9da1d057d5
Some checks failed
CI / Format (push) Failing after 39s
CI / Clippy (push) Successful in 4m24s
CI / Security Audit (push) Has been skipped
CI / Tests (push) Has been skipped
CI / Format (pull_request) Failing after 3s
CI / Clippy (pull_request) Successful in 4m24s
CI / Security Audit (pull_request) Has been skipped
CI / Tests (pull_request) Has been skipped
CI / Detect Changes (push) Has been skipped
CI / Detect Changes (pull_request) Has been skipped
CI / Deploy Agent (push) Has been skipped
CI / Deploy Dashboard (push) Has been skipped
CI / Deploy Docs (push) Has been skipped
CI / Deploy MCP (push) Has been skipped
CI / Deploy Agent (pull_request) Has been skipped
CI / Deploy Dashboard (pull_request) Has been skipped
CI / Deploy Docs (pull_request) Has been skipped
CI / Deploy MCP (pull_request) Has been skipped
- Extract package manager from PURL instead of CycloneDX component type (was showing "library"/"file" instead of "npm"/"cargo"/"pip" etc.) - Generate missing lock files (Cargo.lock, package-lock.json) before Syft scan so repos that gitignore them still get full dependency trees - Enable Syft remote license lookups for Go, JS, Python, and Java - Enrich Cargo entries with license data from cargo metadata - Parse CycloneDX license expressions (e.g. "MIT OR Apache-2.0") - Delete stale SBOM entries on rescan instead of only upserting - Add /api/v1/sbom/filters endpoint for dynamic filter options - Make manager and license dropdowns dynamic from actual DB data - Add cargo, npm, go, php, ruby, composer, bundler to Docker image Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1.5 KiB
1.5 KiB