7 Commits

Author SHA1 Message Date
abhisek
b662145492
feat: Refactor CycloneDX parser into CycloneDX Graph Parser
refactor: CDX graph parser to improve readability

fix: Set dependency graph present only when BOM contains at least 1 dependency relation

chore: Add a root note while graph rendering (reporter)

chore: Remove old cyclonedx files

test: Add maven cyclonedx sbom test case
2024-02-02 15:29:34 +05:30
abhisek
1dba6fdd8e
refactor: Parser to use dependency graph parsers
feat: Add npm package-lock.json graph parser

fix: Npm graph parser path to root traversal

fix: File naming convention for npm graph parser

feat: Add reporter for graph visualization in dot format

feat: Add support for showing dependency upgrade path in summary report

fix: Bug in summary reporter related to random ordering of entries with same score

chore: Add support for experimental flag in scanner config

refactor: Test cases or npm package name extractor into utils

feat: Add support for dependency graph data in CSV report generator

fix: LFP npm handle package links

test: Improve test for npm name extraction

feat: Add support for reconstructing dependency graph using insights data

fix: purl reader to use package manifest builder

test: Add E2E for gradle dependency graph reconstruction

fix: Handle root node marking heuristics for enriched dependency graph

feat: Allow query command to generate dependency graph

fix: Scanner dependency graph reconstruction using dependency distance

fix: Test case for maven dependency graph reconstruction

chore: Improve summary report text for dependency path to root

refactor: Code re-use in npm graph to find by semver range
2024-01-15 00:20:56 +05:30
abhisek
0c2f8ab593
feat: Enable support for RubyGems ecosystem 2023-10-30 08:27:11 +05:30
jc
7279b34483
fix: CycloneDX SBOM support introduced in #111
Signed-off-by: abhisek <abhisek.datta@gmail.com>
2023-08-16 17:46:29 +05:30
abhisek
9c1e224a43
Add OpenSSF scorecard badge 2023-02-16 15:37:48 +05:30
Abhisek Datta
a18c204b5d
Sync Develop to Main (#4)
* Update Insight service API and client

* Add cli banner

* Show API errors from insight API

* Use standard error model

* Add reporting interface

* Update markdown template

* Add trials registration client

* Add trials registration support

* Add supported ecosystem filter to parsers

* Update OSV scanner

* Use table renderer for CEL filter output

* Rename filter opt to filter

* Add an opinionated console summary reporter

* Update README

* Update README

* Update README

* Add filter spec

* Update spec driven CEL filtering

* Add query workflow with docs

* Add secrets scan workflow
2023-02-03 12:30:48 +05:30
abhisek
ce10afab06
Add auth persistence
Add parser and models

Add parser in scanner

Add enrichment

Use pointer for package ref

Add work queue for concurrent enrichment

Update enrich

Misc refactoring

Update README

Refactored lockfile parsers

Add analyzers

Update json dumper

Refactor scan
2023-01-02 16:13:41 +05:30