mirror of
https://github.com/project-zot/zot.git
synced 2024-12-16 21:56:37 -05:00
f408df0dac
* feat(repodb): implement a DB for image specific information using boltdb (cherry picked from commite3cb60b856) Some other fixes/improvements on top (Andrei) Global search: The last updated attribute on repo level is now computed correctly. Global search: Fix and enhance tests: validate more fields, and fix CVE verification logic RepoListWithNewestImage: The vendors and platforms at repo level are no longer containing duplicate entries CVE: scan OCIUncompressedLayer instead of skiping them (used in tests) bug(repodb): do no try to increment download counters for signatures Signed-off-by: Andrei Aaron <andaaron@cisco.com> Add filtering to global search API (Laurentiu) (cherry picked from commit a87976d635ea876fe8ced532e8adb7c3bb24098f) Original work by Laurentiu Niculae <niculae.laurentiu1@gmail.com> Fix pagination bug - when limit was bigger than the repo count result contained empty results - now correctly returns only maximum available number of repo results Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> Add history to the fields returned from RepoDB Consolidate fields used in packages - pkg/extensions/search/common/common_test - pkg/extensions/search/common/common Refactor duplicate code in GlobalSearch verification Add vulnerability scan results to image:tag reply Signed-off-by: Andrei Aaron <andaaron@cisco.com> Refactor ExpandedRepoInfo to using RepoDB Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit fd7dc85c3a9d028fd8860d3791cad4df769ed005) Init RepoDB at startup - sync with storage - ignore images without a tag Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit 359898facd6541b2aa99ee95080f7aabf28c2650) Update request to get image:tag to use repodb Signed-off-by: Andrei Aaron <andaaron@cisco.com> Sync RepoDB logging - added logging for errors Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit 2e128f4d01712b34c70b5468285100b0657001bb) sync-repodb minor error checking fix Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> Improve tests for syncing RepoDB with storage Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit b18408c6d64e01312849fc18b929e3a2a7931e9e) Update scoring rule for repos - now prioritize matches to the end of the repo name Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit 6961346ccf02223132b3b12a2132c80bd1b6b33c) Upgrade search filters to permit multiple values - multiple values for os and arch Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit 3ffb72c6fc0587ff827a03fe4f76a13b27b876a0) feature(repodb): add pagination for RepoListWithNewestImage Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro> (cherry picked from commit 32c917f2dc65363b0856345289353559a8027aee) test(fix): fix tests failing since repodb is used for listing all repos 1. One of the tests was verifying disk/oci related erros and is not applicable 2. Another test was actually broken in an older PR, the default store and the substore were using the same repo names (the substore ones were unprefixed), which should not be the case, this was causing a single entry to show in the RepoDB instead of two separate entries for each test image Root cause in:b61aff62cd (diff-b86e11fa5a3102b336caebec3b30a9d35e26af554dd8658f124dba2404b7d24aR88)Signed-off-by: Andrei Aaron <andaaron@cisco.com> chore: move code reponsible for transforming objects to gql_generated types to separate package Signed-off-by: Andrei Aaron <andaaron@cisco.com> Process input for global search - Clean input: query, filter strings - Add validation for global search input Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit f1ca8670fbe4a4a327ea25cf459237dbf23bb78a) fix: only call cve scanning for data shown to the user Signed-off-by: Andrei Aaron <andaaron@cisco.com> GQL omit scanning for CVE if field is not required Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit 5479ce45d6cb2abcf5fbccadeaf6f3393c3f6bf1) Fix filtering logic in RepoDB - filter parameter was set to false instead of being calculator from the later image Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit a82d2327e34e5da617af0b7ca78a2dba90999f0a) bug(repodb): Checking signature returns error if signed image is not found - we considere a signature image orfan when the image it signs is not found - we need this to ignore such signatures in certain cases Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> (cherry picked from commit d0418505f76467accd8e1ee34fcc2b2a165efae5) feat(repodb): CVE logic to use repoDB Also update some method signatures to remove usage of: github.com/google/go-containerregistry/pkg/v1 Signed-off-by: Andrei Aaron <andaaron@cisco.com> * feat(repodb): refactor repodb update logic Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * fix(repodb): minor fixes Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): move repodb logic inside meta directory under pkg Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): change factory class for repodb initialization with factory metrod Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): simplify repodb configuration - repodb now shares config parameters with the cache - config taken directly from storage config Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * fix(authors): fix authors information to work properly with repodb Ideally this commit would be squshed in the repodb commit but as-is it is easier to cherry-pick on other branches Signed-off-by: Andrei Aaron <andaaron@cisco.com> * feat(repodb): dynamodb support for repodb - clean-up repodb code + coverage improvements Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(dynamo): tables used by dynamo are created automatically if they don't exists - if the table exists nothing happens Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * test(repodb): coverage tests - minor fix for CVEListForImage to fix the tests Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): add descriptor with media type - to represent images and multi-arch images Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): support signatures on repo level - added to follow the behavior of signing and signature verification tools that work on a manifest level for each repo - all images with different tags but the same manifest will be signed at once Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): old repodb version migration support Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): tests for coverage Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): WIP fixing tests Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * feat(repodb): work on patchRepoDB tests Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * fix(repodb): create dynamo tables only for linux amd Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> * fix(ci): fix a typo in ci-cd.yml Signed-off-by: Andrei Aaron <aaaron@luxoft.com> Signed-off-by: Andrei Aaron <andaaron@cisco.com> Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com> Signed-off-by: Andrei Aaron <aaaron@luxoft.com> Co-authored-by: Andrei Aaron <andaaron@cisco.com> Co-authored-by: Andrei Aaron <aaaron@luxoft.com>
433 lines
23 KiB
Modula-2
433 lines
23 KiB
Modula-2
module zotregistry.io/zot
|
|
|
|
go 1.19
|
|
|
|
require (
|
|
github.com/99designs/gqlgen v0.17.22
|
|
github.com/Masterminds/semver v1.5.0
|
|
github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751
|
|
github.com/apex/log v1.9.0
|
|
github.com/aquasecurity/trivy-db v0.0.0-20210916043317-726b7b72a47b
|
|
github.com/bmatcuk/doublestar/v4 v4.4.0
|
|
github.com/briandowns/spinner v1.20.0
|
|
github.com/chartmuseum/auth v0.5.0
|
|
github.com/containers/common v0.50.1
|
|
github.com/didip/tollbooth/v6 v6.1.2
|
|
github.com/docker/distribution v2.8.1+incompatible
|
|
github.com/dustin/go-humanize v1.0.0
|
|
github.com/fsnotify/fsnotify v1.6.0
|
|
github.com/getlantern/deepcopy v0.0.0-20160317154340-7f45deb8130a
|
|
github.com/go-ldap/ldap/v3 v3.4.4
|
|
github.com/gofrs/uuid v4.3.1+incompatible
|
|
github.com/google/go-containerregistry v0.12.1
|
|
github.com/google/uuid v1.3.0
|
|
github.com/gorilla/handlers v1.5.1
|
|
github.com/gorilla/mux v1.8.0
|
|
github.com/json-iterator/go v1.1.12
|
|
github.com/minio/sha256-simd v1.0.0
|
|
github.com/mitchellh/mapstructure v1.5.0
|
|
github.com/nmcclain/ldap v0.0.0-20210720162743-7f8d1e44eeba
|
|
github.com/olekukonko/tablewriter v0.0.5
|
|
github.com/opencontainers/go-digest v1.0.0
|
|
github.com/opencontainers/image-spec v1.1.0-rc2.0.20221020182949-4df8887994e8
|
|
github.com/opencontainers/umoci v0.4.8-0.20210922062158-e60a0cc726e6
|
|
github.com/oras-project/artifacts-spec v1.0.0-rc.2
|
|
github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/prometheus/client_golang v1.14.0
|
|
github.com/prometheus/client_model v0.3.0
|
|
github.com/rs/zerolog v1.28.0
|
|
github.com/smartystreets/goconvey v1.7.2
|
|
github.com/spf13/cobra v1.6.1
|
|
github.com/spf13/viper v1.14.0
|
|
github.com/stretchr/testify v1.8.1
|
|
github.com/swaggo/swag v1.8.9
|
|
github.com/urfave/cli/v2 v2.23.7
|
|
github.com/vektah/gqlparser/v2 v2.5.1
|
|
go.etcd.io/bbolt v1.3.6
|
|
golang.org/x/crypto v0.4.0
|
|
gopkg.in/resty.v1 v1.12.0
|
|
gopkg.in/yaml.v2 v2.4.0
|
|
)
|
|
|
|
require (
|
|
github.com/aquasecurity/trivy v0.0.0-00010101000000-000000000000
|
|
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.17.9
|
|
github.com/containers/image/v5 v5.23.0
|
|
github.com/gobwas/glob v0.2.3
|
|
github.com/notaryproject/notation-go v0.12.0-beta.1
|
|
github.com/opencontainers/distribution-spec/specs-go v0.0.0-20220620172159-4ab4752c3b86
|
|
github.com/sigstore/cosign v1.13.1
|
|
github.com/swaggo/http-swagger v1.3.3
|
|
)
|
|
|
|
require (
|
|
github.com/aws/aws-sdk-go-v2/service/dynamodbstreams v1.13.28 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.7.21 // indirect
|
|
)
|
|
|
|
require (
|
|
bitbucket.org/creachadair/shell v0.0.7 // indirect
|
|
cloud.google.com/go v0.104.0 // indirect
|
|
cloud.google.com/go/compute v1.12.1 // indirect
|
|
cloud.google.com/go/compute/metadata v0.2.1 // indirect
|
|
cloud.google.com/go/iam v0.5.0 // indirect
|
|
cloud.google.com/go/storage v1.23.0 // indirect
|
|
cuelang.org/go v0.4.3 // indirect
|
|
github.com/AdaLogics/go-fuzz-headers v0.0.0-20211102141018-f7be0cbad29c // indirect
|
|
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper v0.2.0 // indirect
|
|
github.com/Azure/azure-sdk-for-go v66.0.0+incompatible // indirect
|
|
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
|
|
github.com/Azure/go-autorest/autorest v0.11.28 // indirect
|
|
github.com/Azure/go-autorest/autorest/adal v0.9.21 // indirect
|
|
github.com/Azure/go-autorest/autorest/azure/auth v0.5.11 // indirect
|
|
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect
|
|
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
|
|
github.com/Azure/go-autorest/logger v0.2.1 // indirect
|
|
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
|
|
github.com/Azure/go-ntlmssp v0.0.0-20220621081337-cb9428e4ac1e // indirect
|
|
github.com/BurntSushi/toml v1.2.1 // indirect
|
|
github.com/GoogleCloudPlatform/docker-credential-gcr v1.5.0 // indirect
|
|
github.com/KyleBanks/depth v1.2.1 // indirect
|
|
github.com/Masterminds/goutils v1.1.1 // indirect
|
|
github.com/Masterminds/sprig v2.22.0+incompatible // indirect
|
|
github.com/Microsoft/go-winio v0.6.0 // indirect
|
|
github.com/OneOfOne/xxhash v1.2.8 // indirect
|
|
github.com/ProtonMail/go-crypto v0.0.0-20220407094043-a94812496cf5 // indirect
|
|
github.com/ThalesIgnite/crypto11 v1.2.5 // indirect
|
|
github.com/VividCortex/ewma v1.2.0 // indirect
|
|
github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect
|
|
github.com/acomagu/bufpipe v1.0.3 // indirect
|
|
github.com/agext/levenshtein v1.2.2 // indirect
|
|
github.com/agnivade/levenshtein v1.1.1 // indirect
|
|
github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.4 // indirect
|
|
github.com/alibabacloud-go/cr-20160607 v1.0.1 // indirect
|
|
github.com/alibabacloud-go/cr-20181201 v1.0.10 // indirect
|
|
github.com/alibabacloud-go/darabonba-openapi v0.1.18 // indirect
|
|
github.com/alibabacloud-go/debug v0.0.0-20190504072949-9472017b5c68 // indirect
|
|
github.com/alibabacloud-go/endpoint-util v1.1.1 // indirect
|
|
github.com/alibabacloud-go/openapi-util v0.0.11 // indirect
|
|
github.com/alibabacloud-go/tea v1.1.18 // indirect
|
|
github.com/alibabacloud-go/tea-utils v1.4.4 // indirect
|
|
github.com/alibabacloud-go/tea-xml v1.1.2 // indirect
|
|
github.com/aliyun/credentials-go v1.2.3 // indirect
|
|
github.com/apparentlymart/go-cidr v1.1.0 // indirect
|
|
github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
|
|
github.com/aquasecurity/fanal v0.0.0-20211005172059-69527b46560c // indirect
|
|
github.com/aquasecurity/go-dep-parser v0.0.0-20210919151457-76db061b9305 // indirect
|
|
github.com/aquasecurity/go-gem-version v0.0.0-20201115065557-8eed6fe000ce // indirect
|
|
github.com/aquasecurity/go-npm-version v0.0.0-20201110091526-0b796d180798 // indirect
|
|
github.com/aquasecurity/go-pep440-version v0.0.0-20210121094942-22b2f8951d46 // indirect
|
|
github.com/aquasecurity/go-version v0.0.0-20210121072130-637058cfe492 // indirect
|
|
github.com/aquasecurity/tfsec v0.58.11 // indirect
|
|
github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
|
|
github.com/aws/aws-sdk-go v1.44.114 // indirect
|
|
github.com/aws/aws-sdk-go-v2 v1.17.3
|
|
github.com/aws/aws-sdk-go-v2/config v1.18.7
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.13.7 // indirect
|
|
github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue v1.10.8
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.21 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.27 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.21 // indirect
|
|
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.28 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ecr v1.15.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.12.0 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.21 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.11.28 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.13.11 // indirect
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.17.7 // indirect
|
|
github.com/aws/smithy-go v1.13.5 // indirect
|
|
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220228164355-396b2034c795 // indirect
|
|
github.com/benbjohnson/clock v1.1.0 // indirect
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
|
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
|
|
github.com/bgentry/speakeasy v0.1.0 // indirect
|
|
github.com/blang/semver v3.5.1+incompatible // indirect
|
|
github.com/bmatcuk/doublestar v1.3.4 // indirect
|
|
github.com/caarlos0/env/v6 v6.0.0 // indirect
|
|
github.com/cenkalti/backoff v2.2.1+incompatible // indirect
|
|
github.com/cenkalti/backoff/v4 v4.1.3 // indirect
|
|
github.com/census-instrumentation/opencensus-proto v0.3.0 // indirect
|
|
github.com/cespare/xxhash/v2 v2.1.2 // indirect
|
|
github.com/cheggaaa/pb/v3 v3.0.3 // indirect
|
|
github.com/chrismellard/docker-credential-acr-env v0.0.0-20220119192733-fe33c00cee21 // indirect
|
|
github.com/clbanning/mxj/v2 v2.5.6 // indirect
|
|
github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4 // indirect
|
|
github.com/cncf/xds/go v0.0.0-20211130200136-a8f946100490 // indirect
|
|
github.com/cockroachdb/apd/v2 v2.0.1 // indirect
|
|
github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be // indirect
|
|
github.com/containerd/stargz-snapshotter/estargz v0.12.1 // indirect
|
|
github.com/containerd/typeurl v1.0.2 // indirect
|
|
github.com/containers/libtrust v0.0.0-20200511145503-9c3a6c22cd9a // indirect
|
|
github.com/containers/ocicrypt v1.1.5 // indirect
|
|
github.com/containers/storage v1.43.0 // indirect
|
|
github.com/coreos/go-oidc/v3 v3.4.0 // indirect
|
|
github.com/coreos/go-semver v0.3.0 // indirect
|
|
github.com/coreos/go-systemd/v22 v22.4.0 // indirect
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
|
|
github.com/cyberphone/json-canonicalization v0.0.0-20210823021906-dc406ceaf94b // indirect
|
|
github.com/cyphar/filepath-securejoin v0.2.3 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
|
|
github.com/dimchansky/utfbom v1.1.1 // indirect
|
|
github.com/docker/cli v20.10.20+incompatible // indirect
|
|
github.com/docker/docker v20.10.20+incompatible // indirect
|
|
github.com/docker/docker-credential-helpers v0.7.0 // indirect
|
|
github.com/docker/go-connections v0.4.0 // indirect
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
|
github.com/docker/go-units v0.5.0 // indirect
|
|
github.com/emicklei/proto v1.6.15 // indirect
|
|
github.com/emirpasic/gods v1.12.0 // indirect
|
|
github.com/envoyproxy/go-control-plane v0.10.2-0.20220325020618-49ff273808a1 // indirect
|
|
github.com/envoyproxy/protoc-gen-validate v0.6.2 // indirect
|
|
github.com/fatih/color v1.13.0 // indirect
|
|
github.com/felixge/httpsnoop v1.0.3 // indirect
|
|
github.com/fullstorydev/grpcurl v1.8.7 // indirect
|
|
github.com/ghodss/yaml v1.0.0 // indirect
|
|
github.com/go-asn1-ber/asn1-ber v1.5.4 // indirect
|
|
github.com/go-chi/chi v4.1.2+incompatible // indirect
|
|
github.com/go-git/gcfg v1.5.0 // indirect
|
|
github.com/go-git/go-billy/v5 v5.3.1 // indirect
|
|
github.com/go-git/go-git/v5 v5.4.2 // indirect
|
|
github.com/go-logr/logr v1.2.3 // indirect
|
|
github.com/go-openapi/analysis v0.21.4 // indirect
|
|
github.com/go-openapi/errors v0.20.3 // indirect
|
|
github.com/go-openapi/jsonpointer v0.19.5 // indirect
|
|
github.com/go-openapi/jsonreference v0.20.0 // indirect
|
|
github.com/go-openapi/loads v0.21.2 // indirect
|
|
github.com/go-openapi/runtime v0.24.2 // indirect
|
|
github.com/go-openapi/spec v0.20.7 // indirect
|
|
github.com/go-openapi/strfmt v0.21.3 // indirect
|
|
github.com/go-openapi/swag v0.22.3 // indirect
|
|
github.com/go-openapi/validate v0.22.0 // indirect
|
|
github.com/go-piv/piv-go v1.10.0 // indirect
|
|
github.com/go-pkgz/expirable-cache v0.0.3 // indirect
|
|
github.com/go-playground/locales v0.14.0 // indirect
|
|
github.com/go-playground/universal-translator v0.18.0 // indirect
|
|
github.com/go-playground/validator/v10 v10.11.0 // indirect
|
|
github.com/go-redis/redis/v8 v8.11.5 // indirect
|
|
github.com/go-restruct/restruct v0.0.0-20191227155143-5734170a48a1 // indirect
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
|
github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
|
|
github.com/golang-jwt/jwt/v4 v4.4.2 // indirect
|
|
github.com/golang/glog v1.0.0 // indirect
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
|
github.com/golang/mock v1.6.0 // indirect
|
|
github.com/golang/protobuf v1.5.2 // indirect
|
|
github.com/golang/snappy v0.0.4 // indirect
|
|
github.com/google/btree v1.1.2 // indirect
|
|
github.com/google/certificate-transparency-go v1.1.3 // indirect
|
|
github.com/google/go-cmp v0.5.9 // indirect
|
|
github.com/google/go-github/v33 v33.0.0 // indirect
|
|
github.com/google/go-github/v45 v45.2.0 // indirect
|
|
github.com/google/go-querystring v1.1.0 // indirect
|
|
github.com/google/gofuzz v1.2.0 // indirect
|
|
github.com/google/trillian v1.5.0 // indirect
|
|
github.com/google/wire v0.5.0 // indirect
|
|
github.com/googleapis/enterprise-certificate-proxy v0.2.0 // indirect
|
|
github.com/googleapis/gax-go/v2 v2.6.0 // indirect
|
|
github.com/googleapis/gnostic v0.5.5 // indirect
|
|
github.com/googleapis/go-type-adapters v1.0.0 // indirect
|
|
github.com/gopherjs/gopherjs v0.0.0-20200217142428-fce0ec30dd00 // indirect
|
|
github.com/gorilla/websocket v1.5.0 // indirect
|
|
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 // indirect
|
|
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway v1.16.0 // indirect
|
|
github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3 // indirect
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
|
github.com/hashicorp/go-getter v1.5.2 // indirect
|
|
github.com/hashicorp/go-multierror v1.1.1 // indirect
|
|
github.com/hashicorp/go-retryablehttp v0.7.1 // indirect
|
|
github.com/hashicorp/go-safetemp v1.0.0 // indirect
|
|
github.com/hashicorp/go-uuid v1.0.3 // indirect
|
|
github.com/hashicorp/go-version v1.6.0 // indirect
|
|
github.com/hashicorp/golang-lru v0.5.4 // indirect
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
|
github.com/hashicorp/hcl/v2 v2.10.1 // indirect
|
|
github.com/huandu/xstrings v1.3.2 // indirect
|
|
github.com/imdario/mergo v0.3.13 // indirect
|
|
github.com/in-toto/in-toto-golang v0.3.4-0.20220709202702-fa494aaa0add // indirect
|
|
github.com/inconshreveable/mousetrap v1.0.1 // indirect
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
github.com/jedisct1/go-minisign v0.0.0-20211028175153-1c139d1cc84b // indirect
|
|
github.com/jhump/protoreflect v1.13.0 // indirect
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
|
github.com/jonboulle/clockwork v0.3.0 // indirect
|
|
github.com/josharian/intern v1.0.0 // indirect
|
|
github.com/jtolds/gls v4.20.0+incompatible // indirect
|
|
github.com/kevinburke/ssh_config v0.0.0-20201106050909-4977a11b4351 // indirect
|
|
github.com/klauspost/compress v1.15.11 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.0.4 // indirect
|
|
github.com/klauspost/pgzip v1.2.5 // indirect
|
|
github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f // indirect
|
|
github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d // indirect
|
|
github.com/knqyf263/go-rpm-version v0.0.0-20170716094938-74609b86c936 // indirect
|
|
github.com/knqyf263/go-rpmdb v0.0.0-20210911072402-73bd0ce46c49 // indirect
|
|
github.com/knqyf263/nested v0.0.1 // indirect
|
|
github.com/leodido/go-urn v1.2.1 // indirect
|
|
github.com/letsencrypt/boulder v0.0.0-20220929215747-76583552c2be // indirect
|
|
github.com/magiconair/properties v1.8.6 // indirect
|
|
github.com/mailru/easyjson v0.7.7 // indirect
|
|
github.com/masahiro331/go-mvn-version v0.0.0-20210429150710-d3157d602a08 // indirect
|
|
github.com/mattn/go-colorable v0.1.13 // indirect
|
|
github.com/mattn/go-isatty v0.0.16 // indirect
|
|
github.com/mattn/go-runewidth v0.0.13 // indirect
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect
|
|
github.com/miekg/pkcs11 v1.1.1 // indirect
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0 // indirect
|
|
github.com/mitchellh/go-testing-interface v1.14.1 // indirect
|
|
github.com/mitchellh/go-wordwrap v1.0.0 // indirect
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
|
github.com/moby/buildkit v0.8.1 // indirect
|
|
github.com/moby/sys/mountinfo v0.6.2 // indirect
|
|
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
|
github.com/modern-go/reflect2 v1.0.2 // indirect
|
|
github.com/mozillazg/docker-credential-acr-helper v0.3.0 // indirect
|
|
github.com/mpvl/unique v0.0.0-20150818121801-cbe035fff7de // indirect
|
|
github.com/nmcclain/asn1-ber v0.0.0-20170104154839-2661553a0484 // indirect
|
|
github.com/notaryproject/notation-core-go v0.2.0-beta.1 // indirect
|
|
github.com/oklog/ulid v1.3.1 // indirect
|
|
github.com/open-policy-agent/opa v0.45.0 // indirect
|
|
github.com/opencontainers/runc v1.1.4 // indirect
|
|
github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 // indirect
|
|
github.com/opentracing/opentracing-go v1.2.0 // indirect
|
|
github.com/owenrumney/squealer v0.2.28 // indirect
|
|
github.com/pelletier/go-toml v1.9.5 // indirect
|
|
github.com/pelletier/go-toml/v2 v2.0.5 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/proglottis/gpgme v0.1.3 // indirect
|
|
github.com/prometheus/common v0.37.0 // indirect
|
|
github.com/prometheus/procfs v0.8.0 // indirect
|
|
github.com/protocolbuffers/txtpbfmt v0.0.0-20201118171849-f6a6b3f636fc // indirect
|
|
github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
|
|
github.com/rivo/uniseg v0.2.0 // indirect
|
|
github.com/rootless-containers/proto/go-proto v0.0.0-20210921234734-69430b6543fb // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
github.com/saracen/walker v0.0.0-20191201085201-324a081bae7e // indirect
|
|
github.com/sassoftware/relic v0.0.0-20210427151427-dfb082b79b74 // indirect
|
|
github.com/secure-systems-lab/go-securesystemslib v0.4.0 // indirect
|
|
github.com/segmentio/ksuid v1.0.4 // indirect
|
|
github.com/sergi/go-diff v1.2.0 // indirect
|
|
github.com/shibumi/go-pathspec v1.3.0 // indirect
|
|
github.com/sigstore/fulcio v0.6.0 // indirect
|
|
github.com/sigstore/rekor v0.12.1-0.20220915152154-4bb6f441c1b2 // indirect
|
|
github.com/sigstore/sigstore v1.4.4 // indirect
|
|
github.com/sirupsen/logrus v1.9.0 // indirect
|
|
github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966 // indirect
|
|
github.com/smartystreets/assertions v1.2.0 // indirect
|
|
github.com/soheilhy/cmux v0.1.5 // indirect
|
|
github.com/spf13/afero v1.9.2 // indirect
|
|
github.com/spf13/cast v1.5.0 // indirect
|
|
github.com/spf13/jwalterweatherman v1.1.0 // indirect
|
|
github.com/spf13/pflag v1.0.5 // indirect
|
|
github.com/spiffe/go-spiffe/v2 v2.1.1 // indirect
|
|
github.com/stefanberger/go-pkcs11uri v0.0.0-20201008174630-78d3cae3a980 // indirect
|
|
github.com/stretchr/objx v0.5.0 // indirect
|
|
github.com/subosito/gotenv v1.4.1 // indirect
|
|
github.com/swaggo/files v0.0.0-20220610200504-28940afbdbfe // indirect
|
|
github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635 // indirect
|
|
github.com/syndtr/goleveldb v1.0.1-0.20220721030215-126854af5e6d // indirect
|
|
github.com/tchap/go-patricia/v2 v2.3.1 // indirect
|
|
github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613 // indirect
|
|
github.com/thales-e-security/pool v0.0.2 // indirect
|
|
github.com/theupdateframework/go-tuf v0.5.2-0.20220930112810-3890c1e7ace4 // indirect
|
|
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
|
|
github.com/tjfoc/gmsm v1.3.2 // indirect
|
|
github.com/tmc/grpc-websocket-proxy v0.0.0-20201229170055-e5319fda7802 // indirect
|
|
github.com/tmccombs/hcl2json v0.3.1 // indirect
|
|
github.com/transparency-dev/merkle v0.0.1 // indirect
|
|
github.com/twitchtv/twirp v8.1.0+incompatible // indirect
|
|
github.com/ulikunitz/xz v0.5.10 // indirect
|
|
github.com/urfave/cli v1.22.7 // indirect
|
|
github.com/vbatts/go-mtree v0.5.0 // indirect
|
|
github.com/vbatts/tar-split v0.11.2 // indirect
|
|
github.com/vbauerster/mpb/v7 v7.5.3 // indirect
|
|
github.com/xanzy/go-gitlab v0.73.1 // indirect
|
|
github.com/xanzy/ssh-agent v0.3.0 // indirect
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2 // indirect
|
|
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 // indirect
|
|
github.com/yashtewari/glob-intersection v0.1.0 // indirect
|
|
github.com/zclconf/go-cty v1.9.1 // indirect
|
|
github.com/zclconf/go-cty-yaml v1.0.2 // indirect
|
|
github.com/zeebo/errs v1.2.2 // indirect
|
|
go.etcd.io/etcd/api/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/client/pkg/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/client/v2 v2.306.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/client/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/etcdctl/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/etcdutl/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/pkg/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/raft/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/server/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/tests/v3 v3.6.0-alpha.0 // indirect
|
|
go.etcd.io/etcd/v3 v3.6.0-alpha.0 // indirect
|
|
go.mongodb.org/mongo-driver v1.10.0 // indirect
|
|
go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352 // indirect
|
|
go.opencensus.io v0.23.0 // indirect
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.28.0 // indirect
|
|
go.opentelemetry.io/otel v1.7.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.7.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.7.0 // indirect
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.7.0 // indirect
|
|
go.opentelemetry.io/otel/sdk v1.7.0 // indirect
|
|
go.opentelemetry.io/otel/trace v1.7.0 // indirect
|
|
go.opentelemetry.io/proto/otlp v0.16.0 // indirect
|
|
go.uber.org/atomic v1.10.0 // indirect
|
|
go.uber.org/multierr v1.8.0 // indirect
|
|
go.uber.org/zap v1.23.0 // indirect
|
|
golang.org/x/exp v0.0.0-20220823124025-807a23277127 // indirect
|
|
golang.org/x/mod v0.6.0 // indirect
|
|
golang.org/x/net v0.3.0 // indirect
|
|
golang.org/x/oauth2 v0.1.0 // indirect
|
|
golang.org/x/sync v0.1.0 // indirect
|
|
golang.org/x/sys v0.3.0 // indirect
|
|
golang.org/x/term v0.3.0 // indirect
|
|
golang.org/x/text v0.5.0 // indirect
|
|
golang.org/x/time v0.0.0-20220922220347-f3bd1da661af // indirect
|
|
golang.org/x/tools v0.1.12 // indirect
|
|
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
|
|
google.golang.org/api v0.102.0 // indirect
|
|
google.golang.org/appengine v1.6.7 // indirect
|
|
google.golang.org/genproto v0.0.0-20221024183307-1bc688fe9f3e // indirect
|
|
google.golang.org/grpc v1.50.1 // indirect
|
|
google.golang.org/protobuf v1.28.1 // indirect
|
|
gopkg.in/cheggaaa/pb.v1 v1.0.28 // indirect
|
|
gopkg.in/inf.v0 v0.9.1 // indirect
|
|
gopkg.in/ini.v1 v1.67.0 // indirect
|
|
gopkg.in/natefinch/lumberjack.v2 v2.0.0 // indirect
|
|
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
k8s.io/api v0.23.5 // indirect
|
|
k8s.io/apimachinery v0.23.5 // indirect
|
|
k8s.io/client-go v0.23.5 // indirect
|
|
k8s.io/klog/v2 v2.60.1-0.20220317184644-43cc75f9ae89 // indirect
|
|
k8s.io/kube-openapi v0.0.0-20220124234850-424119656bbf // indirect
|
|
k8s.io/utils v0.0.0-20220210201930-3a6ce19ff2f9 // indirect
|
|
oras.land/oras-go/v2 v2.0.0-rc.3 // indirect
|
|
sigs.k8s.io/json v0.0.0-20211208200746-9f7c6b3444d2 // indirect
|
|
sigs.k8s.io/release-utils v0.7.3 // indirect
|
|
sigs.k8s.io/structured-merge-diff/v4 v4.2.1 // indirect
|
|
sigs.k8s.io/yaml v1.3.0 // indirect
|
|
)
|
|
|
|
replace (
|
|
github.com/aquasecurity/fanal => github.com/project-zot/fanal v0.0.0-20211007194926-d0c577a014df
|
|
github.com/aquasecurity/trivy => github.com/project-zot/trivy v0.9.2-0.20211013001708-27408aa50da3
|
|
github.com/aquasecurity/trivy-db => github.com/project-zot/trivy-db v0.0.0-20211007191113-44f7e57b689c
|
|
github.com/containers/image/v5 => github.com/anuvu/image/v5 v5.0.0-20220520105616-e594853d6471
|
|
github.com/hashicorp/go-getter => github.com/hashicorp/go-getter v1.6.1
|
|
github.com/open-policy-agent/opa => github.com/open-policy-agent/opa v0.44.0
|
|
github.com/opencontainers/runc => github.com/opencontainers/runc v1.1.2
|
|
go.etcd.io/etcd/v3 => go.etcd.io/etcd/v3 v3.5.4
|
|
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc => go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.26.1
|
|
go.opentelemetry.io/otel => go.opentelemetry.io/otel v1.2.0
|
|
go.opentelemetry.io/otel/exporters/otlp/otlptrace => go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.1.0
|
|
go.opentelemetry.io/otel/sdk => go.opentelemetry.io/otel/sdk v1.2.0
|
|
go.opentelemetry.io/otel/trace => go.opentelemetry.io/otel/trace v1.2.0
|
|
)
|