Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 9 commits
- 10 files changed
- 2 contributors
Commits on Nov 10, 2023
-
chore(deps): Bump github.com/anchore/grype from 0.73.0 to 0.73.1 (#198)
Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.73.0 to 0.73.1. - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml) - [Commits](anchore/grype@v0.73.0...v0.73.1) --- updated-dependencies: - dependency-name: github.com/anchore/grype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 17, 2023
-
chore(deps): Bump github.com/klauspost/compress from 1.17.2 to 1.17.3 (…
…#200) Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.2 to 1.17.3. - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.2...v1.17.3) --- updated-dependencies: - dependency-name: github.com/klauspost/compress dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 18, 2023
-
chore(deps): Bump github.com/anchore/grype from 0.73.1 to 0.73.2 (#201)
Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.73.1 to 0.73.2. - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml) - [Commits](anchore/grype@v0.73.1...v0.73.2) --- updated-dependencies: - dependency-name: github.com/anchore/grype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 20, 2023
-
chore(deps): Bump github.com/anchore/grype from 0.73.2 to 0.73.3 (#202)
Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.73.2 to 0.73.3. - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml) - [Commits](anchore/grype@v0.73.2...v0.73.3) --- updated-dependencies: - dependency-name: github.com/anchore/grype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 28, 2023
-
chore: bump vulnerability match labels (#204)
Signed-off-by: Will Murphy <will.murphy@anchore.com>
Commits on Nov 29, 2023
-
chore(deps): Bump github.com/spf13/afero from 1.10.0 to 1.11.0 (#205)
Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.10.0 to 1.11.0. - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.10.0...v1.11.0) --- updated-dependencies: - dependency-name: github.com/spf13/afero dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Dec 1, 2023
-
chore(deps): Bump github.com/anchore/grype from 0.73.3 to 0.73.4 (#206)
Bumps [github.com/anchore/grype](https://github.com/anchore/grype) from 0.73.3 to 0.73.4. - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/.goreleaser.yaml) - [Commits](anchore/grype@v0.73.3...v0.73.4) --- updated-dependencies: - dependency-name: github.com/anchore/grype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Dec 5, 2023
-
feat: multiple platform cpes (#203)
Previously, if the platform CPE was more complicated than a single "running on/with" entry, grype-db would leave it blank. Now, when several "running on/with" entries are present, emit a row for each of them, in order to reduce false positives caused by more permissive platform constraint. Note that "running on/with" could be an application or platform CPE. For example, Redis or OpenShift might be coded as a type "a" CPE (for "application"), but might be a platform (displayed in the "running on or with" section of the NVD UI). For these, consider them platforms and emit a platform CPE. Signed-off-by: Will Murphy <will.murphy@anchore.com>
-
chore(deps): Bump github.com/klauspost/compress from 1.17.3 to 1.17.4 (…
…#207) Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.17.3 to 1.17.4. - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.3...v1.17.4) --- updated-dependencies: - dependency-name: github.com/klauspost/compress dependency-type: di 5D7E rect:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v0.19.2...v0.19.3