[PR PATCH] New packages: grype and syft

[PR PATCH] New packages: grype and syft

[jcgruenhage]

[-- Attachment #1: Type: text/plain, Size: 1498 bytes --]

There is a new pull request by jcgruenhage against master on the void-packages repository

https://github.com/jcgruenhage/void-packages grype
https://github.com/void-linux/void-packages/pull/40264

New packages: grype and syft
<!-- Uncomment relevant sections and delete options which are not applicable -->

Follow-up on https://github.com/void-linux/void-packages/pull/34511.

I had lost interest in it, but the yet to be published OpenSSL vulnerability means that I had to scan all my container images for installed OpenSSL versions. `syft` handles that job very well.


#### Testing the changes
- I tested the changes in this PR: **YES**

#### New package
- This new package conforms to the [package requirements](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#package-requirements): **YES**

<!-- Note: If the build is likely to take more than 2 hours, please add ci skip tag as described in
https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration
and test at least one native build and, if supported, at least one cross build.
Ignore this section if this PR is not skipping CI.
-->
<!--
#### Local build testing
- I built this PR locally for my native architecture, (ARCH-LIBC)
- I built this PR locally for these architectures (if supported. mark crossbuilds):
  - aarch64-musl
  - armv7l
  - armv6l-musl
-->


A patch file from https://github.com/void-linux/void-packages/pull/40264.patch is attached

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-grype-40264.patch --]
[-- Type: text/x-diff, Size: 2070 bytes --]

From eec993c4debfacb163ea097a77b2929b5add7282 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Christian=20Gr=C3=BCnhage?=
 <jan.christian@gruenhage.xyz>
Date: Mon, 13 Dec 2021 11:50:26 +0100
Subject: [PATCH 1/2] New package: syft-0.60.0

---
 srcpkgs/syft/template | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 srcpkgs/syft/template

diff --git a/srcpkgs/syft/template b/srcpkgs/syft/template
new file mode 100644
index 000000000000..fd7a65c00683
--- /dev/null
+++ b/srcpkgs/syft/template
@@ -0,0 +1,12 @@
+# Template file for 'syft'
+pkgname=syft
+version=0.60.0
+revision=1
+build_style=go
+go_import_path="github.com/anchore/syft/cmd/syft"
+short_desc="SBOM generator CLI for container images, filesystems and more"
+maintainer="Jan Christian Grünhage <jan.christian@gruenhage.xyz>"
+license="Apache-2.0"
+homepage="https://github.com/anchore/syft"
+distfiles="https://github.com/anchore/syft/archive/refs/tags/v${version}.tar.gz"
+checksum=b20634a8e7cdaf8b6fd741390800ae8fe2eead9d468a75437a7cae2712777ba3

From 7c2ebbe73d673ab3ec5b4531d56e9da0c56128d0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Christian=20Gr=C3=BCnhage?=
 <jan.christian@gruenhage.xyz>
Date: Mon, 13 Dec 2021 11:50:30 +0100
Subject: [PATCH 2/2] New package: grype-0.51.0

---
 srcpkgs/grype/template | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 srcpkgs/grype/template

diff --git a/srcpkgs/grype/template b/srcpkgs/grype/template
new file mode 100644
index 000000000000..9b7e3908b8d7
--- /dev/null
+++ b/srcpkgs/grype/template
@@ -0,0 +1,12 @@
+# Template file for 'grype'
+pkgname=grype
+version=0.51.0
+revision=1
+build_style=go
+go_import_path="github.com/anchore/grype"
+short_desc="Vulnerability scanner for container images and filesystems"
+maintainer="Jan Christian Grünhage <jan.christian@gruenhage.xyz>"
+license="Apache-2.0"
+homepage="https://github.com/anchore/grype"
+distfiles="https://github.com/anchore/grype/archive/refs/tags/v${version}.tar.gz"
+checksum=5d7260f15fe8cee30253894c0c4bae0451053585da45df72aef30dab7c14d0e0

Re: [PR PATCH] [Merged]: New packages: grype and syft

[leahneukirchen]

[-- Attachment #1: Type: text/plain, Size: 1341 bytes --]

There's a merged pull request on the void-packages repository

New packages: grype and syft
https://github.com/void-linux/void-packages/pull/40264

Description:
<!-- Uncomment relevant sections and delete options which are not applicable -->

Follow-up on https://github.com/void-linux/void-packages/pull/34511.

I had lost interest in it, but the yet to be published OpenSSL vulnerability means that I had to scan all my container images for installed OpenSSL versions. `syft` handles that job very well.


#### Testing the changes
- I tested the changes in this PR: **YES**

#### New package
- This new package conforms to the [package requirements](https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#package-requirements): **YES**

<!-- Note: If the build is likely to take more than 2 hours, please add ci skip tag as described in
https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration
and test at least one native build and, if supported, at least one cross build.
Ignore this section if this PR is not skipping CI.
-->
<!--
#### Local build testing
- I built this PR locally for my native architecture, (ARCH-LIBC)
- I built this PR locally for these architectures (if supported. mark crossbuilds):
  - aarch64-musl
  - armv7l
  - armv6l-musl
-->