13 Commits

Include renames

Author	SHA1	Message	Date
Christopher Angelo Phillips	6eff158ad3	chore: update license sort to be stable with contents field (#3860) ... --------- Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2025-05-06 11:45:47 -04:00
Alex Goodman	df18edf905	Consider DLL claims for dependencies of .NET packages from deps.json (#3822) ... * consider child dll claims for .NET packages from deps.json Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * make dll claim propagation configurable Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2025-04-24 11:59:16 -04:00
Adam McClenaghan	f6d4a7d27a	Perf: skip license scanner injection (#3796) ... * (perf): allow library users to skip default scanner injection Signed-off-by: Adam McClenaghan <adam@mcclenaghan.co.uk> * (perf): remove prints Signed-off-by: Adam McClenaghan <adam@mcclenaghan.co.uk> * perf: move to cataloging licenses.go Signed-off-by: adammcclenaghan <adam.mcclenaghan@upwind.io> * perf: Simplify to expose a SetContextLicenseScanner func Signed-off-by: adammcclenaghan <adam.mcclenaghan@upwind.io> --------- Signed-off-by: Adam McClenaghan <adam@mcclenaghan.co.uk> Signed-off-by: adammcclenaghan <adam.mcclenaghan@upwind.io>	2025-04-23 16:01:10 -04:00
Christopher Angelo Phillips	e584c9f416	feat: 3626 add option enable license content; disable by default (#3631) ... --------- Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2025-02-05 20:41:03 +00:00
HeyeOpenSourceandChristopher Phillips	f7e767fc25	feat: update licenses to including license content when SPDX expressions are unable to be determined (#3366) ... --------- Signed-off-by: HeyeOpenSource <opensource@heye-international.com> Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>	2025-01-28 18:05:27 +00:00
Alex Goodman	e4e985b9b0	Create single license scanner for all catalogers (#3348) ... * add single license scanner instance Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * rename testing license scanner Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2024-10-21 16:17:12 +00:00
Niv Govrin	dbad17de9e	fix: don't use builtin scanner in licensecheck (#3290) ... Signed-off-by: Niv Govrin <nivgo@oligosecurity.io>	2024-10-01 13:53:54 -04:00
Colm O hEigeartaigh	1daf18fee9	feat: Perform case insensitive matching on Java license files (#2235) ... Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>	2023-10-25 09:51:59 -04:00
Alex Goodman	7018573bf7	Remove internal string set (#2219) ... * remove internal string set Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * incorporate changes from #2227 Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * beef up the pkg.License.Merg() doc string Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-10-17 12:52:11 -04:00
Colm O hEigeartaighandAlex Goodman	144ed725a7	Add additional license filenames (#2227) ... * Add additional license filenames Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org> * add comment about the license list being manually updated Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com>	2023-10-16 13:20:00 +00:00
Alex Goodman	07e76907f6	Migrate location-related structs to the file package (#1751) ... * migrate location structs to file package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * replace source.Location refs with file package call Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove hardlink test for file based catalogers Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * remove hardlink test for all-regular-files testing Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate file resolver implementations to separate package Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * fix linting Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * [wip] migrate resolvers to internal Signed-off-by: Alex Goodman <alex.goodman@anchore.com> * migrate resolvers to syft/internal Signed-off-by: Alex Goodman <alex.goodman@anchore.com> --------- Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Signed-off-by: <>	2023-05-24 17:06:38 -04:00
Christopher Angelo Phillips	42fa9e4965	feat: update syft license concept to complex struct (#1743) ... this PR makes the following changes to update the underlying license model to have more expressive capabilities it also provides some guarantee's surrounding the license values themselves - Licenses are updated from string -> pkg.LicenseSet which contain pkg.License with the following fields: - original `Value` read by syft - If it's possible to construct licenses will always have a valid SPDX expression for downstream consumption - the above is run against a generated list of SPDX license ID to try and find the correct ID - SPDX concluded vs declared is added to the new struct - URL source for license is added to the new struct - Location source is added to the new struct to show where the expression was pulled from	2023-05-15 16:23:39 -04:00
Avi DeitcherandKeith Zantow	9fd532246a	feat: scan local go mod cache for licenses of golang packages (#1645) ... Signed-off-by: Avi Deitcher <avi@deitcher.net> Co-authored-by: Keith Zantow <kzantow@gmail.com>	2023-03-23 10:38:15 -04:00