 Colm O hEigeartaigh
|
f4e18961b9
|
Adding the ability to retrieve remote licenses from package.lock (#2708)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2024-03-21 13:20:04 -04:00 |
|
|
Colm O hEigeartaigh
|
38a12bd91a
|
Look for a maven version in a pom from a parent dependency management section (#2423)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-12-14 13:15:14 -05:00 |
|
|
Colm O hEigeartaigh
|
649d152548
|
Parse Python licenses from LicenseExpression entry in the Wheel Metadata (#2431)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-12-14 12:41:41 -05:00 |
|
|
Colm O hEigeartaigh
|
d39ef44e40
|
Parse Python licenses from LicenseFile entry in the Wheel Metadata (#2331)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-12-13 17:46:56 -05:00 |
|
|
Colm O hEigeartaigh
|
e789e0714d
|
feat: add the option to retrieve remote licenses for projects defined in a maven pom (#2409)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-12-12 14:02:36 -05:00 |
|
 Colm O hEigeartaighandChristopher Phillips
|
16dee41b4b
|
feat: add ability to retrieve remote licenses for yarn.lock (#2338)
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
|
2023-12-05 13:38:28 -05:00 |
|
|
Colm O hEigeartaigh
|
3ba9df4ff3
|
Retrieve remote licenses using pom.properties when there is no pom.xml (#2315)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-12-05 09:47:40 -05:00 |
|
|
Colm O hEigeartaigh
|
3e8a2304e8
|
Refine license searching from groupIDFromJavaMetadata to allow for having the artfactId in the groupId (#2313)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-11-15 10:04:31 -05:00 |
|
|
Colm O hEigeartaigh
|
0652998b9b
|
Add license for golang stdlib (#2317)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-11-14 11:53:07 -05:00 |
|
|
Colm O hEigeartaigh
|
7ccbadff34
|
Fall back to searching maven central using groupIDFromJavaMetadata (#2295)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-11-10 22:02:53 -05:00 |
|
 Colm O hEigeartaighandAlex Goodman
|
dc14dbb326
|
SPDX file has duplicate sha256 tag in versionInfo (#2300)
* SPDX file has duplicate sha256 tag in versionInfo
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
* add tests
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
|
2023-11-08 22:49:31 +00:00 |
|
|
Colm O hEigeartaigh
|
bae5a2e741
|
Check maven central as well for licenses in parents poms for nested jars (#2302)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-11-08 10:26:12 -08:00 |
|
|
Colm O hEigeartaigh
|
9fa11f2339
|
Wire though maven-url to java config (#2291)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-11-06 09:08:03 -05:00 |
|
|
Colm O hEigeartaighandChristopher Phillips
|
2d582f78a1
|
Add a new Java configuration option to recursively search parent poms… (#2274)
- Add a new Java configuration option to recursively search parent poms for licenses
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
|
2023-11-03 10:33:02 -04:00 |
|
|
Colm O hEigeartaighandChristopher Phillips
|
26cdbfc299
|
fix: syft does not handle the case of parsing a jar with multiple poms (#2231)
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
|
2023-11-01 17:10:17 +00:00 |
|
|
Colm O hEigeartaighandChristopher Phillips
|
78ac2f9797
|
Read a license from a parent pom stored in Maven Central (#2228)
* Read a license from a parent pom stored in Maven Central
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
|
2023-10-30 17:48:16 -04:00 |
|
|
Colm O hEigeartaigh
|
1daf18fee9
|
feat: Perform case insensitive matching on Java license files (#2235)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-10-25 09:51:59 -04:00 |
|
|
Colm O hEigeartaighandAlex Goodman
|
144ed725a7
|
Add additional license filenames (#2227)
* Add additional license filenames
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
* add comment about the license list being manually updated
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
|
2023-10-16 13:20:00 +00:00 |
|
|
Colm O hEigeartaigh
|
2687100e6a
|
Detect a license file in the root directory or META-INF of a jar (#2213)
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
|
2023-10-12 11:09:53 -04:00 |
|
|
0748945c83
|
Parse the Maven license from the pom.xml if not contained in the mani… (#2115)
* Parse the Maven license from the pom.xml if not contained in the manifest
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
* chore: restore 10.0.2 schema
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* chore: generate new 11.0.1 schema
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* refactor: remove schema change
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* test: update unit tests to align with new pattern
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* chore: pr feedback
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* chore: remove struct tags
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
* keep license name and url semantics preserved on the pkg object
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
---------
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
Co-authored-by: Christopher Angelo Phillips <32073428+spiffcs@users.noreply.github.com>
Co-authored-by: Christopher Phillips <christopher.phillips@anchore.com>
Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>
|
2023-10-10 13:09:44 -04:00 |
|