microsoft / component-detection

Scans your project to determine what components you use
MIT License
412 stars 87 forks source link

Bump Syft from `0.74.0` to `0.100.0` #960

Closed JamieMagee closed 7 months ago

JamieMagee commented 7 months ago

It's been a while since this has been updated. Unfortunately, I no longer have access to the Azure Container Registry, so someone from the team will need to manually run:

az login
az acr login --name governancecontainerregistry
skopeo copy --all docker://docker.io/anchore/syft:v0.100.0 docker://governancecontainerregistry.azurecr.io/syft:v0.100.0

The full instructions are available here

github-actions[bot] commented 7 months ago

👋 Hi! It looks like you modified some files in the Detectors folder. You may need to bump the detector versions if any of the following scenarios apply:

If none of the above scenarios apply, feel free to ignore this comment 🙂

codecov[bot] commented 7 months ago

Codecov Report

Attention: 73 lines in your changes are missing coverage. Please review.

Comparison is base (5b44b12) 74.1% compared to head (2617eaa) 75.3%.

Files Patch % Lines
...tDetection.Detectors/linux/Contracts/SyftOutput.cs 3.9% 73 Missing :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #960 +/- ## ======================================= + Coverage 74.1% 75.3% +1.1% ======================================= Files 235 235 Lines 10056 10098 +42 Branches 986 986 ======================================= + Hits 7455 7605 +150 + Misses 2334 2223 -111 - Partials 267 270 +3 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.