Skip to content

Improve Grype Updater, check builds with CI

Compare
Choose a tag to compare
@hxtk hxtk released this 31 Dec 06:38
· 91 commits to main since this release

Change log

  • Grype Updater is now capable of recognizing many more forms of the http_file load statement when generating macros.
  • A CI system now validates compatibility with previous minor and patch releases, as well as ensuring markdown documentation
    is always up-to-date as generated from source.
  • A periodic job now updates the Grype Database to serve as an example of the practice.
  • The README now points to the above example and describes its purpose.
  • The README now explicates the semantics of release version numbers.

WORKSPACE Configuration

http_archive(
    name = "com_github_hxtk_rules_anchore",
    sha256 = "81b613f9ac75e85c71c4e07d2787f3bda62ca34039b0b9d4c1373adb898532fb",
    strip_prefix = "rules_anchore-2.1.3",
    urls = ["https://github.com/hxtk/rules_anchore/archive/refs/tags/v2.1.3.zip"],
)

load("@com_github_hxtk_rules_anchore//:deps.bzl", "anchore_deps")

anchore_deps()

load("@com_github_hxtk_rules_anchore//:extra_deps.bzl", "anchore_extra_deps")

# By default, this method configures a Go toolchain. If you have already
# configured a Go toolchain in your WORKSPACE, pass `configure_go=False`.
anchore_extra_deps()