[PR PATCH] New packages: grype and syft

[PR PATCH] New packages: grype and syft

[jcgruenhage]

[-- Attachment #1: Type: text/plain, Size: 872 bytes --]

There is a new pull request by jcgruenhage against master on the void-packages repository

https://github.com/jcgruenhage/void-packages grype
https://github.com/void-linux/void-packages/pull/34511

New packages: grype and syft
This adds two new packages, `syft`, a SBOM generator with support for creating SBOMs from loads of sources, and `grype`, a vulnerability scanner based on `syft`. `grype` includes `syft` as a library, and because go includes those statically, which is why `grype` does not have a dependency on `syft` here.
#### Testing the changes
- I tested the changes in this PR: **YES**

#### New package
- This new package conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements): **YES**


A patch file from https://github.com/void-linux/void-packages/pull/34511.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-grype-34511.patch --]
[-- Type: text/x-diff, Size: 2061 bytes --]

From de8bde47dc7a96caf2421f58f5d42f047c7b65a9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Christian=20Gr=C3=BCnhage?=
 <jan.christian@gruenhage.xyz>
Date: Mon, 13 Dec 2021 11:50:26 +0100
Subject: [PATCH 1/2] New package: syft-0.32.0

---
 srcpkgs/syft/template | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 srcpkgs/syft/template

diff --git a/srcpkgs/syft/template b/srcpkgs/syft/template
new file mode 100644
index 000000000000..d5b69f88b8b3
--- /dev/null
+++ b/srcpkgs/syft/template
@@ -0,0 +1,12 @@
+# Template file for 'syft'
+pkgname=syft
+version=0.32.0
+revision=1
+build_style=go
+go_import_path="github.com/anchore/syft"
+short_desc="SBOM generator CLI for container images, filesystems and more"
+maintainer="Jan Christian Grünhage <jan.christian@gruenhage.xyz>"
+license="Apache-2.0"
+homepage="https://github.com/anchore/syft"
+distfiles="https://github.com/anchore/syft/archive/refs/tags/v${version}.tar.gz"
+checksum=c49f13cb9a97d31cf34219fa7da3a155b59df2bc3a3631cf9dd64c0edafdb22b

From f5f36272b195f365ecb7d6181a91e9327c0b7c33 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Christian=20Gr=C3=BCnhage?=
 <jan.christian@gruenhage.xyz>
Date: Mon, 13 Dec 2021 11:50:30 +0100
Subject: [PATCH 2/2] New package: grype-0.27.0

---
 srcpkgs/grype/template | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 srcpkgs/grype/template

diff --git a/srcpkgs/grype/template b/srcpkgs/grype/template
new file mode 100644
index 000000000000..79c2f9f26b71
--- /dev/null
+++ b/srcpkgs/grype/template
@@ -0,0 +1,12 @@
+# Template file for 'grype'
+pkgname=grype
+version=0.27.0
+revision=1
+build_style=go
+go_import_path="github.com/anchore/grype"
+short_desc="Vulnerability scanner for container images and filesystems"
+maintainer="Jan Christian Grünhage <jan.christian@gruenhage.xyz>"
+license="Apache-2.0"
+homepage="https://github.com/anchore/grype"
+distfiles="https://github.com/anchore/grype/archive/refs/tags/v${version}.tar.gz"
+checksum=a022046538eb5e0ae60e57973ca301c9b32dfce339b0a3468f94fb26979b0495

Re: New packages: grype and syft

[github-actions]

[-- Attachment #1: Type: text/plain, Size: 305 bytes --]

New comment by github-actions[bot] on void-packages repository

https://github.com/void-linux/void-packages/pull/34511#issuecomment-1159340203

Comment:
Pull Requests become stale 90 days after last activity and are closed 14 days after that.  If this pull request is still relevant bump it or assign it.

Re: [PR PATCH] [Closed]: New packages: grype and syft

[github-actions]

[-- Attachment #1: Type: text/plain, Size: 715 bytes --]

There's a closed pull request on the void-packages repository

New packages: grype and syft
https://github.com/void-linux/void-packages/pull/34511

Description:
This adds two new packages, `syft`, a SBOM generator with support for creating SBOMs from loads of sources, and `grype`, a vulnerability scanner based on `syft`. `grype` includes `syft` as a library, and because go includes those statically, which is why `grype` does not have a dependency on `syft` here.
#### Testing the changes
- I tested the changes in this PR: **YES**

#### New package
- This new package conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements): **YES**