Shunichi Shinohara 
							
						 
					 
					
						
						
							
						
						351cf4f712 
					 
					
						
						
							
							Update trivy from 0.35.0 to 0.49.1 ( #1806 )  
						
						 
						
						... 
						
						
						
						* Update trivy 0.35.0->0.48.0
- Specify oras-go 1.2.4 in indirect dependencies
  docker/docker changes a part of its API at 24.0
  - registry: return concrete service type · moby/moby@7b3acdf 
    - 7b3acdff5d (diff-8325eae896b1149bf92c826d07fc29005b1b102000b766ffa5a238d791e0849bR18-R21) 
  oras-go 1.2.3 uses 23.0.1 and trivy transitively depends on docker/docker 24.y.z.
  There is a build error between oras-go and docker/dockr.
- Update disabled analyzers
- Update language scanners, enable all of them
* move javadb init to scan.go
* Add options for java db init()
* Update scanner/base.go
* Remove unused codes
* Add some lock file names
* Typo fix
* Remove space character (0x20)
* Add java-db options for integration scan
* Minor fomartting fix
* minor fix
* conda is NOT supported by Trivy for library scan
* Configure trivy log in report command too
* Init trivy in scanner
* Use trivy's jar.go and replace client which does almost nothing
* mv jar.go
* Add sha1 hash to result and add filepath for report phase
* Undo added 'vuls scan' options
* Update oras-go to 1.2.4
* Move Java DB related config items to report side
* Add java db search in detect phase
* filter top level jar only
* Update trivy to 0.49.1
* go mod tidy
* Update to newer interface
* Refine lock file list, h/t MaineK00n
* Avoid else clauses if possible, h/t MaineK00n
* Avoid missing word for find and lang types, h/t MaineK00n
* Add missing ecosystems, h/t MaineK00n
* Add comments why to use custom jar analyzer, h/t MaineK00n
* Misc
* Misc
* Misc
* Include go-dep-parser's pares.go for modification
* Move digest field from LibraryScanner to Library
* Use inner jars sha1 for each
* Add Seek to file head before handling zip file entry
* Leave Digest feild empty for entries from pom.xml
* Don't import python/pkg (don't look into package.json)
* Make privete where private is sufficient
* Remove duplicate after Java DB lookup
* misc
* go mod tidy
* Comment out ruby/gemspec
* misc
* Comment out python/packaging
* misc
* Use custom jar
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/jar.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update detector/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update models/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/base.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/parse.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Missing changes in name change
* Update models/github.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update models/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update models/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update models/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/base.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/base.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update scanner/trivy/jar/jar.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Don't import fanal/types at github.go
* Rewrite code around java db initialization
* Add comment
* refactor
* Close java db client
* rename
* Let LibraryScanner have java db client
* Update detector/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update detector/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update detector/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* Update detector/library.go
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com >
* inline variable
* misc
* Fix typo
---------
Co-authored-by: MaineK00n <mainek00n.1229@gmail.com > 
						
						
					 
					
						2024-02-28 14:25:58 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								hiroka-wada 
							
						 
					 
					
						
						
							
						
						738f275e50 
					 
					
						
						
							
							fix(contrib/fvuls): Add flag to specify snmp community for future-vuls discover ( #1762 )  
						
						 
						
						... 
						
						
						
						* add: community option for discover command
* fix: README
---------
Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.6> 
						
						
					 
					
						2023-10-12 15:30:27 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								sadayuki-matsuno 
							
						 
					 
					
						
						
							
						
						048e204b33 
					 
					
						
						
							
							fix(contrib/future-vuls) output detail of loading toml error ( #1741 )  
						
						 
						
						
						
						
					 
					
						2023-09-24 21:45:33 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								hiroka-wada 
							
						 
					 
					
						
						
							
						
						dea9ed7709 
					 
					
						
						
							
							fix: errorlog future-vuls trivy-to-vuls ( #1739 )  
						
						 
						
						... 
						
						
						
						Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.6> 
						
						
					 
					
						2023-09-22 17:25:57 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								hiroka-wada 
							
						 
					 
					
						
						
							
						
						80b48fcbaa 
					 
					
						
						
							
							feat(contrib/fvuls) Add commands to obtained CPE information of network devices by executing snmp2cpe and upload to Fvuls server ( #1721 )  
						
						 
						
						... 
						
						
						
						* add: README.md
* add: commands(discover,add-server,add-cpe)
* add: implements(discover,add-server,add-cpe)
* fix: changed os.Exit(1) in main.go to return an error
* fix: lint error
* delete: trivy-to-vuls stdIn
* fix: Incomprehesible error logs
* fix: according to review
* add: function converts old config to latest one
* delete: add-server
* fix: lint error
* fix
* fix: remote scan error in Windows
* fix: lint error
* fix
* fix: lint error
* fix: lint error
* fix: lint error
* add: scanner/scanner.go test normalizeHomeDirForWindows()
* fix
* fix
* fix
* fix
* fix
* fix
* fix: lint error
* fix: error log
* fix
* refactor(fvuls)
* Refactor (#2 )
refactor
---------
Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.6>
* Refactor (#3 )
 fix
---------
Co-authored-by: Sadayuki Matsuno <sadayuki.matsuno@gmail.com >
Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.6>
* fix
* fix: lint error
* fix
---------
Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.4>
Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.10>
Co-authored-by: 和田皓翔 <wadahiroka@192.168 .0.6>
Co-authored-by: Sadayuki Matsuno <sadayuki.matsuno@gmail.com > 
						
						
					 
					
						2023-09-21 15:55:05 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								sadayuki-matsuno 
							
						 
					 
					
						
						
							
						
						14518d925e 
					 
					
						
						
							
							fix(contriv/fvuls) initialize optional map ( #1469 )  
						
						 
						
						
						
						
					 
					
						2022-05-30 12:46:53 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								sadayuki-matsuno 
							
						 
					 
					
						
						
							
						
						948f8c0751 
					 
					
						
						
							
							add VULS_TAGS env into contiriv future-vuls ( #1466 )  
						
						 
						
						
						
						
					 
					
						2022-05-24 13:46:28 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Kota Kanbe 
							
						 
					 
					
						
						
							
						
						aac5ef1438 
					 
					
						
						
							
							feat: update-trivy ( #1316 )  
						
						 
						
						... 
						
						
						
						* feat: update-trivy
* add v2 parser
* implement v2
* refactor
* feat: add show version to future-vuls
* add test case for v2
* trivy v0.20.0
* support --list-all-pkgs
* fix lint err
* add test case for jar
* add a test case for gemspec in container
* remove v1 parser and change Library struct
* Changed the field name in the model struct LibraryScanner
* add comment
* fix comment
* fix comment
* chore
* add struct tag 
						
						
					 
					
						2021-10-08 17:22:06 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Kota Kanbe 
							
						 
					 
					
						
						
							
						
						0a440ca629 
					 
					
						
						
							
							fix(saas): add saas subcmd ( #1093 )  
						
						 
						
						
						
						
					 
					
						2020-12-11 16:19:36 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								sadayuki-matsuno 
							
						 
					 
					
						
						
							
						
						4ae87cc36c 
					 
					
						
						
							
							Fix releaser ( #988 )  
						
						 
						
						... 
						
						
						
						* fix releaser
* fix releaser
* fix releaser
* fix releaser
* add 32 bit releaser and add exit code  in cmd
* delete 32 bit releaser
* fix 
						
						
					 
					
						2020-06-05 15:04:06 +09:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								sadayuki-matsuno 
							
						 
					 
					
						
						
							
						
						d18e7a751d 
					 
					
						
						
							
							add trivy parser ( #981 )  
						
						 
						
						... 
						
						
						
						* add trivy parser
* fix test
* format
* add title and summary
* add trivy parse command
* add uploader
* set args by env
* add README
* add err check
* fix
* fix
* fix
* fix test
* update trivy
* refactor
* delete require uuid
* delete uuid from trivy parser
Co-authored-by: Kota Kanbe <kotakanbe@gmail.com > 
						
						
					 
					
						2020-05-29 18:06:45 +09:00