v0.27.3

SCANOSS Crypto Finder 0.27.3

This release includes binaries for Linux, macOS, and Windows on multiple architectures.
Docker images are available on GitHub Container Registry.

Changelog

Features

• 0652058: feat(callgraph): add the fast-jwt contract knowledge base (#523) (@agustingroh)
• c652b96: feat(contracts): add @google-cloud/kms Node contract KB (#525) (@agustingroh)
• 8ab4dde: feat(contracts): add hash.js Node contract KB (#526) (@agustingroh)
• f8c4055: feat(contracts): add js-sha256 Node contract KB (#528) (@agustingroh)
• 88185e8: feat(contracts): add js-sha3 Node contract KB (#529) (@agustingroh)
• 22a9533: feat(contracts): add jsonwebtoken Node contract KB (#530) (@agustingroh)
• c66d73d: feat(dependency): discover module roots below a manifest-less scan root (@matiasdaloia)

Bug Fixes

• 5b0be0d: fix(cli): gate the manifest-absent skip on the downward root search (@matiasdaloia)
• 9b3bb65: fix(cli): skip dependency phase when the target carries no resolvable manifest (@matiasdaloia)
• 0f452f8: fix(dependency): correct the module-root gate, path and exclusions (@matiasdaloia)
• 8ff507b: fix(engine): resolve dependencies from module roots below the scan root (@matiasdaloia)

Other Changes

• 14f35ce: Merge pull request #535 from scanoss/fix/dependency-roots-below-scan-root-533 (@matiasdaloia)
• 87f50a7: Merge pull request #537 from scanoss/fix/391-dependency-manifest-skip (@matiasdaloia)
• 8734d4e: Merge pull request #538 from scanoss/fix/node-kb-foreign-prefix-assertion (@matiasdaloia)
• 82f29c0: test(cli): add failing repro for scan aborted by absent dependency manifest (@matiasdaloia)
• a161785: test(contracts): scope the node KB foreign-coordinate check to its own library (@matiasdaloia)

Docker Images

# Standard image with scanners (OpenGrep default, Semgrep available)
docker pull ghcr.io/scanoss/crypto-finder:0.27.3

# Slim image (binary only, no scanners)
docker pull ghcr.io/scanoss/crypto-finder:0.27.3-slim

# Deps image (all language toolchains for dependency scanning)
docker pull ghcr.io/scanoss/crypto-finder:0.27.3-deps

Installation

Binary Installation

Download the appropriate binary for your platform from the assets below.

Docker

See above for Docker images.

Full Changelog: v0.27.2...v0.27.3