feat!: Update Trivy and Grype versions, Grype return format and remove deprecated methods
Checklist
-
Merge Request title begins with a cool keyword ("fix:", "feat:", "BREAKING CHANGE:") -
documentation is changed or added in ./docs -
unit tests updated to test changes -
Pipeline passes -
Merge request is marked as ready (not in draft status) -
Ticket has been moved to Review status
Description
Closes #87 (closed), #90 (closed), #68 (closed)
Context
This merge request came to be because CycloneDX 1.6 support was highly desired for hoppr-cop. We had some tickets that needed to be completed (including a ticket where grype's scanner had to have major updates to work with upgrades due to model definitions changing), so the plan was to knock out some of them in a single release. Nick and Seth were the main two people who recommended that I solve these issues with this release.
Seth mentioned that this MR would be considered a Breaking Change as CycloneDX 1.6 support is pretty big, so that has been added to the title.
Intent
This merge request's intent is to accomplish the following to enable CycloneDX 1.6 support:
- Upgrade hoppr-cop from v1.14.0 to v1.14.1.
- Upgrade trivy from v0.57.1 to v0.67.2.
- Upgrade grype from v0.86.1 to v0.101.1.
- Upgrade grype's scanner to use the cyclonedx-json option instead of the regular json object. This allows us to avoid the need to update models.py in the future (this file now ceases to exist).
- Remove most (if not all) deprecated functions within the application. This ensures that the code remains clean (in addition to the use of ruff, black, mypy, and so on).
- And more.
Issues covered by this MR include #87 (closed), #90 (closed), and #68 (closed).