v1.1.1 // indirect
github.com/alecthomas/chroma v0.10.0 // indirect
github.com/alicebob/gopher-json v0.0.0-20200520072559-a9ecdc9d1d3a // indirect
feat(spdx): add support for SPDX 2.3 (#4058) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-04-23 23:36:04 +03:00
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/apparentlymart/go-cidr v1.1.0 // indirect
github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)
2023-04-02 10:49:41 +03:00
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
feat: scan vulns on k8s core component apps (#5418) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-11-01 11:31:48 +02:00
github.com/aws/aws-sdk-go v1.46.1 // indirect
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.14 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.13 // indirect
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.17.18 to 1.21.0 (#5497) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-02 01:09:25 +00:00
github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.0 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.0 // indirect
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.45 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.1.6 // indirect
feat: add support for scanning azure ARM (#3011) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2022-10-13 18:24:14 +01:00
github.com/aws/aws-sdk-go-v2/service/accessanalyzer v1.16.0 // indirect
fix(k8s): migrate rbac k8s (#3459)
2023-01-25 11:13:41 +02:00
github.com/aws/aws-sdk-go-v2/service/apigateway v1.15.24 // indirect
chore(deps): Update defsec to v0.88.1 (#4178)
2023-05-09 07:34:29 -06:00
github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.13.11 // indirect
chore(deps): Update defsec to v0.91.0 (#4886) * chore(deps): Update defsec to v0.91.0 * update tests Signed-off-by: Simar <simar@linux.com> --------- Signed-off-by: Simar <simar@linux.com>
2023-07-30 01:31:34 -06:00
github.com/aws/aws-sdk-go-v2/service/athena v1.30.4 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/cloudfront v1.20.5 // indirect
chore(deps): Update defsec to v0.90.0 (#4723) Signed-off-by: Simar <simar@linux.com>
2023-06-28 02:34:56 -06:00
github.com/aws/aws-sdk-go-v2/service/cloudtrail v1.27.1 // indirect
github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.26.2 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.15.20 // indirect
github.com/aws/aws-sdk-go-v2/service/codebuild v1.19.17 // indirect
github.com/aws/aws-sdk-go-v2/service/docdb v1.19.11 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.17.7 // indirect
fix(aws): resolve endpoint if endpoint is passed (#4925) * fix(aws): resolve endpoint to get identity if endpoint is passed * resolve endpoint for ami and ebs * return an error if aws region is missing
2023-08-08 10:19:40 +03:00
github.com/aws/aws-sdk-go-v2/service/ebs v1.18.1 // indirect
chore(deps): Update defsec to v0.91.0 (#4886) * chore(deps): Update defsec to v0.91.0 * update tests Signed-off-by: Simar <simar@linux.com> --------- Signed-off-by: Simar <simar@linux.com>
2023-07-30 01:31:34 -06:00
github.com/aws/aws-sdk-go-v2/service/ecs v1.28.1 // indirect
chore(deps): Update defsec to v0.90.3 (#4793) * chore(deps): Update defsec to v0.90.2 Signed-off-by: Simar <simar@linux.com> * go mod tidy --------- Signed-off-by: Simar <simar@linux.com>
2023-07-07 02:13:56 -06:00
github.com/aws/aws-sdk-go-v2/service/efs v1.20.3 // indirect
github.com/aws/aws-sdk-go-v2/service/eks v1.27.14 // indirect
chore(deps): Update defsec to v0.88.1 (#4178)
2023-05-09 07:34:29 -06:00
github.com/aws/aws-sdk-go-v2/service/elasticache v1.26.8 // indirect
chore(deps): Update defsec to v0.89.0 (#4474)
2023-05-29 21:06:46 -06:00
github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 v1.19.11 // indirect
github.com/aws/aws-sdk-go-v2/service/elasticsearchservice v1.19.0 // indirect
chore(deps): Update defsec to v0.88.1 (#4178)
2023-05-09 07:34:29 -06:00
github.com/aws/aws-sdk-go-v2/service/emr v1.24.4 // indirect
chore(deps): Update defsec to v0.91.0 (#4886) * chore(deps): Update defsec to v0.91.0 * update tests Signed-off-by: Simar <simar@linux.com> --------- Signed-off-by: Simar <simar@linux.com>
2023-07-30 01:31:34 -06:00
github.com/aws/aws-sdk-go-v2/service/iam v1.21.1 // indirect
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.15 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.38 // indirect
chore(deps): Update defsec to v0.88.1 (#4178)
2023-05-09 07:34:29 -06:00
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.7.23 // indirect
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.37 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.15.6 // indirect
chore(deps): Update defsec (#3713) * chore(deps): Update defsec * fix tests
2023-02-28 22:10:03 -08:00
github.com/aws/aws-sdk-go-v2/service/kafka v1.19.4 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/kinesis v1.15.19 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/aws/aws-sdk-go-v2/service/kms v1.24.1 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/lambda v1.24.6 // indirect
chore(deps): Update defsec to v0.90.0 (#4723) Signed-off-by: Simar <simar@linux.com>
2023-06-28 02:34:56 -06:00
github.com/aws/aws-sdk-go-v2/service/mq v1.15.0 // indirect
github.com/aws/aws-sdk-go-v2/service/neptune v1.20.7 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/rds v1.26.1 // indirect
chore(deps): Bump defsec to v0.85.0 (#3940) Signed-off-by: Simar <simar@linux.com>
2023-03-31 06:58:01 -07:00
github.com/aws/aws-sdk-go-v2/service/redshift v1.27.7 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.16.2 // indirect
chore(deps): Update defsec to v0.88.1 (#4178)
2023-05-09 07:34:29 -06:00
github.com/aws/aws-sdk-go-v2/service/sns v1.20.10 // indirect
chore(deps): Bump defsec to v0.85.0 (#3940) Signed-off-by: Simar <simar@linux.com>
2023-03-31 06:58:01 -07:00
github.com/aws/aws-sdk-go-v2/service/sqs v1.20.6 // indirect
chore(deps): move to aws-sdk-go-v2 (#5381)
2023-10-18 16:21:56 +02:00
github.com/aws/aws-sdk-go-v2/service/sso v1.15.2 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.3 // indirect
feat(aws): Custom rego policies for AWS scanning (#2994)
2022-10-06 10:51:45 +01:00
github.com/aws/aws-sdk-go-v2/service/workspaces v1.23.0 // indirect
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ecr from 1.17.18 to 1.21.0 (#5497) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-02 01:09:25 +00:00
github.com/aws/smithy-go v1.16.0 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/beorn7/perks v1.0.1 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
feat: add support for Chainguard's commercial distro (#3641)
2023-04-12 08:20:52 -04:00
github.com/briandowns/spinner v1.23.0 // indirect
bump github.com/testcontainers/testcontainers-go from 0.21.0 to 0.23.0 (#5018)
2023-08-21 15:16:56 +06:00
github.com/cenkalti/backoff/v4 v4.2.1 // indirect
chore(deps): bump github.com/in-toto/in-toto-golang from 0.5.0 to 0.7.0 (#3727) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-28 13:22:47 +03:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
feat: add support for scanning azure ARM (#3011) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2022-10-13 18:24:14 +01:00
github.com/chai2010/gettext-go v1.0.2 // indirect
chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#4338)
2023-05-30 18:50:09 +03:00
github.com/cloudflare/circl v1.3.3 // indirect
chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
2023-04-02 16:27:22 +03:00
github.com/containerd/cgroups v1.1.0 // indirect
chore(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5 (#5097) Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.3 to 1.7.5. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](https://github.com/containerd/containerd/compare/v1.7.3...v1.7.5) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:19:50 +03:00
github.com/containerd/continuity v0.4.2 // indirect
chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
2023-04-02 16:27:22 +03:00
github.com/containerd/fifo v1.1.0 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
feat: k8s private registries support (#4987) * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * fix: add non empty credential update Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-20 09:07:30 +03:00
github.com/containerd/ttrpc v1.2.2 // indirect
eliminate nerdctl dependency (#2412)
2022-06-28 21:28:59 +03:00
github.com/containerd/typeurl v1.0.2 // indirect
feat: k8s private registries support (#4987) * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * fix: add non empty credential update Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-20 09:07:30 +03:00
github.com/containerd/typeurl/v2 v2.1.1 // indirect
chore(deps): bump github.com/testcontainers/testcontainers-go (#4150)
2023-05-04 13:53:27 +03:00
github.com/cpuguy83/dockercfg v0.3.1 // indirect
docs(cli): added makefile and go file to create docs (#3930) Co-authored-by: Teppei Fukuda <knqyf263@gmail.com>
2023-04-01 11:13:21 +05:30
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
chore(deps): bump github.com/cyphar/filepath-securejoin (#5143) Bumps [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) from 0.2.3 to 0.2.4. - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Commits](https://github.com/cyphar/filepath-securejoin/compare/v0.2.3...v0.2.4) --- updated-dependencies: - dependency-name: github.com/cyphar/filepath-securejoin dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-08 16:47:33 +03:00
github.com/cyphar/filepath-securejoin v0.2.4 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/dlclark/regexp2 v1.4.0 // indirect
feat: k8s private registries support (#4987) * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * fix: add non empty credential update Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-20 09:07:30 +03:00
github.com/docker/cli v24.0.5+incompatible // indirect
chore(deps): bump github.com/docker/distribution (#4337)
2023-05-12 07:59:23 +03:00
github.com/docker/distribution v2.8.2+incompatible // indirect
fix(misconf): Bump in-toto-golang with correct CycloneDX predicate (#3068) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-10-25 16:41:27 -04:00
github.com/docker/docker-credential-helpers v0.7.0 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/docker/go-events v0.0.0-20190806004212-e31b211e4f1c // indirect
github.com/docker/go-metrics v0.0.1 // indirect
fix(misconf): Bump in-toto-golang with correct CycloneDX predicate (#3068) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-10-25 16:41:27 -04:00
github.com/docker/go-units v0.5.0 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
github.com/dustin/go-humanize v1.0.1 // indirect
chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
2023-04-02 16:27:22 +03:00
github.com/emicklei/go-restful/v3 v3.10.1 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.2 (#3533) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-14 16:17:28 +02:00
github.com/emirpasic/gods v1.18.1 // indirect
feat: add support for scanning azure ARM (#3011) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2022-10-13 18:24:14 +01:00
github.com/evanphx/json-patch v5.6.0+incompatible // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
chore(deps): bump github.com/spf13/viper from 1.13.0 to 1.14.0 (#3250) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-15 16:29:58 +02:00
github.com/fsnotify/fsnotify v1.6.0 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/ghodss/yaml v1.0.0 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/go-errors/errors v1.4.2 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530)
2023-06-04 09:25:43 +03:00
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.1 (#3962)
2023-04-03 11:23:30 +03:00
github.com/go-git/go-billy/v5 v5.4.1 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/go-gorp/gorp/v3 v3.0.5 // indirect
chore(deps): Update defsec to v0.89.0 (#4474)
2023-05-29 21:06:46 -06:00
github.com/go-logr/logr v1.2.4 // indirect
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/go-logr/stdr v1.2.2 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/go-openapi/analysis v0.21.4 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/go-openapi/errors v0.20.4 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/go-openapi/jsonpointer v0.19.6 // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
github.com/go-openapi/jsonreference v0.20.2 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/go-openapi/loads v0.21.2 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1 (#4166)
2023-05-04 13:44:02 +03:00
github.com/go-openapi/spec v0.20.9 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/go-openapi/swag v0.22.4 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)
2023-04-02 10:49:41 +03:00
github.com/go-openapi/validate v0.22.1 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/gobwas/glob v0.2.3 // indirect
fix(java): the project props take precedence over the parent's props (#3320) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-09 23:25:52 +06:00
github.com/goccy/go-yaml v1.8.1 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/gofrs/uuid v4.3.1+incompatible // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/gogo/protobuf v1.3.2 // indirect
chore(deps): bump github.com/Azure/go-autorest/autorest/adal (#3961)
2023-04-09 15:58:06 +03:00
github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#5098) Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.3.0 to 1.3.1. - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.3.0...sdk/azcore/v1.3.1) --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 10:18:15 +03:00
github.com/golang-jwt/jwt/v5 v5.0.0 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/google/btree v1.1.2 // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
github.com/google/gnostic-models v0.6.8 // indirect
chore(deps): bump github.com/sigstore/rekor from 0.12.0 to 0.12.2 (#2981) Co-authored-by: DmitriyLewen <dmitriy.lewen@smartforce.io>
2022-10-12 13:45:56 +03:00
github.com/google/go-cmp v0.5.9 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/google/gofuzz v1.2.0 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/google/s2a-go v0.1.5 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/googleapis/enterprise-certificate-proxy v0.2.5 // indirect
github.com/googleapis/gax-go/v2 v2.12.0 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/gorilla/mux v1.8.0 // indirect
github.com/gosuri/uitable v0.0.4 // indirect
github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
github.com/hashicorp/go-safetemp v1.0.0 // indirect
feat(misconf): Added fs.FS based scanning via latest defsec (#2084) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-05-10 13:05:00 +01:00
github.com/hashicorp/go-uuid v1.0.3 // indirect
fix(cli): secret scanning perf link fix (#2607)
2022-08-15 18:45:22 +05:30
github.com/hashicorp/go-version v1.6.0 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/hashicorp/hcl v1.0.0 // indirect
chore(deps): Update defsec to v0.92.0 (#5068) * chore(deps): Update defsec to v0.92.0 * update tests * update integration tests
2023-08-30 14:43:08 -06:00
github.com/hashicorp/hcl/v2 v2.17.0 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/huandu/xstrings v1.4.0 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530)
2023-06-04 09:25:43 +03:00
github.com/imdario/mergo v0.3.15 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/inconshreveable/mousetrap v1.1.0 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
github.com/jmespath/go-jmespath v0.4.0 // indirect
feat: Add AWS Cloud scanning (#2493) * feat: Added AWS Cloud scanning Co-authored-by: Owen Rumney <owen.rumney@aquasec.com>
2022-08-11 14:59:32 +01:00
github.com/jmoiron/sqlx v1.3.5 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/josharian/intern v1.0.0 // indirect
github.com/json-iterator/go v1.1.12 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.2 (#3533) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-14 16:17:28 +02:00
github.com/kevinburke/ssh_config v1.2.0 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/klauspost/compress v1.16.6 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/lann/builder v0.0.0-20180802200727-47ae307949d0 // indirect
github.com/lann/ps v0.0.0-20150810152359-62de8c46ede0 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/liamg/iamgo v0.0.9 // indirect
github.com/liamg/jfather v0.0.7 // indirect
github.com/liamg/memoryfs v1.4.3 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/lib/pq v1.10.9 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/lunixbochs/struc v0.0.0-20200707160740-784aaebc1d40 // indirect
chore(deps): bump github.com/moby/buildkit from v0.10.6 to v0.11.0 (#3411)
2023-01-12 09:45:07 +03:00
github.com/magiconair/properties v1.8.7 // indirect
chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.0 to 3.1.2 (#3736)
2023-03-20 14:13:30 +02:00
github.com/mattn/go-colorable v0.1.13 // indirect
chore(deps): bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4 (#5092) Bumps [github.com/cheggaaa/pb/v3](https://github.com/cheggaaa/pb) from 3.1.2 to 3.1.4. - [Commits](https://github.com/cheggaaa/pb/compare/v3.1.2...v3.1.4) --- updated-dependencies: - dependency-name: github.com/cheggaaa/pb/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 23:50:58 +03:00
github.com/mattn/go-isatty v0.0.19 // indirect
github.com/mattn/go-runewidth v0.0.14 // indirect
chore(deps): bump github.com/containerd/containerd from 1.6.8 to 1.6.14 (#3367) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-01-03 12:01:45 +02:00
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/microsoft/go-rustaudit v0.0.0-20220808201409-204dfee52032 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/miekg/dns v1.1.50 // indirect
feat(misconf): Added fs.FS based scanning via latest defsec (#2084) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-05-10 13:05:00 +01:00
github.com/mitchellh/copystructure v1.2.0 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/mitchellh/go-homedir v1.1.0 // indirect
feat: config outdated-api result filtered by k8s version (#3578) Signed-off-by: chenk <hen.keinan@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-22 15:41:37 +02:00
github.com/mitchellh/go-testing-interface v1.14.1 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
feat(misconf): Added fs.FS based scanning via latest defsec (#2084) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-05-10 13:05:00 +01:00
github.com/mitchellh/reflectwalk v1.0.2 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/moby/locker v1.0.1 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
github.com/moby/patternmatcher v0.5.0 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/moby/spdystream v0.2.0 // indirect
chore(deps): Move compliance types to defsec (#3842) Signed-off-by: Simar <simar@linux.com>
2023-03-19 06:46:06 -07:00
github.com/moby/sys/mountinfo v0.6.2 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
github.com/moby/sys/sequential v0.5.0 // indirect
chore(deps): Move compliance types to defsec (#3842) Signed-off-by: Simar <simar@linux.com>
2023-03-19 06:46:06 -07:00
github.com/moby/sys/signal v0.7.0 // indirect
chore(deps): bump github.com/testcontainers/testcontainers-go (#4759) Bumps [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) from 0.20.1 to 0.21.0. - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](https://github.com/testcontainers/testcontainers-go/compare/v0.20.1...v0.21.0) --- updated-dependencies: - dependency-name: github.com/testcontainers/testcontainers-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-02 16:57:46 +03:00
github.com/moby/term v0.5.0 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/morikuni/aec v1.0.0 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/oklog/ulid v1.3.1 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/olekukonko/tablewriter v0.0.5 // indirect
chore(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#3928) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-03-30 09:23:39 +03:00
github.com/opencontainers/runc v1.1.5 // indirect
chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
2023-04-02 16:27:22 +03:00
github.com/opencontainers/runtime-spec v1.1.0-rc.1 // indirect
github.com/opencontainers/selinux v1.11.0 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/opentracing/opentracing-go v1.2.0 // indirect
chore(deps): Update defsec (#3713) * chore(deps): Update defsec * fix tests
2023-02-28 22:10:03 -08:00
github.com/owenrumney/squealer v1.1.1 // indirect
chore(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#5093) Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/spf13/viper/releases) - [Commits](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0) --- updated-dependencies: - dependency-name: github.com/spf13/viper dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 09:17:08 +03:00
github.com/pelletier/go-toml/v2 v2.0.8 // indirect
feat: add support for WASM modules (#2195)
2022-06-15 15:23:00 +03:00
github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.5.2 to 5.6.1 (#3962)
2023-04-03 11:23:30 +03:00
github.com/pjbgf/sha1cd v0.3.0 // indirect
feat: azure workload identity support (#4489) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-01 10:16:23 +03:00
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/pkg/errors v0.9.1 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
github.com/prometheus/client_golang v1.16.0 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 (#4478)
2023-05-28 06:37:30 +03:00
github.com/prometheus/client_model v0.4.0 // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
github.com/prometheus/common v0.44.0 // indirect
github.com/prometheus/procfs v0.10.1 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
chore(deps): bump modernc.org/sqlite from 1.20.3 to 1.23.1 (#4756) Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.20.3 to 1.23.1. - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.20.3...v1.23.1) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 22:45:34 +03:00
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/rivo/uniseg v0.2.0 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/rubenv/sql-migrate v1.3.1 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
github.com/russross/blackfriday/v2 v2.1.0 // indirect
feat(image): discover SBOM in OCI referrers (#3768) Co-authored-by: saso <sasoakira6114@gmail.com>
2023-03-26 08:27:10 +03:00
github.com/sergi/go-diff v1.2.0 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/shibumi/go-pathspec v1.3.0 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
github.com/shopspring/decimal v1.3.1 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 (#4530)
2023-06-04 09:25:43 +03:00
github.com/skeema/knownhosts v1.1.1 // indirect
chore(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#5093) Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.15.0 to 1.16.0. - [Release notes](https://github.com/spf13/viper/releases) - [Commits](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0) --- updated-dependencies: - dependency-name: github.com/spf13/viper dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-14 09:17:08 +03:00
github.com/spf13/afero v1.9.5 // indirect
refactor: move from urfave/cli to spf13/cobra (#2458) Co-authored-by: afdesk <work@afdesk.com> Co-authored-by: DmitriyLewen <91113035+DmitriyLewen@users.noreply.github.com>
2022-07-09 19:40:31 +03:00
github.com/spf13/jwalterweatherman v1.1.0 // indirect
chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#3112) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-11-13 18:27:38 +02:00
github.com/stretchr/objx v0.5.0 // indirect
chore(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0 (#3536) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-14 13:09:43 +02:00
github.com/subosito/gotenv v1.4.2 // indirect
feat: Adding support for Windows testing (#3037) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com> Signed-off-by: knqyf263 <knqyf263@gmail.com> Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-12-22 20:54:18 +00:00
github.com/tchap/go-patricia/v2 v2.3.1 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
github.com/ulikunitz/xz v0.5.11 // indirect
chore(deps): bump go-containerregistry (#4639)
2023-06-15 12:44:24 +03:00
github.com/vbatts/tar-split v0.11.3 // indirect
chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.5.2 (#3533) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-14 16:17:28 +02:00
github.com/xanzy/ssh-agent v0.3.3 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
chore(deps): bump github.com/open-policy-agent/opa from 0.37.2 to 0.39.0 (#1921)
2022-04-04 13:40:33 +03:00
github.com/yashtewari/glob-intersection v0.1.0 // indirect
chore(deps): bump github.com/alicebob/miniredis/v2 from 2.23.0 to 2.30.1 (#3957)
2023-04-03 10:32:13 +03:00
github.com/yuin/gopher-lua v1.1.0 // indirect
chore(deps): Update defsec to v0.92.0 (#5068) * chore(deps): Update defsec to v0.92.0 * update tests * update integration tests
2023-08-30 14:43:08 -06:00
github.com/zclconf/go-cty v1.13.0 // indirect
github.com/zclconf/go-cty-yaml v1.0.3 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#3964)
2023-04-02 10:49:41 +03:00
go.mongodb.org/mongo-driver v1.11.3 // indirect
chore(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0 (#3536) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-14 13:09:43 +02:00
go.opencensus.io v0.24.0 // indirect
chore(deps): bump github.com/containerd/containerd from 1.6.19 to 1.7.0 (#3965)
2023-04-02 16:27:22 +03:00
go.opentelemetry.io/otel v1.14.0 // indirect
go.opentelemetry.io/otel/trace v1.14.0 // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
go.uber.org/multierr v1.11.0 // indirect
chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 18:45:22 +03:00
golang.org/x/crypto v0.14.0 // indirect
golang.org/x/net v0.17.0 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
golang.org/x/oauth2 v0.11.0 // indirect
chore(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 (#5365) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 18:45:22 +03:00
golang.org/x/sys v0.13.0 // indirect
fix: populate timeout context to node-collector (#3766)
2023-03-13 13:10:37 +02:00
golang.org/x/time v0.3.0 // indirect
fix(python): override BOM in `requirements.txt` files (#5375)
2023-10-14 14:37:32 +06:00
golang.org/x/tools v0.13.0 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
google.golang.org/api v0.138.0 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
google.golang.org/appengine v1.6.7 // indirect
chore(deps): bump github.com/sigstore/rekor from 1.2.1 to 1.3.0 (#5304) Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 1.2.1 to 1.3.0. - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/rekor/compare/v1.2.1...v1.3.0) --- updated-dependencies: - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 05:18:49 +00:00
google.golang.org/genproto v0.0.0-20230803162519-f966b187b2e5 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20230803162519-f966b187b2e5 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20230807174057-1744710a1577 // indirect
chore(deps): bump google.golang.org/grpc from 1.57.0 to 1.57.1 (#5447) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-26 09:42:55 +09:00
google.golang.org/grpc v1.57.1 // indirect
chore: bump up Go to 1.17 (#1781)
2022-03-03 10:30:36 +02:00
gopkg.in/cheggaaa/pb.v1 v1.0.28 // indirect
refactor: export useful APIs (#2108) Co-authored-by: Jose Donizetti <jdbjunior@gmail.com>
2022-05-13 22:09:20 +03:00
gopkg.in/inf.v0 v0.9.1 // indirect
feat(sbom): scan sbom attestation in the rekor record (#2699) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2022-09-16 02:16:39 +09:00
gopkg.in/ini.v1 v1.67.0 // indirect
eliminate nerdctl dependency (#2412)
2022-06-28 21:28:59 +03:00
gopkg.in/warnings.v0 v0.1.2 // indirect
refactor(k8s): custom reports (#3076)
2022-10-26 00:02:33 +03:00
gopkg.in/yaml.v2 v2.4.0 // indirect
chore(deps): Update defsec to v0.92.0 (#5068) * chore(deps): Update defsec to v0.92.0 * update tests * update integration tests
2023-08-30 14:43:08 -06:00
helm.sh/helm/v3 v3.12.3 // indirect
k8s.io/apiextensions-apiserver v0.27.3 // indirect
feat: scan vulns on k8s core component apps (#5418) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-11-01 11:31:48 +02:00
k8s.io/apimachinery v0.28.2 // indirect
chore(deps): Update defsec to v0.92.0 (#5068) * chore(deps): Update defsec to v0.92.0 * update tests * update integration tests
2023-08-30 14:43:08 -06:00
k8s.io/apiserver v0.27.3 // indirect
feat: scan vulns on k8s core component apps (#5418) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-11-01 11:31:48 +02:00
k8s.io/cli-runtime v0.28.2 // indirect
k8s.io/client-go v0.28.2 // indirect
k8s.io/component-base v0.28.2 // indirect
feat(k8s): exclude node scanning by node labels (#4459) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-05-25 14:52:28 +03:00
k8s.io/klog/v2 v2.100.1 // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
k8s.io/kube-openapi v0.0.0-20230717233707-2695361300d9 // indirect
feat: scan vulns on k8s core component apps (#5418) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-11-01 11:31:48 +02:00
k8s.io/kubectl v0.28.2 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
lukechampine.com/uint128 v1.2.0 // indirect
modernc.org/cc/v3 v3.40.0 // indirect
modernc.org/ccgo/v3 v3.16.13 // indirect
chore(deps): bump modernc.org/sqlite from 1.20.3 to 1.23.1 (#4756) Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.20.3 to 1.23.1. - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.20.3...v1.23.1) --- updated-dependencies: - dependency-name: modernc.org/sqlite dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-04 22:45:34 +03:00
modernc.org/libc v1.22.5 // indirect
feat(java): use trivy-java-db to get GAV (#3484) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-01 12:48:05 +03:00
modernc.org/mathutil v1.5.0 // indirect
fix: use cgo free sqlite driver (#3521) * fix: use cgo free sqlite driver * chore: add CGO_ENABLED=0 * chore(deps): bump go-rpmdb
2023-02-02 00:06:12 +09:00
modernc.org/memory v1.5.0 // indirect
BREAKING: use normalized trivy-java-db (#3583) Co-authored-by: knqyf263 <knqyf263@gmail.com>
2023-02-10 03:16:37 +03:00
modernc.org/opt v0.1.3 // indirect
modernc.org/strutil v1.1.3 // indirect
modernc.org/token v1.0.1 // indirect
chore(deps): Update defsec to v0.92.0 (#5068) * chore(deps): Update defsec to v0.92.0 * update tests * update integration tests
2023-08-30 14:43:08 -06:00
oras.land/oras-go v1.2.3 // indirect
feat(k8s): cyclonedx kbom support (#4557) * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: cyclonedx kbom support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sum db Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * chore: update sumdb Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> * feat: kubernetes bill of materials Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-06-19 13:48:26 +03:00
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
fix: support image pull secret for additional workloads (#5052) Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-29 09:33:31 +03:00
sigs.k8s.io/kustomize/api v0.13.5-0.20230601165947-6ce0bf390ce3 // indirect
sigs.k8s.io/kustomize/kyaml v0.14.3-0.20230601165947-6ce0bf390ce3 // indirect
feat: add support for scanning azure ARM (#3011) Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2022-10-13 18:24:14 +01:00
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
refactor: export useful APIs (#2108) Co-authored-by: Jose Donizetti <jdbjunior@gmail.com>
2022-05-13 22:09:20 +03:00
sigs.k8s.io/yaml v1.3.0 // indirect
feat(kubernetes): Add report flag for summary (#2112) * feat(k8s): Add report flag for summary * chore: add headings to the severity columns * chore: make the default output of k8s summary table Signed-off-by: Owen Rumney <owen.rumney@aquasec.com>
2022-05-13 19:02:01 +01:00
)
feat: k8s private registries support (#4987) * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * fix: add non empty credential update Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> * feat: k8s private registries support Signed-off-by: chenk <hen.keinan@gmail.com> --------- Signed-off-by: chenk <hen.keinan@gmail.com>
2023-08-20 09:07:30 +03:00
// oras 1.2.2 is incompatible with github.com/docker/docker v24.0.2
// cf. https://github.com/oras-project/oras-go/pull/527
replace oras.land/oras-go => oras.land/oras-go v1.2.4-0.20230801060855-932dd06d38af
Reference in New Issue Copy Permalink