Skip to content

Releases: chains-project/sbom.exe

v0.14.0

08 Aug 10:08
@algomaster99 algomaster99
v0.14.0
0d03448
Compare
Choose a tag to compare
v0.14.0 Latest
Latest

Corresponds to the version 1 of SBOM.EXE: Countering Dynamic Code Injection based on Software Bill of Materials in Java.

Changelog

🚀 Features

  • ffdc1bb feat: rewrite fields and source attributes in constant pool (#231)
  • 3cf72f1 feat: make exit forceful (#222)

🐛 Fixes

  • 1da96f5 fix: let other tests run if some fail before (#256)
  • e2e51c4 fix: record multiple attributes of runtime classes (#253)
  • af76f9d fix: shade asm classes (#248)
  • 5377a5f fix: minor fixes related to #228 and #239 (#244)
  • 5adaaf8 fix: based the name on fqn (#241)
  • 96a2031 fix: make changes that reduce false positive in PDFBox (#239)
  • 3b7cebf fix: create empty bomi for modules whose tests do not exist (#238)
  • 6b2a6f5 fix: appropriately name proxy and GCA
  • cf11ecd fix: work on lookups of Proxy and GCA (#236)
  • ec2c97f fix: include submodules that are transitive dependencies (#235)
  • d1c9b38 fix: sort bytecode array to tackle non-determinism (#221)
  • 90b8f22 fix: resolve SSL's non-determinism (#220)

🔄️ Changes

  • eebdaff style: see all test output
  • 7b94da9 perf: use hashmap lookup instead of for-loop (#255)
  • 948cce8 refactor: add experiments as submodule
  • 133ec0d refactor: do not rewrite field names (#245)
  • 89a813f style: remove debugging statements
  • d85bc4e refactor: remove unused method

🧪 Tests

  • 3aff01e test: add test for graphhopper's module graph (#246)

🧰 Tasks

  • 0d03448 chore: releasing version 0.14.0
  • 4df3365 chore: releasing version 0.14.0
  • f73d4a0 chore: Update experiments commit hash
  • c7770b1 chore: releasing version 0.14.0
  • 8513818 chore(deps): update dependency org.slf4j:slf4j-nop to v2.0.14
  • 4131914 chore: trigger Automatic Dependency Submission
  • c50e95b chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.8.0
  • 87797b1 chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.3.1
  • 19ac69a chore(deps): update dependency org.jsoup:jsoup to v1.18.1
  • 4661981 chore(deps): update dependency org.assertj:assertj-core to v3.26.3
  • 77ee152 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.17.2
  • df256ea chore(deps): update junit5 monorepo to v5.10.3
  • 7c68ba9 chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.7.1
  • 67992d3 chore(deps): update dependency io.github.classgraph:classgraph to v4.8.174
  • 2addf23 chore(deps): update dependency org.apache.maven:maven-model to v3.9.8
  • 7e2ae5b chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.3.0
  • dd9ec24 chore(deps): update dependency org.apache.maven.plugins:maven-dependency-plugin to v3.7.0
  • 533f411 chore(deps): update dependency io.github.classgraph:classgraph to v4.8.173
  • 494a148 chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.7.0
  • a03a09d chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.13.1
  • a18b05c chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.0
  • 5ab79b9 chore(deps): update dependency org.assertj:assertj-core to v3.26.0
  • 926ffa7 chore(deps): update dependency org.apache.maven:maven-model to v3.9.7
  • ab712c3 chore: Remove Java 17 classes
  • dfc6d07 chore(deps): update dependency org.apache.maven.shared:maven-invoker to v3.3.0
  • 8530fdf chore: use CycloneDX 1.5 only (#229)
  • b82d743 chore: add logging statements (#228)
  • e8551e1 chore: correctly delete .git file
  • 67a0875 chore(deps): update dependency info.picocli:picocli to v4.7.6
  • 44e8730 chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.13.0
  • 7350d28 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.17.1
  • e5f32b4 chore(deps): update dependency org.apache.maven.plugins:maven-install-plugin to v3.1.2
  • fe3810d chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.2
  • 7ff9c73 chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.5.3
  • e524d7e chore(deps): update dependency io.github.classgraph:classgraph to v4.8.172
  • a143372 chore(deps): update dependency io.github.classgraph:classgraph to v4.8.171
  • a82b7eb chore(deps): update actions-js/push action to v1.5
  • 6cf4c6e chore(deps): update dependency org.slf4j:log4j-over-slf4j to v2.0.13
  • 01e15bb chore: setting SNAPSHOT version 0.13.1-SNAPSHOT

📝 Documentation

  • ef85b7f Revert "chore: releasing version 0.14.0"
  • 7196b58 Revert "chore: releasing version 0.14.0"
  • d8ef458 Update experiments commit hash
  • 959bd25 experiments: add PDFBox

Contributors

We'd like to thank the following people for their contributions:

Assets 8
Loading

v0.13.0

12 Apr 14:54
@algomaster99 algomaster99
v0.13.0
This tag was signed with the committer’s verified signature.
algomaster99 Aman Sharma
GPG key ID: 81BD3C8A486897B4
Learn about vigilant mode.
450602e
Compare
Choose a tag to compare
v0.13.0

Changelog

🚀 Features

🐛 Fixes

🔄️ Changes

  • 99b9a05 refactor: revert protobuf (#206)
  • bd1fc21 refactor: use protobuf instead of jsonl (#204)
  • 904d3f5 refactor: use try-catch in HashComputer to catch error (#201)
  • 79d74f1 refactor: apply a supposedly idempotent operation (#199)

🧰 Tasks

  • 450602e chore: releasing version 0.13.0
  • df39b22 chore: remove 61 version for JdkClass.java
  • 398ba60 chore(deps): update dependency commons-io:commons-io to v2.16.1
  • d78f317 chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.12.0
  • d33a4dd chore(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.3.1
  • c2007ed chore(deps): update dependency io.github.classgraph:classgraph to v4.8.170
  • 334e1b0 chore(deps): update dependency commons-io:commons-io to v2.16.0
  • bbbc747 chore(deps): update dependency org.ow2.asm:asm-util to v9.7
  • 391e22a chore(deps): update dependency org.ow2.asm:asm-tree to v9.7
  • 09ef620 chore(deps): update dependency org.ow2.asm:asm to v9.7
  • 73488af chore: fix release script
  • 9898ece chore: setting SNAPSHOT version 0.12.3-SNAPSHOT

📝 Documentation

Contributors

We'd like to thank the following people for their contributions:

Assets 4
Loading

v0.12.2

20 Mar 23:29
@algomaster99 algomaster99
v0.12.2
This tag was signed with the committer’s verified signature.
algomaster99 Aman Sharma
GPG key ID: 81BD3C8A486897B4
Learn about vigilant mode.
e5c6460
Compare
Choose a tag to compare
v0.12.2

Changelog

🐛 Fixes

  • 6e28a50 fix: include magic accessors class (#193)
  • ae9bc98 fix: index all versions of classes in multi-release jars (#192)

🔄️ Changes

🧰 Tasks

  • e5c6460 chore: releasing version 0.12.2
  • 56b9582 chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.13.0
  • 9148c55 chore: setting SNAPSHOT version 0.12.1-SNAPSHOT

📝 Documentation

Contributors

We'd like to thank the following people for their contributions:

Assets 4
Loading

v0.12.0

13 Mar 11:13
@algomaster99 algomaster99
v0.12.0
This tag was signed with the committer’s verified signature.
algomaster99 Aman Sharma
GPG key ID: 81BD3C8A486897B4
Learn about vigilant mode.
b1f1ac5
Compare
Choose a tag to compare
v0.12.0

Changelog

🚀 Features

  • af85b34 feat: add subcommand for generating runtime-index (#118)
  • e917911 feat: add feature to get maven module dependency graph (#151)
  • ee2618d feat: add support for CycloneDX 1.5 (#104)
  • 158f999 feat: add ability to download jar from JBoss repository (#84)
  • a0fb3f0 feat: handle java.lang.invoke.BoundMethodHandle correctly (#78)
  • 19191f4 feat: add fingerprints for JDK classes (#63)
  • a74461d feat: add feature to detect runtime generated classes (#64)

🐛 Fixes

  • 60df7d5 fix: narrow down list of classes in log4j (#182)
  • aea493f fix: include the missing classes in JDK index (#161)
  • ce7092e fix: check for metadata before accessing
  • 01d4bcc fix: prevent accessing metadata before ensuring

🔄️ Changes

  • 0b13ef3 refactor: remove classes from jrt-fs jar (#171)
  • 5e68035 refactor: prevent appending provenances to already existing JDK index (#170)
  • 4dadd49 refactor: combine SBOM schema by making a super interface (#157)
  • 30753ca refactor: remove notion of provenance (#155)
  • adcd16d refactor: move creation of maven module graph to MavenModule (#154)
  • fbfb3b5 style: cleanup classfile-fingerprint (#107)
  • 6bd4923 perf: use set instead of list (#106)
  • 36e36ba refactor: add supply-chain indexing as a subcommand to indexer (#105)
  • 8c95aa4 refactor: add jdk indexing as a subcommand to indexer (#97)
  • 37ae48a refactor: put sorald under level 3 (#77)
  • 7359207 style: add blue screen of death (#73)
  • 4a0a0dc refactor: remove condition to detect synthetic classes in future (#65)

🧪 Tests

  • 2e4571e test: rename tests for clarity

🧰 Tasks

  • b1f1ac5 chore: releasing version 0.12.0
  • 1bd758b chore: releasing version 0.12.0
  • 5d053ca chore: update release configuration
  • 057ac71 chore: run CI on 11 without skipJava17 (#185)
  • 04d3a91 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.17.0
  • c030ed0 chore: run CI on 11 (#183)
  • d035a83 chore: make SBOM.exe multi-release (#177)
  • 511f113 chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.23.1
  • c3a7b87 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.16.2
  • 16079e0 chore(deps): update dependency io.github.classgraph:classgraph to v4.8.168
  • 61a8650 chore: add index for JDK 21 and 17 temurin (#168)
  • 695e987 chore: run tests on multiple java versions (#164)
  • 97c04ff chore(deps): update dependency io.github.classgraph:classgraph to v4.8.167
  • ca6a8d7 chore(deps): update dependency io.github.classgraph:classgraph to v4.8.166
  • db37324 chore: move dependency to parent-pom
  • 26e891e chore: debloat watchdog-agent in terms of parameters and tests (#153)
  • f315e2f chore(deps): update actions/upload-artifact action to v4 (#148)
  • 99ba121 chore: remove unnecessary files
  • 1aa517d chore: please qodana (#150)
  • 45d0cc9 chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.23.0
  • 495adc0 chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.5.2
  • 1d99226 chore(deps): update actions/setup-java action to v4 (#121)
  • ef40880 chore(deps): update github/codeql-action action to v3 (#125)
  • f12d44d chore: use -release for managing module versions (#145)
  • fb8db08 chore(deps): update dependency org.slf4j:log4j-over-slf4j to v2.0.12
  • e4b70a3 chore(deps): update dependency org.assertj:assertj-core to v3.25.3
  • 752c521 chore(deps): update junit5 monorepo to v5.10.2
  • f35c40e chore(deps): update dependency org.assertj:assertj-core to v3.25.2
  • be3454f chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.43.0
  • beb0f25 chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.42.0
  • 8287fef chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.11.0
  • 62b468f chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.2.5
  • 2b89006 chore(deps): update dependency org.slf4j:log4j-over-slf4j to v2.0.11
  • edbb829 chore(deps): update dependency org.assertj:assertj-core to v3.25.1
  • 645aa4f chore(deps): update dependency org.assertj:assertj-core to v3.25.0
  • 6e1e827 chore(deps): update dependency org.jsoup:jsoup to v1.17.2
  • f942afd chore(deps): update dependency org.slf4j:log4j-over-slf4j to v2.0.10
  • 4050e18 chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.22.1
  • ece11d4 chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.12.1
  • cf9f120 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.16.1
  • 33b0a44 chore(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.12.0
  • 1877473 chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.2.3
  • 006dea4 chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.41.1
  • 082e352 chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.6.3
  • edd7be7 chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.41.0
  • 844122c chore(deps): update dependency org.jsoup:jsoup to v1.17.1
  • 090d713 chore(deps): update actions/checkout action to v4 (#75)
  • 5af0ca8 chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.22.0
  • 2d75cd8 chore(deps): update dependency io.github.classgraph:classgraph to v4.8.165
  • 2a3ca15 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.16.0
  • 14b62b5 chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.2.2
  • dba6023 chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.10.2
  • b9916cd chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.6.2
  • be5a7cf chore(deps): update junit5 monorepo to v5.10.1
  • 3b922fb chore(deps): update dependency io.github.classgraph:classgraph to v4.8.164
  • e374a73 chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.21.1
  • 6362f19 chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.2.1
  • f718359 chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.10.1
  • 8bf2d0c chore(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.10.1
  • 701de9b chore(deps): update dependency org.jsoup:jsoup to v1.16.2
  • e94b9c1 chore(deps): update dependency org.apache.logging.log4j:log4j-core to v2.21.0
  • 028713f chore(deps): update dependency io.github.classgraph:classgraph to v4.8.163
  • 3725c5f chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.15.3
  • 694b8a1 chore(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.5
  • f8709c9 chore(deps): update dependency org.apache.maven:maven-core to v3.9.5
  • 0e48263 chore(deps): update dependency org.ow2.asm:asm-util to v9.6
  • 029da0a chore(deps): update dependency org.ow2.asm:asm-tree to v9.6
  • 42ec754 chore(deps): update dependency org.ow2.asm:asm to v9.6
  • 88c1f89 chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.40.0
  • 3b4d9b9 chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.5.1
  • 2e972d6 chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.6.0
  • 762c8fb chore(deps): update dependency org.slf4j:log4j-over-slf4j to v2.0.9
  • 136e217 chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.39.0
  • 502f7ea chore(deps): update dependency info.picocli:picocli to v4.7.5
  • 219cdb2 chore: setting SNAPSHOT version 0.11.1-SNAPSHOT

🛠 Build

  • 15dbae5 ci: remove files generated in CI

📝 Documentation

Read more
Assets 4
Loading

v0.11.0

22 Aug 17:46
@algomaster99 algomaster99
v0.11.0
90b6685
Compare
Choose a tag to compare
v0.11.0

Changelog

🚀 Features

  • 11bf5e9 feat: generate fingerprint within the agent (#60)

🧰 Tasks

  • 90b6685 chore: releasing version 0.11.0
  • 6c1a09d chore: fix SNAPSHOT version
  • b1e5b2b chore: setting SNAPSHOT version 0.1.1-SNAPSHOT

📝 Documentation

Contributors

We'd like to thank the following people for their contributions:

Assets 6
Loading

v0.10.0

22 Aug 15:24
@algomaster99 algomaster99
v0.10.0
7b07fb8
Compare
Choose a tag to compare
v0.10.0

Changelog

🚀 Features

  • 73608d4 feat: add option for external jar in CLI (#59)
  • 52b8ca7 feat: acquit classes that are part of the project itself (#58)

🧰 Tasks

  • 7b07fb8 chore: releasing version 0.10.0
  • a0c8f87 chore: setting SNAPSHOT version 0.9.1-SNAPSHOT

🛠 Build

  • e4d95c0 ci: update release configuration

📝 Documentation

Contributors

We'd like to thank the following people for their contributions:

Assets 8
Loading

v0.9.0

21 Aug 15:35
@algomaster99 algomaster99
v0.9.0
1c8cd6d
Compare
Choose a tag to compare
v0.9.0

Changelog

🚀 Features

  • b07a0ae feat: create fingerprint from CycloneDX SBOM (#57)
  • 1d626a8 feat: add sources to convert CycloneDX 1.4 schema to POJO (#56)

🐛 Fixes

  • e937258 fix: make the external jar path relative to config file (#50)

🔄️ Changes

  • b63cc21 style: remove redundant exception

🧰 Tasks

  • 1c8cd6d chore: releasing version 0.9.0
  • e319ad2 chore(deps): update dependency net.bytebuddy:byte-buddy-dep to v1.14.6
  • 11d53b1 chore: remove redundant declaration of plugins
  • b2aa477 chore: setting SNAPSHOT version 0.8.1-SNAPSHOT

📝 Documentation

  • b668d9c Update README.md
  • 17926aa tests: differentiate internal class from custom classes (#55)

Contributors

We'd like to thank the following people for their contributions:

Assets 8
Loading

v0.8.0

09 Aug 11:36
@algomaster99 algomaster99
v0.8.0
c25a25e
Compare
Choose a tag to compare
v0.8.0

Changelog

🚀 Features

  • c96be5e feat: add option to skip system exit (#47)

🐛 Fixes

  • 6c06f9b fix: relocate classes in com.fasterxml.jackson (#46)
  • da52294 fix: add org/w3c/dom to list of internal packages (#45)

🔄️ Changes

  • 82e88f4 style: remove redundant exception
  • a389a76 style: explicitly state language level of parent pom

🧰 Tasks

  • c25a25e chore: releasing version 0.8.0
  • a8cce06 chore(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.4
  • 314cca6 chore(deps): update dependency org.apache.maven:maven-core to v3.9.4
  • 7dc5326 chore: setting SNAPSHOT version 0.7.1-SNAPSHOT

📝 Documentation

Contributors

We'd like to thank the following people for their contributions:

Assets 6
Loading

v0.3.0

09 Aug 12:04
@algomaster99 algomaster99
v0.3.0
This tag was signed with the committer’s verified signature.
algomaster99 Aman Sharma
GPG key ID: 81BD3C8A486897B4
Learn about vigilant mode.
e3342cd
Compare
Choose a tag to compare
v0.3.0

The sources here have the same code as https://github.com/ASSERT-KTH/terminator/releases/tag/v0.4.0.

What's Changed

  • feat: add code to terminate JVM if unknown class is loaded by @algomaster99 in #26
  • fix: include classes of the project itself by @algomaster99 in #27
  • chore: make POM of watchdog-agent compatible with release requirements by @algomaster99 in #29

Full Changelog: v0.2.0...v0.3.0

Contributors

algomaster99
Assets 6
Loading

v0.7.0

02 Aug 16:30
@algomaster99 algomaster99
v0.7.0
eb8510b
Compare
Choose a tag to compare
v0.7.0

Changelog

🐛 Fixes

🔄️ Changes

  • a320aee refactor: aggregate related classfile helpers together (#42)
  • ac0ed87 refactor: move common utilities for serialization and deserialization (#41)
  • 9c8d03b style: remove debugging statement
  • bc2be26 style: improve error message

🧰 Tasks

  • eb8510b chore: releasing version 0.7.0
  • f7f71cd chore: setting SNAPSHOT version 0.6.1-SNAPSHOT

🛠 Build

  • 510e57d test: add more tests to verify deserialisation (#39)

📝 Documentation

Contributors

We'd like to thank the following people for their contributions:

Assets 6
Loading