A Cloud Native Buildpack that contributes the Syft CLI which can be used to generate SBoM information

gcr.io/paketo-buildpacks/syft

The Paketo Syft Buildpack is a Cloud Native Buildpack that contributes the Syft CLI which can be used to generate SBoM information.

Behavior

This buildpack will participate all the following conditions are met

  • Another buildpack requires syft

The buildpack will do the following:

  • Contributes Syft to a layer marked build and cache with command on $PATH

License

This buildpack is released under version 2.0 of the Apache License.

Owner
Paketo Buildpacks
Cloud Native Buildpack implementations for popular programming language ecosystems
Paketo Buildpacks
Comments
  • Egress is over the account limit

    Egress is over the account limit

    I'm getting the following when trying to build with paketobuildpacks/builder-jammy-tiny:0.0.38

    [INFO]     [creator]     Paketo Buildpack for Syft 1.20.0
    [INFO]     [creator]       https://github.com/paketo-buildpacks/syft
    [INFO]     [creator]         Downloading from https://github.com/anchore/syft/releases/download/v0.57.0/syft_0.57.0_linux_amd64.tar.gz
    [INFO]     [creator]     unable to invoke layer creator
    [INFO]     [creator]     unable to get dependency syft
    [INFO]     [creator]     unable to download https://github.com/anchore/syft/releases/download/v0.57.0/syft_0.57.0_linux_amd64.tar.gz
    [INFO]     [creator]     could not download https://github.com/anchore/syft/releases/download/v0.57.0/syft_0.57.0_linux_amd64.tar.gz: 503
    [INFO]     [creator]     ERROR: failed to build: exit status 1
    

    After searching a bit it seems that the syft project itself has an egress limit that has been reached? Similar to this discussion: https://github.com/community/community/discussions/8535

    Do we need to provide a github api key or something to get around this?

  • Bump github.com/paketo-buildpacks/libpak from 1.55.0 to 1.56.1

    Bump github.com/paketo-buildpacks/libpak from 1.55.0 to 1.56.1

    Bumps github.com/paketo-buildpacks/libpak from 1.55.0 to 1.56.1.

    Release notes

    Sourced from github.com/paketo-buildpacks/libpak's releases.

    1.56.1

    🐞 Bug Fixes

    1.56.0

    ⭐️ Enhancements

    ⛏ Dependency Upgrades

    🚧 Tasks

    1.55.1

    🐞 Bug Fixes

    ⛏ Dependency Upgrades

    🚧 Tasks

    Commits
    • 37d737d Merge pull request #107 from paketo-buildpacks/split-build
    • d0f38ec Use build-specific settings for effect across windows and unix
    • 6b070f4 Merge pull request #106 from paketo-buildpacks/missing-mock
    • ca6b663 Adds mock that was missing and not checked in
    • 5cea674 Merge pull request #105 from paketo-buildpacks/sbom-deps
    • f3f1b0b Adds support for DependencyLayerContributor and HelperLayerContributor to gen...
    • 6006d2f Merge pull request #104 from paketo-buildpacks/syft-support
    • 2576e59 Adds convenience methods for using the Syft CLI to create SBoM information
    • 2a99c61 Merge pull request #103 from paketo-buildpacks/update/pipeline
    • 8ab41c0 Bump pipeline from 1.14.0 to 1.15.1
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/onsi/gomega from 1.16.0 to 1.17.0

    Bump github.com/onsi/gomega from 1.16.0 to 1.17.0

    Bumps github.com/onsi/gomega from 1.16.0 to 1.17.0.

    Release notes

    Sourced from github.com/onsi/gomega's releases.

    v1.17.0

    1.17.0

    Features

    • Add HaveField matcher [3a26311]
    • add Error() assertions on the final error value of multi-return values (#480) [2f96943]
    • separate out offsets and timeouts (#478) [18a4723]
    • fix transformation error reporting (#479) [e001fab]
    • allow transform functions to report errors (#472) [bf93408]

    Fixes

    Stop using deprecated ioutil package (#467) [07f405d]

    Changelog

    Sourced from github.com/onsi/gomega's changelog.

    1.17.0

    Features

    • Add HaveField matcher [3a26311]
    • add Error() assertions on the final error value of multi-return values (#480) [2f96943]
    • separate out offsets and timeouts (#478) [18a4723]
    • fix transformation error reporting (#479) [e001fab]
    • allow transform functions to report errors (#472) [bf93408]

    Fixes

    Stop using deprecated ioutil package (#467) [07f405d]

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/buildpacks/libcnb from 1.24.0 to 1.25.1

    Bump github.com/buildpacks/libcnb from 1.24.0 to 1.25.1

    Bumps github.com/buildpacks/libcnb from 1.24.0 to 1.25.1.

    Release notes

    Sourced from github.com/buildpacks/libcnb's releases.

    1.25.1

    ⭐️ Enhancements

    1.25.0

    ⭐️ Enhancements

    🐞 Bug Fixes

    ⛏ Dependency Upgrades

    🚧 Tasks

    Commits
    • a33b367 Merge pull request #98 from buildpacks/polish-pr-97
    • 6d86013 Make validate SBOM private
    • 66f3e9f Additional updates for SBOM Support
    • 6aa81e5 Merge pull request #95 from dmikusa-pivotal/bom-rfc-95
    • c06fd64 Adds a convenience method for getting the build, launch and layer BOM file paths
    • 50e1696 Merge pull request #92 from buildpacks/update/pipeline
    • 9cb9a20 Bump pipeline from 1.13.0 to 1.15.1
    • 0376b8a Merge pull request #94 from dmikusa-pivotal/api-07
    • 9af239f Updates libcnb to support buildpacks API 0.7
    • 7040378 Merge pull request #91 from buildpacks/update/pipeline
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/onsi/gomega from 1.23.0 to 1.24.0

    Bump github.com/onsi/gomega from 1.23.0 to 1.24.0

    Bumps github.com/onsi/gomega from 1.23.0 to 1.24.0.

    Release notes

    Sourced from github.com/onsi/gomega's releases.

    v1.24.0

    1.24.0

    Features

    Introducting gcustom - a convenient mechanism for building custom matchers.

    This is an RC release for gcustom. The external API may be tweaked in response to feedback however it is expected to remain mostly stable.

    Maintenance

    • Update BeComparableTo documentation [756eaa0]
    Changelog

    Sourced from github.com/onsi/gomega's changelog.

    1.24.0

    Features

    Introducting gcustom - a convenient mechanism for building custom matchers.

    This is an RC release for gcustom. The external API may be tweaked in response to feedback however it is expected to remain mostly stable.

    Maintenance

    • Update BeComparableTo documentation [756eaa0]
    Commits
    • ed1156b v1.24.0
    • 756eaa0 Update BeComparableTo documentation
    • 6015576 finish documenting gcustom
    • 0cfc53b godoc for gcustom
    • 6a2e51e First pass at gcustom: a convenience package for making custom matchers. Doc...
    • See full diff in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/onsi/gomega from 1.21.1 to 1.22.1

    Bump github.com/onsi/gomega from 1.21.1 to 1.22.1

    Bumps github.com/onsi/gomega from 1.21.1 to 1.22.1.

    Release notes

    Sourced from github.com/onsi/gomega's releases.

    v1.22.1

    1.22.1

    Fixes

    • When passed a context and no explicit timeout, Eventually will only timeout when the context is cancelled [e5105cf]
    • Allow StopTrying() to be wrapped [bf3cba9]

    Maintenance

    • bump to ginkgo v2.3.0 [c5d5c39]

    v1.22.0

    1.22.0

    Features

    Several improvements have been made to Eventually and Consistently in this and the most recent releases:

    • Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
    • Eventually and Consistently that are passed a SpecContext can provide reports when an interrupt occurs [0d063c9]
    • Eventually/Consistently will forward an attached context to functions that ask for one [e2091c5]
    • Eventually/Consistently supports passing arguments to functions via WithArguments() [a2dc7c3]
    • Eventually and Consistently can now be stopped early with StopTrying(message) and StopTrying(message).Now() [52976bb]

    These improvements are all documented in Gomega's docs

    Changelog

    Sourced from github.com/onsi/gomega's changelog.

    1.22.1

    Fixes

    • When passed a context and no explicit timeout, Eventually will only timeout when the context is cancelled [e5105cf]
    • Allow StopTrying() to be wrapped [bf3cba9]

    Maintenance

    • bump to ginkgo v2.3.0 [c5d5c39]

    1.22.0

    Features

    Several improvements have been made to Eventually and Consistently in this and the most recent releases:

    • Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
    • Eventually and Consistently that are passed a SpecContext can provide reports when an interrupt occurs [0d063c9]
    • Eventually/Consistently will forward an attached context to functions that ask for one [e2091c5]
    • Eventually/Consistently supports passing arguments to functions via WithArguments() [a2dc7c3]
    • Eventually and Consistently can now be stopped early with StopTrying(message) and StopTrying(message).Now() [52976bb]

    These improvements are all documented in Gomega's docs

    Fixes

    Maintenance

    Commits
    • 40d0cc9 v1.22.1
    • e5105cf When passed a context and no explicit timeout, Eventually will only timeout w...
    • bf3cba9 Allow StopTrying() to be wrapped
    • c5d5c39 bump to ginkgo v2.3.0
    • 8916066 v1.22.0
    • aeab53a fix go vet issue
    • 52976bb Eventually an Consistently can now be stopped early with StopTrying(message) ...
    • a2dc7c3 Gomega supports passing arguments to functions via WithArguments()
    • e2091c5 Eventually/Consistently will forward an attached context to functions that as...
    • See full diff in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/onsi/gomega from 1.21.1 to 1.22.0

    Bump github.com/onsi/gomega from 1.21.1 to 1.22.0

    Bumps github.com/onsi/gomega from 1.21.1 to 1.22.0.

    Release notes

    Sourced from github.com/onsi/gomega's releases.

    v1.22.0

    1.22.0

    Features

    Several improvements have been made to Eventually and Consistently in this and the most recent releases:

    • Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
    • Eventually and Consistently that are passed a SpecContext can provide reports when an interrupt occurs [0d063c9]
    • Eventually/Consistently will forward an attached context to functions that ask for one [e2091c5]
    • Eventually/Consistently supports passing arguments to functions via WithArguments() [a2dc7c3]
    • Eventually and Consistently can now be stopped early with StopTrying(message) and StopTrying(message).Now() [52976bb]

    These improvements are all documented in Gomega's docs

    Changelog

    Sourced from github.com/onsi/gomega's changelog.

    1.22.0

    Features

    Several improvements have been made to Eventually and Consistently in this and the most recent releases:

    • Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
    • Eventually and Consistently that are passed a SpecContext can provide reports when an interrupt occurs [0d063c9]
    • Eventually/Consistently will forward an attached context to functions that ask for one [e2091c5]
    • Eventually/Consistently supports passing arguments to functions via WithArguments() [a2dc7c3]
    • Eventually and Consistently can now be stopped early with StopTrying(message) and StopTrying(message).Now() [52976bb]

    These improvements are all documented in Gomega's docs

    Fixes

    Maintenance

    Commits
    • 8916066 v1.22.0
    • aeab53a fix go vet issue
    • 52976bb Eventually an Consistently can now be stopped early with StopTrying(message) ...
    • a2dc7c3 Gomega supports passing arguments to functions via WithArguments()
    • e2091c5 Eventually/Consistently will forward an attached context to functions that as...
    • See full diff in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/onsi/gomega from 1.20.2 to 1.21.0

    Bump github.com/onsi/gomega from 1.20.2 to 1.21.0

    Bumps github.com/onsi/gomega from 1.20.2 to 1.21.0.

    Release notes

    Sourced from github.com/onsi/gomega's releases.

    v1.21.0

    1.21.0

    Features

    • Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
    • Introduces Eventually.Within.ProbeEvery with tests and documentation (#591) [f633800]
    • New BeKeyOf matcher with documentation and unit tests (#590) [fb586b3]

    Fixes

    • Cover the entire gmeasure suite with leak detection [8c54344]
    • Fix gmeasure leak [119d4ce]
    • Ignore new Ginkgo ProgressSignal goroutine in gleak [ba548e2]

    Maintenance

    • Fixes crashes on newer Ruby 3 installations by upgrading github-pages gem dependency (#596) [12469a0]
    Changelog

    Sourced from github.com/onsi/gomega's changelog.

    1.21.0

    Features

    • Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
    • Introduces Eventually.Within.ProbeEvery with tests and documentation (#591) [f633800]
    • New BeKeyOf matcher with documentation and unit tests (#590) [fb586b3]

    Fixes

    • Cover the entire gmeasure suite with leak detection [8c54344]
    • Fix gmeasure leak [119d4ce]
    • Ignore new Ginkgo ProgressSignal goroutine in gleak [ba548e2]

    Maintenance

    • Fixes crashes on newer Ruby 3 installations by upgrading github-pages gem dependency (#596) [12469a0]
    Commits
    • 2ba5763 v1.21.0
    • 65c01bc Eventually and Consistently can take a context.Context
    • 12469a0 fixes crashes on newer Ruby 3 installations by upgrading github-pages gem dep...
    • b8636ad documentation updates for BeKeyOf and well-known non-leaky goroutines (#592)
    • f633800 introduces Eventually.Within.ProbeEvery with tests and documentation (#591)
    • fb586b3 new BeKeyOf matcher with documentation and unit tests (#590)
    • 647a36b welp; remove local Ginkgo replace directive in go.mod
    • 8c54344 cover the entire gmeasure suite with leak detection
    • 119d4ce fix gmeasure leak
    • ba548e2 ignore new Ginkgo ProgressSignal goroutine in gleak
    • See full diff in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/onsi/gomega from 1.20.0 to 1.20.1

    Bump github.com/onsi/gomega from 1.20.0 to 1.20.1

    Bumps github.com/onsi/gomega from 1.20.0 to 1.20.1.

    Release notes

    Sourced from github.com/onsi/gomega's releases.

    v1.20.1

    1.20.1

    Fixes

    • fix false positive gleaks when using ginkgo -p (#577) [cb46517]
    • Fix typos in gomega_dsl.go (#569) [5f71ed2]
    • don't panic on Eventually(nil), fixing #555 (#567) [9d1186f]
    • vet optional description args in assertions, fixing #560 (#566) [8e37808]

    Maintenance

    • test: add new Go 1.19 to test matrix (#571) [40d7efe]
    • Bump tzinfo from 1.2.9 to 1.2.10 in /docs (#564) [5f26371]
    Changelog

    Sourced from github.com/onsi/gomega's changelog.

    1.20.1

    Fixes

    • fix false positive gleaks when using ginkgo -p (#577) [cb46517]
    • Fix typos in gomega_dsl.go (#569) [5f71ed2]
    • don't panic on Eventually(nil), fixing #555 (#567) [9d1186f]
    • vet optional description args in assertions, fixing #560 (#566) [8e37808]

    Maintenance

    • test: add new Go 1.19 to test matrix (#571) [40d7efe]
    • Bump tzinfo from 1.2.9 to 1.2.10 in /docs (#564) [5f26371]
    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/paketo-buildpacks/libpak from 1.57.1 to 1.58.0

    Bump github.com/paketo-buildpacks/libpak from 1.57.1 to 1.58.0

    Bumps github.com/paketo-buildpacks/libpak from 1.57.1 to 1.58.0.

    Release notes

    Sourced from github.com/paketo-buildpacks/libpak's releases.

    1.58.0

    ⭐️ Enhancements

    🐞 Bug Fixes

    ⛏ Dependency Upgrades

    🚧 Tasks

    Commits
    • dd20cca Merge pull request #124 from paketo-buildpacks/bom-label
    • b6c6002 Allow disabling the BOM label
    • 16b3969 Merge pull request #123 from paketo-buildpacks/syft-imprv
    • 4b68a8f Merge pull request #122 from paketo-buildpacks/lifecycle_0_13_3
    • fb30bc7 Use syft's multiple output formats support
    • 87c761f Merge branch 'main' into lifecycle_0_13_3
    • 2b25eae Merge pull request #121 from paketo-buildpacks/dependabot/go_modules/github.c...
    • 7a61009 Bump github.com/buildpacks/libcnb from 1.25.4 to 1.25.5
    • 7cb9c25 Removes logic to restrict output of deprecated label-based BOM entries
    • 430828d Merge pull request #120 from paketo-buildpacks/dependabot/go_modules/github.c...
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • Bump github.com/paketo-buildpacks/libpak from 1.56.2 to 1.57.0

    Bump github.com/paketo-buildpacks/libpak from 1.56.2 to 1.57.0

    Bumps github.com/paketo-buildpacks/libpak from 1.56.2 to 1.57.0.

    Release notes

    Sourced from github.com/paketo-buildpacks/libpak's releases.

    1.57.0

    ⭐️ Enhancements

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Related tags
A Cloud Native Buildpack for Go

The Go Paketo Buildpack provides a set of collaborating buildpacks that enable the building of a Go-based application.

Dec 14, 2022
A Cloud Native Buildpack that provides the Open Liberty runtime

gcr.io/paketo-buildpacks/open-liberty The Paketo Open Liberty Buildpack is a Cloud Native Buildpack that contributes Open Liberty for Java EE support.

Dec 21, 2022
Cloudpods is a cloud-native open source unified multi/hybrid-cloud platform developed with Golang
Cloudpods is a cloud-native open source unified multi/hybrid-cloud platform developed with Golang

Cloudpods is a cloud-native open source unified multi/hybrid-cloud platform developed with Golang, i.e. Cloudpods is a cloud on clouds. Cloudpods is able to manage not only on-premise KVM/baremetals, but also resources from many cloud accounts across many cloud providers. It hides the differences of underlying cloud providers and exposes one set of APIs that allow programatically interacting with these many clouds.

Jan 11, 2022
Cloud-native way to provide elastic Jupyter Notebook services on Kubernetes
Cloud-native way to provide elastic Jupyter Notebook services on Kubernetes

elastic-jupyter-operator: Elastic Jupyter on Kubernetes Kubernetes 原生的弹性 Jupyter 即服务 介绍 为用户按需提供弹性的 Jupyter Notebook 服务。elastic-jupyter-operator 提供以下特性

Dec 29, 2022
cloud-native local storage management system
cloud-native local storage management system

Open-Local是由多个组件构成的本地磁盘管理系统,目标是解决当前 Kubernetes 本地存储能力缺失问题。通过Open-Local,使用本地存储会像集中式存储一样简单。

Dec 30, 2022
Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.
Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

Dec 30, 2022
Nocalhost is Cloud Native Dev Environment.
Nocalhost is Cloud Native Dev Environment.

Most productive way to build cloud-native applications. Nocalhost The term Nocalhost originates from No Local, which is a cloud-native development too

Dec 29, 2022
cloneMAP: cloud-native Multi-Agent Platform
cloneMAP: cloud-native Multi-Agent Platform

cloneMAP: cloud-native Multi-Agent Platform cloneMAP is a multi-agent platform (MAP) that is designed to run in a cloud environment based on Kubernete

Nov 18, 2022
TurtleDex is a decentralized cloud storage platform that radically alters the landscape of cloud storage.

TurtleDex is a decentralized cloud storage platform that radically alters the landscape of cloud storage. By leveraging smart contracts, client-side e

Feb 17, 2021
Contentrouter - Protect static content via Firebase Hosting with Cloud Run and Google Cloud Storage

contentrouter A Cloud Run service to gate static content stored in Google Cloud

Jan 2, 2022
Cloud cost estimates for Terraform in your CLI and pull requests 💰📉
Cloud cost estimates for Terraform in your CLI and pull requests 💰📉

Infracost shows cloud cost estimates for Terraform projects. It helps developers, devops and others to quickly see the cost breakdown and compare different options upfront.

Jan 2, 2023
A Cloud Foundry cli plugin that offers a faster and customizable alternative for cf apps

Panzer cf cli plugin A plugin for faster interaction (less API calls) with Cloud Foundry, and choose the columns you want in your output. Instead of "

Feb 14, 2022
An edge-native container management system for edge computing
An edge-native container management system for edge computing

SuperEdge is an open source container management system for edge computing to manage compute resources and container applications in multiple edge regions. These resources and applications, in the current approach, are managed as one single Kubernetes cluster. A native Kubernetes cluster can be easily converted to a SuperEdge cluster.

Dec 29, 2022
Microshift is a research project that is exploring how OpenShift1 Kubernetes can be optimized for small form factor and edge computing.

Microshift is a research project that is exploring how OpenShift1 Kubernetes can be optimized for small form factor and edge computing.

Nov 1, 2021
Generate a basic IAM policy from AWS client-side monitoring (CSM)
Generate a basic IAM policy from AWS client-side monitoring (CSM)

iamlive Generate a basic IAM policy from AWS client-side monitoring (CSM) Installation Pre-built binaries Pre-built binaries for Windows, macOS and Li

Jan 8, 2023
Tool to generate certificate images easily.
Tool to generate certificate images easily.

Arthur A program to generate certificates with the same appearance but with different data. Thanks to foggleman/gg rendering 2D graphics library as ma

Jun 17, 2022
Lightweight Cloud Instance Contextualizer
Lightweight Cloud Instance Contextualizer

Flamingo Flamingo is a lightweight contextualization tool that aims to handle initialization of cloud instances. It is meant to be a replacement for c

Jun 18, 2022
Go language interface to Swift / Openstack Object Storage / Rackspace cloud files (golang)

Swift This package provides an easy to use library for interfacing with Swift / Openstack Object Storage / Rackspace cloud files from the Go Language

Nov 9, 2022
The extensible SQL interface to your favorite cloud APIs.
The extensible SQL interface to your favorite cloud APIs.

The extensible SQL interface to your favorite cloud APIs.

Jan 4, 2023