21 Commits

Author SHA1 Message Date
abhisek
18af8d54e1
fix: Package manifest namespace and path handling 2024-10-11 16:54:36 +05:30
abhisek
ad6340e60d
refactor: API key configuration command 2024-10-10 14:52:48 +05:30
abhisek
95c87b4f7b
refactor: Move get dependencies enumerator to models 2024-09-28 15:59:02 +05:30
abhisek
70511831ce
feat: Update report sync using grpc 2024-09-27 13:40:32 +05:30
abhisek
b662145492
feat: Refactor CycloneDX parser into CycloneDX Graph Parser
refactor: CDX graph parser to improve readability

fix: Set dependency graph present only when BOM contains at least 1 dependency relation

chore: Add a root note while graph rendering (reporter)

chore: Remove old cyclonedx files

test: Add maven cyclonedx sbom test case
2024-02-02 15:29:34 +05:30
abhisek
1dba6fdd8e
refactor: Parser to use dependency graph parsers
feat: Add npm package-lock.json graph parser

fix: Npm graph parser path to root traversal

fix: File naming convention for npm graph parser

feat: Add reporter for graph visualization in dot format

feat: Add support for showing dependency upgrade path in summary report

fix: Bug in summary reporter related to random ordering of entries with same score

chore: Add support for experimental flag in scanner config

refactor: Test cases or npm package name extractor into utils

feat: Add support for dependency graph data in CSV report generator

fix: LFP npm handle package links

test: Improve test for npm name extraction

feat: Add support for reconstructing dependency graph using insights data

fix: purl reader to use package manifest builder

test: Add E2E for gradle dependency graph reconstruction

fix: Handle root node marking heuristics for enriched dependency graph

feat: Allow query command to generate dependency graph

fix: Scanner dependency graph reconstruction using dependency distance

fix: Test case for maven dependency graph reconstruction

chore: Improve summary report text for dependency path to root

refactor: Code re-use in npm graph to find by semver range
2024-01-15 00:20:56 +05:30
abhisek
be81848cc0
feat: Add data structure to build dependency graph
feat: Add support for DG JSON serialization

test: Add test case for dependency graph structure

test: Add test case for dependency graph structure (GetDependents)

test: Add test case for dependency graph structure (PathToRoot, JSON)

refactor: Use factory to initialize package manifest with dependency graph
2024-01-09 21:21:02 +05:30
abhisek
4efa6111ed
fix: Add identifiers to JSON report spec for threats 2023-12-29 13:10:06 +05:30
abhisek
596d58333b
feat: Add support for enrichment control as a flag 2023-12-28 10:30:00 +05:30
abhisek
aeec13cea2
Refactor scanner workflow to enable scanning per manifests instead of batching 2023-11-21 08:43:00 +05:30
abhisek
b4c1c2e938
feat: Add license and vulnerability info in JSON report 2023-11-17 16:14:16 +05:30
abhisek
42546ce740
chore: Set display path for manifest when its not a local file 2023-11-04 11:19:53 +05:30
abhisek
676f85af45
refactor: Clean up JSON report generator by using contract methods 2023-10-23 11:37:31 +05:30
abhisek
7719545aab
feat: Revamp JSON report to include manifest, package, violation, advices 2023-10-21 19:37:19 +05:30
jc
9c2e20175f Added support of SPDX SBOM 2023-08-20 14:01:20 +05:30
jc
7279b34483
fix: CycloneDX SBOM support introduced in #111
Signed-off-by: abhisek <abhisek.datta@gmail.com>
2023-08-16 17:46:29 +05:30
abhisek
46bd7e2d13
Add reader to read packages with exceptions 2023-02-22 15:01:31 +05:30
Abhisek Datta
654bd5cd6f
Add Support for Security Gating using Filters (#9)
* Add support for ignorable directories

* Update DRY snapshot

* Support log redirection to file

* Add support to redirect log to stdout

* Add summary reporter

* Refactor scan method

* Refactor to introduce Finish method in analyzer

* Refactor to conslidated reporting for CEL filter

* Show unique CEL filter results

* Add support for filter fail option

* Fix README
2023-02-06 18:32:01 +05:30
abhisek
a12afa1344
Add CEL filter 2023-01-03 17:41:13 +05:30
abhisek
e0d3353cc3
Fix bug on transitive dep handling 2023-01-02 17:16:04 +05:30
abhisek
ce10afab06
Add auth persistence
Add parser and models

Add parser in scanner

Add enrichment

Use pointer for package ref

Add work queue for concurrent enrichment

Update enrich

Misc refactoring

Update README

Refactored lockfile parsers

Add analyzers

Update json dumper

Refactor scan
2023-01-02 16:13:41 +05:30