summaryrefslogtreecommitdiff
path: root/Gemfile.lock
AgeCommit message (Collapse)Author
2020-10-06Relocate projectmo khan
* chore: do not pass artifacts to downstream jobs * chore: expire artifacts * chore: point to new project_id * chore: remove after_script * refactor: rename license-management to license-finder * docs: Add changelog entry and update links to old repo
2020-10-06Parse composite license expressionsmo khan
* docs: Add changelog entry * fix: update spec to match expected behaviour
2020-10-05Perform scan from within dir containing `go.mod`mo khan
* fix: perform scan from within dir containing `go.mod` * docs: add changelog entry * test: add spec to reproduce defect
2020-10-04Add Ruby version 2.7.2 to Docker imagemo khan
2020-10-02Remove unused bash functionsmo khan
2020-09-15Update CHANGELOG and bump versionmo khan
2020-09-14chore: install build tools for installing dev gemsmo khan
2020-09-13Bump version and update CHANGELOGmo khan
2020-09-13fix: remove problematic packagesmo khan
* chore: remove intermediate containers * fix: Update rack to 2.2.3 * fix: import nodejs keyring after plugin update * fix: install dev packages for C based tools * fix: remove unnecessary packages and cleanup
2020-09-10Add CHANGELOG entry and bump versionmo khan
2020-09-09fix: do not compress /usr/sharemo khan
* do not allow license_scanning job to fail * update script to download *.deb files * ensure apt db is valid * Update CHANGELOG and bump version
2020-09-09Change references to Go to version 1.15.1Evan Read
2020-09-07Require Go 1.15.1 for projectEvan Read
2020-08-21Install tools from .deb packagemo khan
2020-08-19test: add performance specsmo khan
2020-08-18Update license_finder to 6.8.1mo khan
* Update CHANGELOG * Add default retry for all jobs * Ensure all deb packages are built
2020-08-16Update CHANGELOGmo khan
2020-08-12Explicitly source bashrcmo khan
In some cases the '$HOME' environment variable is overwritten in the runtime environment. This occurred when running this image in a OpenShift environment.
2020-08-10Update CHANGELOGmo khan
2020-08-10Unpack Rust deb package before asdf installmo khan
2020-08-07Add limited network support for Cargo projectsmo khan
* Add test to scan cargo project with packages from a private registry * Synchronize mono cert store * Wipe nuget package cache before specs * Compress /usr/local/share * Exclude development dependencies * Add CHANGELOG entry
2020-08-06Update CHANGELOGmo khan
2020-08-04Update CHANGELOGmo khan
2020-08-05Update dotnet test fixturesmo khan
Related to changes in https://gitlab.com/gitlab-org/security-products/tests/csharp-nuget-dotnetcore/-/merge_requests/19
2020-08-04Exclude dev dependenciesmo khan
* Add test to install composer packages from custom TLS endpoint * Remove dev dependencies from fixture files * Install composer packages in vendor_path * Bump version and update CHANGELOG
2020-07-30Set .tool-versions to latest GoEvan Read
2020-07-22Update CHANGELOG and bump versionmo khan
2020-07-21Update maven/gradle offline testsmo khan
* Let maven figure out the version of the license plugin that it is compatible with * Print the error when the setup fails * Add tests for multiple versions of maven and java * Install packages into a project specific directory to prevent cross test pollution * Specify the list of supported Maven versions * Update CHANGELOG and bump the version
2020-07-16Install dotnet SDKmo khan
* Include the latest dotnet SDK in the /opt/asdf/installs directory. * Update CHANGELOG and bump version * Compress large directories
2020-07-15Add composer lock file for test project and fix failing buildmo khan
2020-07-14Fetch dependencies from a custom dotnet sourcemo khan
* Install custom ca certificate in location where nuget can recognize it * Add subject alternative name to the generate x509 cert * Do not cache packages and https requests * Detect vbproj, fsproj, csproj, and sln files * Improve nuget package detection * Parse SPDX license expression from nuspec files * Update version and update CHANGELOG
2020-07-11Return empty list when bundler scan failsv3.17.2mo khan
2020-07-11Reset bundler from sub directory pathsv3.17.1mo khan
2020-07-10Isolate license_management ruby from projectmo khan
* Target ruby version 2.7.1 * Add spec to fetch gems from a custom source * Add proxy to rubygems.org config * Specify default env vars to support offline environment * Cleanup custom certificates after spec * Inline docker-test script * Do not install license_finder with each installed ruby * Increase gem log verbosity and include backtrace * Extract test fixtures for the different ruby scenarios * Find *.gemspec files in gems dir * Use RUBYLIB to hijack src path * Run scan from project path dir
2020-07-09Bump versionmo khan
2020-07-08Detect gems.rb and gems.lockedmo khan
2020-07-06Install gems from custom source with custom CAmo khan
* Bump version and add CHANGELOG entry * Configure Bundler logging * Include install_path of gem * Use gem summary and full_gem_path * Specify a vendor path to install dependencies to prevent leakage between tests and take advantage of build job cache
2020-07-02Update version, CHANGELOG and READMEmo khan
* Install license_finder ~> 6.6 into default gems
2020-06-26Update Java to match new naming conventionmo khan
2020-06-23Bump version and add CHANGELOG entrymo khan
2020-06-18Bump version and add spec for LGPL-2.1mo khan
2020-06-18Detect variations of the Eclipse Public Licensecan eldem
2020-06-16Bump version and MR # to CHANGELOGmo khan
2020-06-05Update CHANGELOG and bump versionmo khan
2020-06-04List all dependencies that appear in go.modmo khan
* Update CHANGELOG and fix typo * Render severity based on exit code * Explicitly specify the default GOPROXY * Default to -mod=readonly and allow override * Do not modify `vendor` directory if it exists. * Skip `go mod tidy` to prevent modifying projects files. * Include dependencies that appear in go.mod but are not present in the vendor directory. * Remove severity from log output * Wipe golang module cache before each spec ```plaintext The -mod build flag provides additional control over updating and use of go.mod. If invoked with -mod=readonly, the go command is disallowed from the implicit automatic updating of go.mod described above. Instead, it fails when any changes to go.mod are needed. This setting is most useful to check that go.mod does not need updates, such as in a continuous integration and testing system. The "go get" command remains permitted to update go.mod even with -mod=readonly, and the "go mod" commands do not take the -mod flag (or any other build flags). If invoked with -mod=vendor, the go command loads packages from the main module's vendor directory instead of downloading modules to and loading packages from the module cache. The go command assumes the vendor directory holds correct copies of dependencies, and it does not compute the set of required module versions from go.mod files. However, the go command does check that vendor/modules.txt (generated by 'go mod vendor') contains metadata consistent with go.mod. If invoked with -mod=mod, the go command loads modules from the module cache even if there is a vendor directory present. If the go command is not invoked with a -mod flag and the vendor directory is present and the "go" version in go.mod is 1.14 or higher, the go command will act as if it were invoked with -mod=vendor. ``` - https://golang.org/cmd/go/#hdr-Maintaining_module_requirements
2020-05-29Allow custom conan configurationmo khan
* Use git fetch with a depth of 1 * Control Conan environment via environment variables * Allow specifying a custom CONAN_LOGIN_USERNAME and CONAN_PASSWORD * Specify a default CONAN_CACERT_PATH to point the system cert file * Tie CONAN_LOGGING_LEVEL to LOG_LEVEL * Tag and skip offline environment tests because it was shutdown * Add CHANGELOG entry
2020-05-26Scan Conan projectsmo khan
* Scan the conan examples project * Split licenses by comma * Add integration test job for c projects * Add package_manager, version and path to v2.1 report * Detect collisions between names from different package managers * Add CHANGELOG entry * Update README to indicate Conan support * Print timestamps in install script
2020-05-20Update CHANGELOGmo khan
2020-05-19Add CHANGELOG entrymo khan
2020-05-15Merge branch 'dev-docs' into 'master'Can Eldem
Update README instructions to run tests in docker container See merge request gitlab-org/security-products/license-management!149
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-02 07:17:23 +0000