v0.35.0

SCANOSS Crypto Finder 0.35.0

This release includes binaries for Linux, macOS, and Windows on multiple architectures.
Docker images are available on GitHub Container Registry.

Changelog

Features

• 5d10b35: feat(graphfrag): carry root_kind and no_callers_only on the stitched export (#707) (@matiasdaloia)
• c7dce1d: feat(scan): key every finding that has a graph and give entry-point variants their own identity (#710) (@matiasdaloia)
• aefd350: feat: take dependency findings from the SCANOSS API when a key is set (#702) (@matiasdaloia)

Bug Fixes

• 7ed21b2: fix(callgraph): do not bind a Node member call on an unresolved receiver to a module function (#708) (@matiasdaloia)
• a1b38c5: fix(cli): give every dependency-scan asset a finding_id (#703) (@matiasdaloia)
• 25ce635: fix(scan): give two calls in one multi-line statement distinct occurrence keys (#709) (@matiasdaloia)
• 5265461: fix(scan): keep one asset per value when a native taint match duplicates a specialization (#706) (@matiasdaloia)

Other Changes

• 534edd3: chore(release): fold the changelog fragments into 0.35.0 (#711) (@matiasdaloia)

Docker Images

# Standard image with scanners (OpenGrep default, Semgrep available)
docker pull ghcr.io/scanoss/crypto-finder:0.35.0

# Slim image (binary only, no scanners)
docker pull ghcr.io/scanoss/crypto-finder:0.35.0-slim

# Deps image (all language toolchains for dependency scanning)
docker pull ghcr.io/scanoss/crypto-finder:0.35.0-deps

Installation

Binary Installation

Download the appropriate binary for your platform from the assets below.

Docker

See above for Docker images.

Full Changelog: v0.34.0...v0.35.0