summaryrefslogtreecommitdiff
path: root/lib/license/finder
AgeCommit message (Collapse)Author
2020-11-10use recursive scan by defaultrecursive-defaultmo khan
docs: update CHANGELOG and version feat: scan packages in parallel fix: prevent infinite recursion
2020-11-10fix: stream results to stdoutmo khan
* chore: remove verbose output from bundler prep * docs: add CHANGELOG entry * style: remove unnecessary logging
2020-11-10fix: detect maven wrapper in sub directorymo khan
* chore: fix bin scripts
2020-10-06Parse composite license expressionsmo khan
* docs: Add changelog entry * fix: update spec to match expected behaviour
2020-10-05Perform scan from within dir containing `go.mod`mo khan
* fix: perform scan from within dir containing `go.mod` * docs: add changelog entry * test: add spec to reproduce defect
2020-09-14fix: export NODE_EXTRA_CA_CERTSv3.25.6mo khan
2020-09-10fix: export ASDF_JAVA_VERSION when invoking gradlemo khan
2020-08-21Install tools from .deb packagemo khan
2020-08-13Ensure drupal pkgs are detected correctlymo khan
* Use same composer.json and composer.lock file from issue * Check if vendor path exists before specifying env vars * Install php from deb package
2020-08-10Install mono from custom built deb filemo khan
* Ensure mono deb job completes successfully * Sync the CA certificates
2020-08-07Add limited network support for Cargo projectsmo khan
* Add test to scan cargo project with packages from a private registry * Synchronize mono cert store * Wipe nuget package cache before specs * Compress /usr/local/share * Exclude development dependencies * Add CHANGELOG entry
2020-08-06Package license management deb from deb jobmo khan
2020-08-04Parse lockfile when availablemo khan
2020-08-04Exclude dev dependenciesmo khan
* Add test to install composer packages from custom TLS endpoint * Remove dev dependencies from fixture files * Install composer packages in vendor_path * Bump version and update CHANGELOG
2020-07-22Combine default/custom certs in cacertmo khan
2020-07-21Update maven/gradle offline testsmo khan
* Let maven figure out the version of the license plugin that it is compatible with * Print the error when the setup fails * Add tests for multiple versions of maven and java * Install packages into a project specific directory to prevent cross test pollution * Specify the list of supported Maven versions * Update CHANGELOG and bump the version
2020-07-16Install mono/nuget at build timemo khan
* Install ca-certificates-mono * Download *.deb files to /opt/toolcache/mono
2020-07-16Install dotnet SDKmo khan
* Include the latest dotnet SDK in the /opt/asdf/installs directory. * Update CHANGELOG and bump version * Compress large directories
2020-07-14Fetch dependencies from a custom dotnet sourcemo khan
* Install custom ca certificate in location where nuget can recognize it * Add subject alternative name to the generate x509 cert * Do not cache packages and https requests * Detect vbproj, fsproj, csproj, and sln files * Improve nuget package detection * Parse SPDX license expression from nuspec files * Update version and update CHANGELOG
2020-07-11Return empty list when bundler scan failsv3.17.2mo khan
2020-07-11Reset bundler from sub directory pathsv3.17.1mo khan
2020-07-10Isolate license_management ruby from projectmo khan
* Target ruby version 2.7.1 * Add spec to fetch gems from a custom source * Add proxy to rubygems.org config * Specify default env vars to support offline environment * Cleanup custom certificates after spec * Inline docker-test script * Do not install license_finder with each installed ruby * Increase gem log verbosity and include backtrace * Extract test fixtures for the different ruby scenarios * Find *.gemspec files in gems dir * Use RUBYLIB to hijack src path * Run scan from project path dir
2020-07-09Remove GUI packages, install dotnet at scan timemo khan
2020-07-08Detect gems.rb and gems.lockedmo khan
2020-07-06Install gems from custom source with custom CAmo khan
* Bump version and add CHANGELOG entry * Configure Bundler logging * Include install_path of gem * Use gem summary and full_gem_path * Specify a vendor path to install dependencies to prevent leakage between tests and take advantage of build job cache
2020-06-05Launch the desired Java versionmo khan
2020-06-04List all dependencies that appear in go.modmo khan
* Update CHANGELOG and fix typo * Render severity based on exit code * Explicitly specify the default GOPROXY * Default to -mod=readonly and allow override * Do not modify `vendor` directory if it exists. * Skip `go mod tidy` to prevent modifying projects files. * Include dependencies that appear in go.mod but are not present in the vendor directory. * Remove severity from log output * Wipe golang module cache before each spec ```plaintext The -mod build flag provides additional control over updating and use of go.mod. If invoked with -mod=readonly, the go command is disallowed from the implicit automatic updating of go.mod described above. Instead, it fails when any changes to go.mod are needed. This setting is most useful to check that go.mod does not need updates, such as in a continuous integration and testing system. The "go get" command remains permitted to update go.mod even with -mod=readonly, and the "go mod" commands do not take the -mod flag (or any other build flags). If invoked with -mod=vendor, the go command loads packages from the main module's vendor directory instead of downloading modules to and loading packages from the module cache. The go command assumes the vendor directory holds correct copies of dependencies, and it does not compute the set of required module versions from go.mod files. However, the go command does check that vendor/modules.txt (generated by 'go mod vendor') contains metadata consistent with go.mod. If invoked with -mod=mod, the go command loads modules from the module cache even if there is a vendor directory present. If the go command is not invoked with a -mod flag and the vendor directory is present and the "go" version in go.mod is 1.14 or higher, the go command will act as if it were invoked with -mod=vendor. ``` - https://golang.org/cmd/go/#hdr-Maintaining_module_requirements
2020-05-29Specify CONAN_USER_USER and CONAN_RETRY* settingsmo khan
2020-05-29Allow custom conan configurationmo khan
* Use git fetch with a depth of 1 * Control Conan environment via environment variables * Allow specifying a custom CONAN_LOGIN_USERNAME and CONAN_PASSWORD * Specify a default CONAN_CACERT_PATH to point the system cert file * Tie CONAN_LOGGING_LEVEL to LOG_LEVEL * Tag and skip offline environment tests because it was shutdown * Add CHANGELOG entry
2020-05-26Scan Conan projectsmo khan
* Scan the conan examples project * Split licenses by comma * Add integration test job for c projects * Add package_manager, version and path to v2.1 report * Detect collisions between names from different package managers * Add CHANGELOG entry * Update README to indicate Conan support * Print timestamps in install script
2020-05-22Add functional tests to the pipelinemo khan
* Move jobs to gitlab-ci.yml files that match the stage they belong to. * Move linter job to build stage * Add functional test jobs * Reduce max size to 2 GB * Pass the current pipeline image to the downstream jobs * Replace `edge` tag with `latest` * Use $CI_DEFAULT_BRANCH instead of master * Move `.env*` files to config dir and update RELEASE instructions * Combine `tag` and `release` stages into `deploy` stage as recommended in GitLab docs * Make the `build-docker-image` job interruptible * Fix issues found in code quality report
2020-05-20Pass the `bower_ca` env variable to bowermo khan
2020-05-19Fetch bower dependencies from custom repo with custom cert chainmo khan
2020-05-19Exclude bower packagemo khan
2020-05-19Flatten dependenciesmo khan
2020-05-19Collect dependencies of dependencies in bower projectmo khan
2020-05-19Add --allow-root option to install stepmo khan
2020-05-15Pull yarn packages from a custom registrymo khan
2020-05-14Add frozen string literal pragmamo khan
2020-05-14Update command to work in all golang versionsmo khan
2020-05-14Use a separate command for each version of golangmo khan
2020-05-14Add specs for previous versions of golangmo khan
2020-05-14Update go list command to be compatible with 1.14mo khan
* Add missing packages to report fixtures
2020-05-13Fix linter errorsmo khan
2020-05-13Remove devDependencies from yarn scansmo khan
* Inline creation of PipPackage in legacy scan results * Add CHANGELOG entry
2020-05-05Use environment variable instead of changing global configurationmo khan
2020-05-04Add tests for js npm projectsmo khan
* Add tests for js projects with npm-lock.json file * Add specs for project that does not have a package-lock.json * Fix typo in loading fixture file content not path * Remove dev dependencies for expected js test reports * Add spec for using different engine * Add latest nodejs LTS * Cleanup files after install and disable NPM update checks * Install a .curlrc to remove progress meter * Export LOG_LEVEL=debug in dev mode * Update fixture files * Update to latest patch level of nodejs, php, python, ruby * Add CHANGELOG entry * Move prepare_javascript from bash to ruby
2020-04-29Allow gradle to fetch from TLS endpoint with custom certmo khan
* Add CHANGELOG entry * Avoid shell expansion errors * Add gradle-license-plugin to local gradle cache * Download gradle plugin dependencies and use backwards compatible syntax in init.gradle * Use latest gradle v2
2020-04-17Jump to global namespacemo khan
2020-04-17Remove gradle version checkmo khan
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-02 05:57:19 +0000