Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 5 commits
- 6 files changed
- 4 contributors
Commits on Nov 21, 2023
-
chore(deps): bump anchore/sbom-action from 0.14.3 to 0.15.0 (#1611)
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.14.3 to 0.15.0. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Commits](anchore/sbom-action@78fc58e...fd74a6f) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 27, 2023
-
chore: explicitly test maven suffixes (#1617)
Some older Maven releases include a suffix like .RELEASE on the version number. Grype's behavior with regard to these versions has been suggested as a source of false positives. Pin the behavior with tests to make it easier to reason about how Grype will compare maven versions and to guard against this behavior accidentally changing. Signed-off-by: Will Murphy <will.murphy@anchore.com>
Commits on Nov 28, 2023
-
chore(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 (#1618)
Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.10.0 to 1.11.0. - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.10.0...v1.11.0) --- updated-dependencies: - dependency-name: github.com/spf13/afero dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Nov 29, 2023
-
chore: update syft; go mod tidy (#1621)
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Commits on Nov 30, 2023
-
chore: bump to syft v0.98.0 in quality gate tests (#1623)
Signed-off-by: Weston Steimel <weston.steimel@anchore.com>
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v0.73.3...v0.73.4