Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update anchore dependencies #2388

Merged
merged 8 commits into from
Jan 22, 2025
Merged

chore(deps): update anchore dependencies #2388

merged 8 commits into from
Jan 22, 2025

Conversation

anchore-actions-token-generator[bot]
Copy link
Contributor

Dependencies changed

  • Stereoscope: v0.0.12v0.0.13 (requested main)
  • Syft: v1.18.1v1.18.2-0.20250121205042-7f5dbf9872fd (requested main)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@anchore-actions-token-generator anchore-actions-token-generator bot added dependencies pre-release used when updated dependencies in preparation for release labels Jan 21, 2025
@spiffcs
Copy link
Contributor

spiffcs commented Jan 21, 2025

Fixing tests on this now so we can make sure we can cut syft/grype tomorrow

@@ -804,6 +804,12 @@ func TestMatchByImage(t *testing.T) {

// The single match in the actual results is the same in ignoredMatched
// but must the details of the VEX matcher appended
if len(vexedResults.Sorted()) < 1 {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added this check because of the naked [0] access below which was panic when we got no vexed results as a consequence of the PURL changes.

Signed-off-by: Christopher Phillips <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
Copy link
Contributor

@kzantow kzantow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@spiffcs spiffcs marked this pull request as ready for review January 22, 2025 20:06
@spiffcs spiffcs enabled auto-merge (squash) January 22, 2025 20:07
@spiffcs spiffcs merged commit 247f5d7 into main Jan 22, 2025
10 checks passed
@spiffcs spiffcs deleted the auto/integration branch January 22, 2025 20:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies pre-release used when updated dependencies in preparation for release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants