Upgrade to syft v0.43.0 by wagoodman · Pull Request #9 · docker/sbom-cli-plugin

wagoodman · 2022-03-29T15:10:24Z

Incorporates syft v0.43.0 which accomplishes a couple things:

Adds dart support
Fixes docker auth config during image pulls (Correct docker auth config usage anchore/stereoscope#120)
Deduplicates identical packages found across multiple layers

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

wagoodman marked this pull request as ready for review March 31, 2022 21:10

wagoodman added 3 commits March 31, 2022 17:10

pass entire auth config struct to docker pull call

3d04064

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

incorporate index.docker.io auth hostname lookup workaround

f7d8aea

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

bump syft and stereoscope to pull in registry auth fix

1e33b8d

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

wagoodman force-pushed the refine-docker-auth branch from 44c4b3b to 1e33b8d Compare March 31, 2022 21:10

wagoodman enabled auto-merge (squash) March 31, 2022 21:13

wagoodman changed the title ~~Pass entire auth config struct to docker pull call~~ Upgrade to syft v0.43.0 Mar 31, 2022

upgrade --layers cli test to account for package dedup

7d2c0e0

Signed-off-by: Alex Goodman <alex.goodman@anchore.com>

wagoodman merged commit 741c56e into main Mar 31, 2022

wagoodman deleted the refine-docker-auth branch March 31, 2022 21:32

wagoodman added enhancement New feature or request bug Something isn't working labels Mar 31, 2022

Provide feedback