18998 Commits (remove_syft_bin)

 

All Branches   

Search

Author	SHA1	Message	Date
Hari Om	fc038d32e3	feat: enforce required auto_generate field and refactor Packer release download logic	2 days ago
Hari Om	3ec8bb8811	feat: update AMI name and enhance scanner upload process for improved efficiency	2 days ago
Hari Om	288cecaf66	feat: refactor Packer release download and upload logic for improved handling	6 days ago
Hari Om	7fe10c9831	feat: enhance health check and packer binary handling in SBOM case matrix script	6 days ago
Hari Om	6b02361e4c	Add SBOM generation templates and update scripts ... - Introduced multiple Packer templates for generating SBOMs on various platforms including Amazon Linux, FreeBSD, RHEL, and Windows. - Added Docker templates for Linux with both legacy and no-exec styles. - Implemented a script to run SBOM case matrix tests, ensuring templates are executable and logging results. - Updated .gitignore to include necessary files and directories. - Enhanced existing Windows templates to support legacy execution styles.	6 days ago
Hari Om	d159f5ad53	feat: update .gitignore to include HCL and JSON files	6 days ago
Hari Om	0721996035	feat: update changelog for 1.15.4 with deprecations and improvements for SBOM generation	6 days ago
Hari Om	00d8e27bef	feat: add local release server script and update download logic for Packer binaries	6 days ago
Hari Om	9633ab7fc8	feat: implement Packer release download and verification for SBOM generation ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	6ce4159a2a	feat: remove Syft binary handling and streamline remote scanner preparation ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	661560c15d	feat: remove cross-compilation logic for Packer binary and streamline download process ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	0c03085614	feat: restrict execute_command interpolation data to explicit scanner keys and add SHA256 checksum validation tests ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	fc5d02fdc1	feat: add support for --exclude and --scope flags in SBOM generation command ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	31af13a612	feat: enhance error handling and validation for SHA256 checksums in HCP SBOM provisioner ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	6dfe4bfdbd	feat: implement scanner command normalization and add tests for backward compatibility ... Co-authored-by: Copilot <copilot@github.com>	7 days ago
Hari Om	c4e311c8ca	docs: update hcp-sbom provisioner documentation to reflect deprecation of scanner_url and scanner_checksum options	2 weeks ago
Hari Om	4ee664a17c	Refactor FlatConfig structure and update tests ... - Changed `AutoGenerate` field in `FlatConfig` from required to optional. - Added `ScannerArgs` field to `FlatConfig`. - Updated HCL2Spec to reflect changes in `FlatConfig`. - Modified test cases in `provisioner_test.go` to accommodate changes in `AutoGenerate` and `ScannerArgs`. - Updated `ExecuteCommand` in tests to use the new command format. - Removed unused `syft_dependency.go` file as it is no longer necessary. Co-authored-by: Copilot <copilot@github.com>	2 weeks ago
Hari Om	cc75d71745	feat: add SBOM generation command and integrate Syft SDK for SBOM creation	2 weeks ago
Tanmay Jain	342fc1c554	Merge pull request #13625 from hashicorp/cut-release-1.15.3 ... version: cut release v1.15.3	3 weeks ago
Tanmay Jain	08fe3137c6	version: cut release v1.15.3 ... Co-authored-by: Copilot <copilot@github.com>	3 weeks ago
Tanmay Jain	f4116306f8	Merge pull request #13624 from hashicorp/bucket-fix ... Skips bucket update when metadata matches current state	3 weeks ago
Tanmay Jain	072dfdee9e	Skips bucket update when metadata matches current state ... Prevents unnecessary update operations by checking if the bucket's description and labels already match the requested values before issuing an update. Improves efficiency and avoids redundant API calls.	3 weeks ago
Hari	48f5e6becc	fix(deps): update github.com/Azure/go-ntlmssp to v0.1.1 (#13622)	4 weeks ago
dependabot[bot]	68a5acd3eb	build(deps): bump github.com/Azure/go-ntlmssp (#13620) ... Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) from 0.0.0-20200615164410-66371956d46c to 0.1.1. - [Release notes](https://github.com/Azure/go-ntlmssp/releases) - [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1) --- updated-dependencies: - dependency-name: github.com/Azure/go-ntlmssp dependency-version: 0.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 weeks ago
Hari	9ca74f740b	Bump version to 1.15.2 and update changelog for release (#13618) ... * Bump version to 1.15.2 and update changelog for release * Cleanup changelog by removing outdated entries and sensitive data ref… (#13619) * Cleanup changelog by removing outdated entries and sensitive data references * Clarify provisioner behavior in changelog to improve understanding of lifecycle enforcement * Update changelog to clarify provisioner lifecycle enforcement and remove outdated bug fix entry Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com>	4 weeks ago
Hari	6a8612cedd	Update error message in TestSourceNotExisting for clarity (#13616)	4 weeks ago
Tanmay Jain	627c9f1d35	Merge pull request #13615 from hashicorp/go-fix ... Update Go version and refresh dependencies	1 month ago
Tanmay Jain	c45722b902	Update Go version and refresh dependencies ... Aligns project with Go 1.25.9 and updates several dependencies to incorporate bug fixes, security enhancements, and improved compatibility across packages. Ensures continued stability and support for the latest upstream features by tracking current releases.	1 month ago
Tanmay Jain	fae5ba683c	Merge pull request #13614 from hashicorp/go-update-1.25.9 ... Bumps Go version to 1.25.9 for compatibility	1 month ago
Tanmay Jain	206063490f	Bumps Go version to 1.25.9 for compatibility	1 month ago
Hari	eee3805c06	Feature/enforced provisioner (#13591) ... * added the parser for the enforced block * Enhance enforced provisioner parsing to support HCL and JSON formats - Updated ParseProvisionerBlocks to handle both HCL and JSON syntax, including legacy JSON format. - Added comprehensive test cases for JSON provisioner parsing. - Improved ExtractBuildProvisionerHCL to merge inline commands from shell provisioners. - Enhanced logging for enforced block operations in HCP Packer. * Remove PublishEnforcedBlocks function from Bucket struct * Remove ExtractBuildProvisionerHCL function and unused imports * Reverted the version upgrade * Added the internal-sdk for the enforcedProvsioner api changes * Enhance enforced provisioner handling and error reporting - Update error handling in FetchEnforcedBlocks to return detailed errors instead of warnings. - Modify GetCoreBuildProvisionerFromBlock to accept build name for overrides. - Add tests for FetchEnforcedBlocks to ensure correct behavior and error handling. - Implement diagnostics for unsupported legacy JSON templates. * Implement enforced provisioner parsing and handling - Introduced a new package `enforcedparser` to handle parsing of enforced provisioner blocks from HCL and JSON formats. - Refactored existing code to utilize the new `ParseProvisionerBlocks` function from the `enforcedparser` package. - Updated `GetCoreBuildProvisionerFromEnforcedBlock` method to convert enforced provisioner blocks into core build provisioners. - Enhanced error handling and logging during the parsing process. - Added tests for the new parsing functionality and ensured existing tests were updated to reflect changes. - Modified `InjectEnforcedProvisioners` method in JSON registry to utilize the new parsing logic. * Add test case for -skip-enforcement flag in BuildArgs * Refactor sensitive variable handling in provisioners and add related tests * Refactor enforced provisioner handling: remove internal parser, update tests, and streamline API interactions * Enhance provisioner block parsing: add error handling for invalid combinations and expand test coverage * Remove internal SDK replacement for enforced block types in go.mod * Update dependencies in go.mod and go.sum: bump hcp-sdk-go and packer-plugin-sdk versions, adjust syft version, and update OpenTelemetry packages * Update hcp-sdk-go dependency to v0.172.0 in go.mod and go.sum * Fix formatting in TestBuildCommand_ParseArgs and add newline at end of json_enforced_test.go * Refactor testJSONRegistryWithBuilds: remove environment variable setup and streamline registry initialization * Rename injected variable for clarity in InjectEnforcedProvisioners function --------- Co-authored-by: Hari Om <58305594+Madhav008@users.noreply.github.com>	1 month ago
Hari	ea4bb3d39a	Merge pull request #13610 from hashicorp/vulnerablity-fixes ... Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.…	1 month ago
Hari Om	8a4139f5bd	Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.google.com/go/storage to v1.61.3, and aws-sdk-go-v2 packages to latest versions; includes various other dependency updates for improved stability and performance.	1 month ago
Hari	1ac5804ecb	Merge pull request #13606 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/go.opentelemetry.io/otel/sdk-1.43.0 ... build(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /packer_test/common/plugin_tester	1 month ago
Hari	df9f5b14e4	Merge pull request #13594 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/github.com/go-jose/go-jose/v4-4.1.4 ... build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /packer_test/common/plugin_tester	1 month ago
dependabot[bot]	0861349e00	build(deps): bump go.opentelemetry.io/otel/sdk ... Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.41.0 to 1.43.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.43.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	e8904e8210	build(deps): bump github.com/go-jose/go-jose/v4 ... Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Anurag Sharma	33740b7c61	cut release v1.15.1 (#13588)	2 months ago
Tanmay Jain	a664835382	Merge pull request #13582 from hashicorp/multi-line-secrets ... BUG: Scrub multiline sensitive values from build output	2 months ago
Tanmay Jain	14c7977929	Refactors sensitive multiline test to use OS-specific fixtures	2 months ago
Tanmay Jain	97952ced1f	BUG: Scrub multiline sensitive values from build output	2 months ago
Anurag Sharma	c1aac01642	bump syft to v1.42.3 (#13581) ... * bump syft to v1.42.3 fix GO-2026-4809 * bump sdk to v0.6.7 * update go version	2 months ago
Anurag Sharma	6e0db5c792	fix: exclude syft dependency import on NetBSD, OpenBSD, and Solaris (#13578) ... The syft library has a transitive dependency on containerd, which includes platform-specific code that doesn't compile on NetBSD, OpenBSD, and Solaris. This change adds build constraints to exclude the syft import on these platforms. The hcp-sbom provisioner functionality is unaffected since it downloads and executes pre-built syft binaries at runtime rather than using the Go library directly. The import exists solely for dependency tracking in license and security scanning tools.	2 months ago
Anurag Sharma	0c9d2c689c	docs: remove docs validation from packer (#13577) ... * don't update markdown files anymore This needs to be done in web-unified-docs repo * add contriubting guide for docs	2 months ago
Anurag Sharma	ea25de1315	feat: native sbom generation for hcp (#13566) ... * add configuration fields to SBOMInternalProvisioner * add os detection * move implementation to hcp-sbom * upload scanner binary and execute * use latest syft version always * reduce duplicate code * rename config fields appropriately * default to cyclonedx * add syft dependency * add support for elevated user for windows * add retry for download * add syft dependency Updates go version * optimization for windows * improve docs * update config usage rules * add unit tests * update golang version, fix linter issues * refactor and improvements * simplify few lines * refactor retry for scanner download * resolved conflicts * resolve conflicts from main * stick to syft v1 for compatibility * fix lint issues * stricter version check for syft * fix version eg * update go version to 1.25.7 * go mod changes	2 months ago
Tanmay Jain	d897421b23	Adds grouped and scheduled updates for GitHub Actions (#13575) ... Configures automated dependency updates for GitHub Actions workflows, groups all actions in a single pull request, schedules updates monthly, and ignores major version bumps to reduce noise and streamline updates.	2 months ago
Tanmay Jain	8d9a4cfdfc	Merge pull request #13565 from hashicorp/dependabot/go_modules/github.com/hashicorp/packer-plugin-sdk-0.6.6 ... build(deps): bump github.com/hashicorp/packer-plugin-sdk from 0.6.4 to 0.6.6	2 months ago
Tanmay Jain	897d4a57d7	Merge pull request #13572 from hashicorp/otel-update ... Updates OpenTelemetry dependencies to v1.41.0	2 months ago
Tanmay Jain	2f2704c84d	Updates OpenTelemetry dependencies to v1.41.0 ... Ensures compatibility with the latest OpenTelemetry libraries, potentially addressing security and stability improvements. Prepares codebase for new features and bug fixes from upstream.	2 months ago
dependabot[bot]	a13d7cedf9	build(deps): bump github.com/hashicorp/packer-plugin-sdk ... Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.6.4 to 0.6.6. - [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases) - [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.6.4...v0.6.6) --- updated-dependencies: - dependency-name: github.com/hashicorp/packer-plugin-sdk dependency-version: 0.6.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago