v0.25.2

SCANOSS Crypto Finder 0.25.2

This release includes binaries for Linux, macOS, and Windows on multiple architectures.
Docker images are available on GitHub Container Registry.

Changelog

Features

• 1f86bdf: feat(callgraph): add Bellman Groth16 contracts for the Rust KB (@agustingroh)
• 807dde8: feat(callgraph): add aws-lc contracts for the Rust KB (@agustingroh)
• a803905: feat(callgraph): intern functions beside inlined call_chains (@matiasdaloia)

Bug Fixes

• 7df3f53: fix(callgraph): intern frames by identity including dependency (@matiasdaloia)
• 6f03447: fix(callgraph): satisfy lint on interned export helpers (@matiasdaloia)
• 582ce17: fix(ci): install pinned OpenGrep without the live-releases installer (@matiasdaloia)
• 33d79e5: fix(go): declare interface methods and stop faking owners for unknown receivers (@isasmendiagus)
• 0c8af48: fix(go): emit chained calls and type := receivers via contract returns (@isasmendiagus)
• 659630e: fix(go): erase generic receivers and read syntactic := types (@isasmendiagus)
• c5ad4aa: fix(go): extract declared return types and type := receivers from them (@isasmendiagus)
• dc7e063: fix(go): hold the differential line across grpc, etcd, caddy and cosign (@isasmendiagus)
• 7d32478: fix(go): locals shadow imported packages, at any binding (@isasmendiagus)
• c4e9853: fix(go): match the toolchain's input set and recover misparsed generic calls (@isasmendiagus)
• a7195f4: fix(go): reach 100% call recall against go/types, position-sensitive bindings (@isasmendiagus)
• 1eece6f: fix(go): scope local bindings and anchor every remaining call shape (@isasmendiagus)
• 1286fe7: fix(go): stop attributing predeclared identifiers to the caller's package (@isasmendiagus)
• 3b97eb2: fix(go): survive identity collisions, respell to declared receivers (@isasmendiagus)

Other Changes

• 2b5aefc: Merge pull request #340 from scanoss/feat/callgraph-interned-functions-337 (@matiasdaloia)
• ae7329a: Merge pull request #343 from scanoss/fix/go-parser-resolution (@isasmendiagus)
• 1caf9b3: Merge pull request #353 from scanoss/matiasdaloia/fix-release-job-failure (@matiasdaloia)
• 743696c: chore(go): satisfy goconst for the new builtin after rebase (@isasmendiagus)

Docker Images

# Standard image with scanners (OpenGrep default, Semgrep available)
docker pull ghcr.io/scanoss/crypto-finder:0.25.2

# Slim image (binary only, no scanners)
docker pull ghcr.io/scanoss/crypto-finder:0.25.2-slim

# Deps image (all language toolchains for dependency scanning)
docker pull ghcr.io/scanoss/crypto-finder:0.25.2-deps

Installation

Binary Installation

Download the appropriate binary for your platform from the assets below.

Docker

See above for Docker images.

Full Changelog: v0.25.1...v0.25.2