STRLCPY/syft

chore(deps): bump github.com/spdx/tools-golang from 0.5.0 to 0.5.1 (#1850)

* chore(deps): bump github.com/spdx/tools-golang from 0.5.0 to 0.5.1

Bumps [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/spdx/tools-golang/releases)
- [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md)
- [Commits](https://github.com/spdx/tools-golang/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: github.com/spdx/tools-golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: update fixtures for spdx with new library changes

Signed-off-by: Christopher Phillips <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christopher Phillips <[email protected]>

dependabot[bot] committed with GitHub 11 months ago

c560ffd8

1 parent 7d1b292a

Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)

Total 6 files Show one by one

■ ■ ■ ■ ■ ■

go.mod

		skipped 30 lines
31	31		github.com/scylladb/go-set v1.0.3-0.20200225121959-cc7b2070d91e
32	32		github.com/sergi/go-diff v1.3.1
33	33		github.com/sirupsen/logrus v1.9.3
34		-	github.com/spdx/tools-golang v0.5.0
	34	+	github.com/spdx/tools-golang v0.5.1
35	35		github.com/spf13/afero v1.9.5
36	36		github.com/spf13/cobra v1.7.0
37	37		github.com/spf13/pflag v1.0.5
		skipped 142 lines

■ ■ ■ ■ ■ ■

go.sum

		skipped 558 lines
559	559		github.com/skeema/knownhosts v1.1.1/go.mod h1:g4fPeYpque7P0xefxtGzV81ihjC8sX2IqpAoNkjxbMo=
560	560		github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
561	561		github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb/go.mod h1:uKWaldnbMnjsSAXRurWqqrdyZen1R7kxl8TkmWk2OyM=
562		-	github.com/spdx/tools-golang v0.5.0 h1:/fqihV2Jna7fmow65dHpgKNsilgLK7ICpd2tkCnPEyY=
563		-	github.com/spdx/tools-golang v0.5.0/go.mod h1:kkGlrSXXfHwuSzHQZJRV3aKu9ZXCq/MSf2+xyiJH1lM=
	562	+	github.com/spdx/tools-golang v0.5.1 h1:fJg3SVOGG+eIva9ZUBm/hvyA7PIPVFjRxUKe6fdAgwE=
	563	+	github.com/spdx/tools-golang v0.5.1/go.mod h1:/DRDQuBfB37HctM29YtrX1v+bXiVmT2OpQDalRmX9aU=
564	564		github.com/spf13/afero v1.3.3/go.mod h1:5KUK8ByomD5Ti5Artl0RtHeI5pTF7MIDuXL3yY520V4=
565	565		github.com/spf13/afero v1.6.0/go.mod h1:Ai8FlHk4v/PARR026UzYexafAt9roJ7LcLMAmO6Z93I=
566	566		github.com/spf13/afero v1.9.5 h1:stMpOSZFs//0Lv29HduCmli3GUfpFoF3Y1Q/aXj/wVM=
		skipped 27 lines
594	594		github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
595	595		github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
596	596		github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
597		-	github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
598	597		github.com/stretchr/testify v1.8.3/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
599	598		github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
600	599		github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
		skipped 593 lines

■ ■ ■ ■ ■ ■

syft/formats/spdxjson/test-fixtures/snapshot/TestSPDXJSONDirectoryEncoder.golden

		skipped 2 lines
3	3		"dataLicense": "CC0-1.0",
4	4		"SPDXID": "SPDXRef-DOCUMENT",
5	5		"name": "/some/path",
6		-	"documentNamespace": "https://anchore.com/syft/dir/some/path-5ea40e59-d91a-4682-a016-da45ddd540e4",
	6	+	"documentNamespace": "https://anchore.com/syft/dir/some/path-303fccb4-22d1-4039-9061-553bc875f086",
7	7		"creationInfo": {
8	8		"licenseListVersion": "3.20",
9	9		"creators": [
10	10		"Organization: Anchore, Inc",
11	11		"Tool: syft-v0.42.0-bogus"
12	12		],
13		-	"created": "2023-05-09T17:11:26Z"
	13	+	"created": "2023-06-05T18:49:13Z"
14	14		},
15	15		"packages": [
16	16		{
		skipped 1 lines
18	18		"SPDXID": "SPDXRef-Package-python-package-1-9265397e5e15168a",
19	19		"versionInfo": "1.0.1",
20	20		"downloadLocation": "NOASSERTION",
	21	+	"filesAnalyzed": false,
21	22		"sourceInfo": "acquired package info from installed python package manifest file: /some/path/pkg1",
22	23		"licenseConcluded": "NOASSERTION",
23	24		"licenseDeclared": "MIT",
		skipped 16 lines
40	41		"SPDXID": "SPDXRef-Package-deb-package-2-db4abfe497c180d3",
41	42		"versionInfo": "2.0.1",
42	43		"downloadLocation": "NOASSERTION",
	44	+	"filesAnalyzed": false,
43	45		"sourceInfo": "acquired package info from DPKG DB: /some/path/pkg1",
44	46		"licenseConcluded": "NOASSERTION",
45	47		"licenseDeclared": "NOASSERTION",
		skipped 24 lines

■ ■ ■ ■ ■ ■

syft/formats/spdxjson/test-fixtures/snapshot/TestSPDXJSONImageEncoder.golden

		skipped 2 lines
3	3		"dataLicense": "CC0-1.0",
4	4		"SPDXID": "SPDXRef-DOCUMENT",
5	5		"name": "user-image-input",
6		-	"documentNamespace": "https://anchore.com/syft/image/user-image-input-2cc737fb-af51-4e4b-9395-cceabcc305eb",
	6	+	"documentNamespace": "https://anchore.com/syft/image/user-image-input-5b9aac79-334c-4d6a-b2e6-95a819c1d45a",
7	7		"creationInfo": {
8	8		"licenseListVersion": "3.20",
9	9		"creators": [
10	10		"Organization: Anchore, Inc",
11	11		"Tool: syft-v0.42.0-bogus"
12	12		],
13		-	"created": "2023-05-09T17:11:26Z"
	13	+	"created": "2023-06-05T18:49:14Z"
14	14		},
15	15		"packages": [
16	16		{
		skipped 1 lines
18	18		"SPDXID": "SPDXRef-Package-python-package-1-125840abc1c66dd7",
19	19		"versionInfo": "1.0.1",
20	20		"downloadLocation": "NOASSERTION",
	21	+	"filesAnalyzed": false,
21	22		"sourceInfo": "acquired package info from installed python package manifest file: /somefile-1.txt",
22	23		"licenseConcluded": "NOASSERTION",
23	24		"licenseDeclared": "MIT",
		skipped 16 lines
40	41		"SPDXID": "SPDXRef-Package-deb-package-2-958443e2d9304af4",
41	42		"versionInfo": "2.0.1",
42	43		"downloadLocation": "NOASSERTION",
	44	+	"filesAnalyzed": false,
43	45		"sourceInfo": "acquired package info from DPKG DB: /somefile-2.txt",
44	46		"licenseConcluded": "NOASSERTION",
45	47		"licenseDeclared": "NOASSERTION",
		skipped 24 lines

■ ■ ■ ■ ■ ■

syft/formats/spdxjson/test-fixtures/snapshot/TestSPDXRelationshipOrder.golden

		skipped 2 lines
3	3		"dataLicense": "CC0-1.0",
4	4		"SPDXID": "SPDXRef-DOCUMENT",
5	5		"name": "user-image-input",
6		-	"documentNamespace": "https://anchore.com/syft/image/user-image-input-1de3ac0e-5829-4294-9198-8d8fcdb5dd51",
	6	+	"documentNamespace": "https://anchore.com/syft/image/user-image-input-2a1392ab-7eb5-4f2a-86f6-777aef3232e1",
7	7		"creationInfo": {
8	8		"licenseListVersion": "3.20",
9	9		"creators": [
10	10		"Organization: Anchore, Inc",
11	11		"Tool: syft-v0.42.0-bogus"
12	12		],
13		-	"created": "2023-05-09T17:11:26Z"
	13	+	"created": "2023-06-05T18:49:14Z"
14	14		},
15	15		"packages": [
16	16		{
		skipped 1 lines
18	18		"SPDXID": "SPDXRef-Package-python-package-1-125840abc1c66dd7",
19	19		"versionInfo": "1.0.1",
20	20		"downloadLocation": "NOASSERTION",
	21	+	"filesAnalyzed": false,
21	22		"sourceInfo": "acquired package info from installed python package manifest file: /somefile-1.txt",
22	23		"licenseConcluded": "NOASSERTION",
23	24		"licenseDeclared": "MIT",
		skipped 16 lines
40	41		"SPDXID": "SPDXRef-Package-deb-package-2-958443e2d9304af4",
41	42		"versionInfo": "2.0.1",
42	43		"downloadLocation": "NOASSERTION",
	44	+	"filesAnalyzed": false,
43	45		"sourceInfo": "acquired package info from DPKG DB: /somefile-2.txt",
44	46		"licenseConcluded": "NOASSERTION",
45	47		"licenseDeclared": "NOASSERTION",
		skipped 146 lines

syft/formats/spdxjson/test-fixtures/snapshot/stereoscope-fixture-image-simple.golden

Binary file.