[VULN-59766] Remove direct dependency on `github.com/docker/docker` v28 - #31

Closed

L3n41c wants to merge 66 commits into

mainfrom

lenaic/VULN-59766-remove-docker-docker-v28-dependency

Commits on Mar 21, 2025

Remove unneeded packages
0intro
committed
1378342
Disable all config analyzers
0intro
committed
8f46b76
Remove dependency on k8s.io/api
0intro
committed
f7d4dc1
Remove dependency on github.com/hashicorp/go-getter
0intro
committed
044a7e1
feat: allow restricting filesystem walk to specific folders

lebauce
and
0intro
committed
27e5ec2
Ignore permission errors when walking in dpkg post analyzer

lebauce
authored and
0intro
committed
5db8e07
dpkg: split info and status walk and parsing

paulcacheux
authored and
0intro
committed
89cca40
feat: Add binary version parsing for nodejs, php and python
0intro
committed
eb62546
executable: remove digest calculations from executable analyzer
0intro
committed
886c825
perf(analyzers): various low hanging fruits to optimize profiler methods

jinroh
authored and
0intro
committed
ef6cb52
pkg/fanal/walker: add AllFile option to Walker
0intro
committed
2ea4154

Commits on Mar 24, 2025

pkg/fanal/artifact/container: implement container artifact
0intro
committed
3a81ce9
Use index 0 when we fail to guess the base image index

lebauce
authored and
0intro
committed
7a2e991
add support for offline jar/javadb mode

paulcacheux
authored and
0intro
committed
ba8a175
remove standalone and client/server scanners

paulcacheux
authored and
0intro
committed
fc94683
remove SBOM analyzer

paulcacheux
authored and
0intro
committed
18623f0
remove unpackaged

paulcacheux
authored and
0intro
committed
d99b035
remove remote sbom

paulcacheux
authored and
0intro
committed
c488113
force schema version

paulcacheux
authored and
0intro
committed
af13d97
move `GuessBaseImageIndex` to reduce dependencies

paulcacheux
authored and
0intro
committed
4a8570e
remove buildinfo analyzer

paulcacheux
authored and
0intro
committed
815ef59

Commits on Mar 25, 2025

Re-use existing `ErrorCallback` WalkOption in post-analysis fs walks

YoannGh
authored and
paulcacheux
committed
f0217e3
Don't trigger walk error on non-existing directories in dpkg analyzer

0intro
authored and
paulcacheux
committed
359ffe3
feat(fs): optimize scanning performance by direct file access for known paths (#8525)

knqyf263
authored and
paulcacheux
committed
58d200b
fix(fs): check postAnalyzers for StaticPaths (#8543)

DmitriyLewen
authored and
paulcacheux
committed
8e8e9d7
go.mod: use last commit of github.com/knqyf263/go-rpmdb

0intro
authored and
paulcacheux
committed
17222a5
go.mod: use Go 1.23

0intro
authored and
paulcacheux
committed
9076e2a
disable git hash query
paulcacheux
committed
5ffff1b
remove `github.com/xeipuuv/gojsonschema`
paulcacheux
committed
09723d9
downgrade github.com/open-policy-agent/opa
paulcacheux
committed
c4b7a5f
remove secret analyzer
paulcacheux
committed
bcaabb1
remove more analyzers (config and imgconf)
paulcacheux
committed
af991af

Commits on Mar 26, 2025

pkg/fanal/artifact/image: disable checkImageSize
0intro
committed
263edee
remove javadb oci download
paulcacheux
committed
1432642

Commits on Mar 27, 2025

Commits on Mar 28, 2025

pkg/dependency/parser/executable/java: remove misleading comment
0intro
committed
bd697b3
remove `rsc.io/binaryregexp` dependency
paulcacheux
committed
40561b7

Commits on May 26, 2025

Commits on Jun 5, 2025

pkg/fanal/artifact/container: don't modify SkipFiles, SkipDirs and OnlyDirs
0intro
committed
c6a94a4

Commits on Jun 23, 2025

feat: pass context to WalkDirFunc
0intro
committed
37a8c6d
feat: handle cancellation in WalkDir
0intro
committed
fd5505b
feat: return partial results on error in language analyzers
0intro
committed
f3712b5
feat: return partial result on timeout
0intro
committed
e8702a2
feat: implement timeout per PostAnalyzer
0intro
committed
4c570d4
feat: merge result only if the PostAnalyzer completed successfully
0intro
committed
409b579
feat: implement timeout on analyzeWithRootDir
0intro
committed
49b2de2

Commits on Jul 9, 2025

fix indentation of container AnalysisOptions structure
0intro
committed
d64bd96
feat: implement OfflineJar artifact option
0intro
committed
e788758

Commits on Jul 15, 2025

feat: add support for RHEL 9 for Edge in RPM analyzer
0intro
committed
0ecdc33

Commits on Jul 22, 2025

do not crash when no partial result on deadline expired error
paulcacheux
committed
c6ac58f

Commits on Oct 17, 2025

feat: implement FileChecksumJar artifact option
0intro
committed
60ceeae

Commits on Oct 29, 2025

fix(redhat): save contentSets for OS packages in fs/vm modes (#8820)

DmitriyLewen
authored and
0intro
committed
4ca5284
fix(sbom): add `buildInfo` info as properties (#9683)

DmitriyLewen
authored and
0intro
committed
81178fc
add buildinfo analyzer
0intro
committed
916430a

Commits on Oct 30, 2025

pkg/fanal/artifact/container: handle BuildInfo in container artifact
0intro
committed
fd4d97d

Commits on Oct 31, 2025

cached_file: pre-alloc file buffer
jinroh
committed
71c4dd0
container: takes a list of repository tags for container artifact
jinroh
committed
5475cb2

Commits on Nov 4, 2025

Commits on Nov 6, 2025

cached_file: fix bad buffer pointer
jinroh
committed
c0a6cb9
fix: pass OfflineJar and FileChecksumJar in image artifact options
paulcacheux
committed
aedf523

Commits on Dec 16, 2025

Revert "add buildinfo analyzer"
paulcacheux
committed
81422df

Commits on Apr 7, 2026

[VULN-59766] chore(deps): migrate from github.com/docker/docker to github.com/moby/moby

L3n41c
and
claude
committed
dce2871
[VULN-59766] fix: handle ENODATA when reading overlay xattrs via sysx

L3n41c
and
claude
committed
6cf8ddc