v0.36.0

SCANOSS Crypto Finder 0.36.0

This release includes binaries for Linux, macOS, and Windows on multiple architectures.
Docker images are available on GitHub Container Registry.

Changelog

Features

• 0b91c08: feat(callgraph): propagate Go const and C #define literals into call arguments (#718) (@matiasdaloia)
• b3d79c8: feat(callgraph): resolve Go package consts and C header defines across files (#725) (@matiasdaloia)

Bug Fixes

• 0fca6e0: fix(callgraph): read Go ecdh key size from the receiver curve (#724) (@matiasdaloia)
• 560386e: fix(callgraph): resolve Python locals and stop stale module constants (#726) (@matiasdaloia)
• 0356b11: fix(contracts): BouncyCastle EC key size from the named curve; stop reading a reassigned Java local's first value (#728) (@matiasdaloia)
• 9539f0d: fix(contracts): resolve DH and DSA parameter-generation key sizes and positional pyca keygen (#720) (@matiasdaloia)
• 2b2c4b9: fix(contracts): resolve Node generateKeyPair key size from the options object (#723) (@matiasdaloia)
• 1d85c61: fix(contracts): resolve key length from curve, DSA and BouncyCastle parameters (#719) (@matiasdaloia)
• 5c45d5b: fix(contracts): resolve pyca ec.generate_private_key key size with a positional backend (#730) (@matiasdaloia)
• 9a67af1: fix(export): attribute a finding to the function that holds its start column (#731) (@matiasdaloia)
• da47cf9: fix(scan): resolve key length on the terminal crypto call (#717) (@matiasdaloia)

Other Changes

• 971c538: chore(release): fold the changelog fragments into 0.36.0 (#732) (@matiasdaloia)

Docker Images

# Standard image with scanners (OpenGrep default, Semgrep available)
docker pull ghcr.io/scanoss/crypto-finder:0.36.0

# Slim image (binary only, no scanners)
docker pull ghcr.io/scanoss/crypto-finder:0.36.0-slim

# Deps image (all language toolchains for dependency scanning)
docker pull ghcr.io/scanoss/crypto-finder:0.36.0-deps

Installation

Binary Installation

Download the appropriate binary for your platform from the assets below.

Docker

See above for Docker images.

Full Changelog: v0.35.2...v0.36.0