summaryrefslogtreecommitdiff
path: root/lib/license/management.rb
AgeCommit message (Collapse)Author
2020-10-06Parse composite license expressionsmo khan
* docs: Add changelog entry * fix: update spec to match expected behaviour
2020-08-21Install tools from .deb packagemo khan
2020-08-06Package license management deb from deb jobmo khan
2020-07-16Install mono/nuget at build timemo khan
* Install ca-certificates-mono * Download *.deb files to /opt/toolcache/mono
2020-07-14Fetch dependencies from a custom dotnet sourcemo khan
* Install custom ca certificate in location where nuget can recognize it * Add subject alternative name to the generate x509 cert * Do not cache packages and https requests * Detect vbproj, fsproj, csproj, and sln files * Improve nuget package detection * Parse SPDX license expression from nuspec files * Update version and update CHANGELOG
2020-06-23Print gem version in log outputmo khan
2020-06-04List all dependencies that appear in go.modmo khan
* Update CHANGELOG and fix typo * Render severity based on exit code * Explicitly specify the default GOPROXY * Default to -mod=readonly and allow override * Do not modify `vendor` directory if it exists. * Skip `go mod tidy` to prevent modifying projects files. * Include dependencies that appear in go.mod but are not present in the vendor directory. * Remove severity from log output * Wipe golang module cache before each spec ```plaintext The -mod build flag provides additional control over updating and use of go.mod. If invoked with -mod=readonly, the go command is disallowed from the implicit automatic updating of go.mod described above. Instead, it fails when any changes to go.mod are needed. This setting is most useful to check that go.mod does not need updates, such as in a continuous integration and testing system. The "go get" command remains permitted to update go.mod even with -mod=readonly, and the "go mod" commands do not take the -mod flag (or any other build flags). If invoked with -mod=vendor, the go command loads packages from the main module's vendor directory instead of downloading modules to and loading packages from the module cache. The go command assumes the vendor directory holds correct copies of dependencies, and it does not compute the set of required module versions from go.mod files. However, the go command does check that vendor/modules.txt (generated by 'go mod vendor') contains metadata consistent with go.mod. If invoked with -mod=mod, the go command loads modules from the module cache even if there is a vendor directory present. If the go command is not invoked with a -mod flag and the vendor directory is present and the "go" version in go.mod is 1.14 or higher, the go command will act as if it were invoked with -mod=vendor. ``` - https://golang.org/cmd/go/#hdr-Maintaining_module_requirements
2020-05-13Remove devDependencies from yarn scansmo khan
* Inline creation of PipPackage in legacy scan results * Add CHANGELOG entry
2020-04-17Change logger formatter to reduce unnecessary outputmo khan
2020-04-03Install root certificatemo khan
* Install certificate in root ca trust store * Use PIP_CERT environment variable to specify path to the certificate bundle * Do not override user provided PIP_CERT * Perform shallow clone when possible * Update CHANGELOG and bump version
2020-04-02Add option to change the log levelmo khan
* Add CHANGELOG entry and bump version * Change default log level to `warn` * Log stderr output if exit status is not successful
2020-04-01Pull package info from sources in Pipfile.lockmo khan
* Exclude dependencies in "develop" group" * Install pipenv by default * Use .venv to match the default location as pipenv * Use pip-licenses to detect licenses in Pipfile project * Add variation of the MIT License * Redirect asdf install stdout to /dev/null * Add CHANGELOG entry and bump version
2020-03-30Use virtualenv, pip-licenses to scan projectsmo khan
* Add PIL License to list of normalized licenses * Update Python 3 v2.0 report fixture * Add CHANGELOG entry * Define local variables in bash functions * Ensure `SETUP_CMD` continues to work for python projects * build virtualenv app-data cache * Fallback to legacy scanner when SETUP_CMD is used * Extract Shell class to be able to pass custom env
2020-03-26Install pip packages from a custom indexmo khan
* Read PIP_INDEX_URL to identify where to download packages from
2020-03-20Install maven packages for multi-module setupmo khan
* Install packages when multiple maven modules are detected * Add CHANGELOG entry * Install gem silently * Add package manager to test description * Sort paths
2020-03-07Move license finder overrides to ext.rbmo khan
2020-03-07Fix nuget specsmo khan
2020-02-27Install mono-complete for Net.HTTP libraries so NuGet can make API callsmo khan
2020-02-27monkey patch class methodsmo khan
2020-02-27Skip mono and use nuget packagemo khan
2020-02-18Remove temporary monkey patch needed before the 5.9.2 upgrademo khan
2020-02-18Remove Pipfile overridesmo khan
2020-01-15Move files to python foldermo khan
2020-01-15Centralize access to HTTP to turn on airgap mode easilymo khan
2020-01-15Add functional tests for python Pipfile.lockmo khan
2020-01-15Inject the Pipenv package managermo khan
2019-10-25Monkey patch bundler to detect in sub directoriesmo khan
* Details can be found [here](https://gitlab.com/gitlab-org/gitlab/issues/13748#note_235810786)
2019-08-21Move version classes to Report namespacemo khan
2019-08-19Apply changes from ↵mo khan
https://gitlab.com/gitlab-org/security-products/license-management/merge_requests/50
2019-08-15insert shim to generate report via ruby APImo khan
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-02 10:44:14 +0000