- Oct 26, 2023
-
-
Jamie Tanna authored
As a means to allow us to centrally control the way that we open the database, as well as allowing us to modify the querystring in a central place in the future, or apply further checks.
-
Jamie Tanna authored
To allow for easier debugging when we see errors or warnings, we can pre-populate the version of `dmd` into the output.
-
Jamie Tanna authored
As it is the CLI version that was used to create the database, not the currently running CLI version.
-
- Oct 25, 2023
-
-
Jamie Tanna authored
Add table for managing "sensitive" package names Closes #189 See merge request !133
-
Jamie Tanna authored
To make it clearer to the user that they are (not) using sensitive packages, we can add a log message when about to process the data.
-
Jamie Tanna authored
And link it through from the CLIs that mention this may be leaking data.
-
Jamie Tanna authored
As noted in #189, there's no way right now to avoid leaking internal package names to the public Internet when generating advisories or missing data. Right now, the solution is to just deal with it, which isn't ideal. Instead, we can add this as a first-class citizen with a new table, and the ability to ignore these packages when performing lookups. This requires we tweak our existing queries to now left join (in case there's no match) the `sensitive_packages` table and filter out/in packages as appropriate. Closes #189.
-
Jamie Tanna authored
Update module github.com/deepmap/oapi-codegen to v1.16.2 See merge request !134
-
Jamie Tanna authored
-
-
- Oct 22, 2023
-
-
Jamie Tanna authored
Check for broken links in the pipeline See merge request !132
-
Jamie Tanna authored
As a way to ensure that we don't end up with broken links - like we previously had - we can utilise a Netlify build plugin to make it easier to validate this.
-
Jamie Tanna authored
Which addresses broken URLs.
-
Jamie Tanna authored
-
Jamie Tanna authored
Due to [0], and fixes several broken links. [0]: https://www.jvt.me/posts/2019/11/11/gotcha-netlify-lowercase/
-
- Oct 21, 2023
-
-
Jamie Tanna authored
Add Getting Started cookbook for SBOMs See merge request !131
-
Jamie Tanna authored
-
Jamie Tanna authored
-
- Oct 20, 2023
-
-
Jamie Tanna authored
Update github.com/saschagrunert/demo digest to 5fce153, run Go 1.21 in demos, and use `sh` for demos See merge request !126
-
Jamie Tanna authored
-
Jamie Tanna authored
As we've now added upstream functionality to override this, we can remove the reliance on `bash`.
-
-
- Oct 18, 2023
-
-
Jamie Tanna authored
Overhaul + improve documentation site Closes #198, #154, and #178 See merge request !130
-
Jamie Tanna authored
This is a rather large change, and I'd rather not try and break it down into multiple commits, so here we are. We want to: - Add a Concepts section to describe each of the key building blocks - Add a Cookbooks section to provide common guides - Add a flowchart for "which tool should I use" - Add a document on how to deploy the infra - Migrate the getting started guide from my blog[0] - Restructure the menu to better fit the new structure - Reduce some of the content on the homepage Closes #178, #154, #198. [0]: https://www.jvt.me/posts/2023/07/25/dmd-getting-started/
-
- Oct 17, 2023
-
-
Jamie Tanna authored
Add explicit content licensing to site + update /features/ See merge request !129
-
Jamie Tanna authored
-
Jamie Tanna authored
As per a discussion in #167 (comment 1606587809)
-
Jamie Tanna authored
As it makes it clearer to read.
-
Jamie Tanna authored
-
Jamie Tanna authored
-
Jamie Tanna authored
-
Jamie Tanna authored
-
- Oct 12, 2023
-
-
Jamie Tanna authored
-
- Sep 27, 2023
-
-
Jamie Tanna authored
-
- Sep 25, 2023
-
-
Jamie Tanna authored
Add link to talk video See merge request !127
-
Jamie Tanna authored
-
- Sep 24, 2023
-
-
Jamie Tanna authored
Add `db generate missing-data` command Closes #148 See merge request !125
-
Jamie Tanna authored
-
Jamie Tanna authored
As part of #77.
-
Jamie Tanna authored
As part of #77, we proposed to add support for integration with `deps.dev` to look up package dependencies. To do this, we can add support for the `GetDependencies` endpoint on our `depsdev.Client`, and look up each dependency's dependency tree. This requires we introduce two new queries to Renovate + SBOMs to be able to query the existing data, including the full repo + ecosystem data. We can copy-paste the existing `Generate` functionality and tweak it to work for the dependency lookup. We make sure to trim down the requests we're sending with Renovate data as there's a lot of data that fails to be looked up without doing so. For now we can add support for the Maven ecosystem which appears to be the biggest concern, as Renovate nor SBOM exports we've got include the full dependency tree. Co-authored-by:
Jamie Tanna <jamie.tanna@elastic.co>
-