summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2020-09-09Change references to Go to version 1.15.1Evan Read
2020-09-07fix: Update tool plugin to fetch latest version definitionsv3.25.1mo khan
2020-09-07Require Go 1.15.1 for projectEvan Read
2020-08-21Install tools from .deb packagemo khan
2020-08-21Patch url for not specified BSD licenseTetiana Chupryna
2020-08-18Update license_finder to 6.8.1mo khan
* Update CHANGELOG * Add default retry for all jobs * Ensure all deb packages are built
2020-08-16Update CHANGELOGmo khan
2020-08-13Ensure drupal pkgs are detected correctlymo khan
* Use same composer.json and composer.lock file from issue * Check if vendor path exists before specifying env vars * Install php from deb package
2020-08-12Explicitly source bashrcmo khan
In some cases the '$HOME' environment variable is overwritten in the runtime environment. This occurred when running this image in a OpenShift environment.
2020-08-10Update CHANGELOGmo khan
2020-08-10Install mono from custom built deb filemo khan
* Ensure mono deb job completes successfully * Sync the CA certificates
2020-08-10Unpack Rust deb package before asdf installmo khan
2020-08-07Add limited network support for Cargo projectsmo khan
* Add test to scan cargo project with packages from a private registry * Synchronize mono cert store * Wipe nuget package cache before specs * Compress /usr/local/share * Exclude development dependencies * Add CHANGELOG entry
2020-08-06Update CHANGELOGmo khan
2020-08-06Package license management deb from deb jobmo khan
2020-08-04Update CHANGELOGmo khan
2020-08-04Parse lockfile when availablemo khan
2020-08-05Update dotnet test fixturesmo khan
Related to changes in https://gitlab.com/gitlab-org/security-products/tests/csharp-nuget-dotnetcore/-/merge_requests/19
2020-08-04Exclude dev dependenciesmo khan
* Add test to install composer packages from custom TLS endpoint * Remove dev dependencies from fixture files * Install composer packages in vendor_path * Bump version and update CHANGELOG
2020-07-30Set .tool-versions to latest GoEvan Read
2020-07-22Update CHANGELOG and bump versionmo khan
2020-07-22Combine default/custom certs in cacertmo khan
2020-07-21Update maven/gradle offline testsmo khan
* Let maven figure out the version of the license plugin that it is compatible with * Print the error when the setup fails * Add tests for multiple versions of maven and java * Install packages into a project specific directory to prevent cross test pollution * Specify the list of supported Maven versions * Update CHANGELOG and bump the version
2020-07-16Install mono/nuget at build timemo khan
* Install ca-certificates-mono * Download *.deb files to /opt/toolcache/mono
2020-07-16Install dotnet SDKmo khan
* Include the latest dotnet SDK in the /opt/asdf/installs directory. * Update CHANGELOG and bump version * Compress large directories
2020-07-15Add composer lock file for test project and fix failing buildmo khan
2020-07-14Fetch dependencies from a custom dotnet sourcemo khan
* Install custom ca certificate in location where nuget can recognize it * Add subject alternative name to the generate x509 cert * Do not cache packages and https requests * Detect vbproj, fsproj, csproj, and sln files * Improve nuget package detection * Parse SPDX license expression from nuspec files * Update version and update CHANGELOG
2020-07-11Return empty list when bundler scan failsv3.17.2mo khan
2020-07-11Reset bundler from sub directory pathsv3.17.1mo khan
2020-07-10Isolate license_management ruby from projectmo khan
* Target ruby version 2.7.1 * Add spec to fetch gems from a custom source * Add proxy to rubygems.org config * Specify default env vars to support offline environment * Cleanup custom certificates after spec * Inline docker-test script * Do not install license_finder with each installed ruby * Increase gem log verbosity and include backtrace * Extract test fixtures for the different ruby scenarios * Find *.gemspec files in gems dir * Use RUBYLIB to hijack src path * Run scan from project path dir
2020-07-09Bump versionmo khan
2020-07-09Remove GUI packages, install dotnet at scan timemo khan
2020-07-08Detect gems.rb and gems.lockedmo khan
2020-07-07Add new line to bypass log line prefixmo khan
2020-07-06Install gems from custom source with custom CAmo khan
* Bump version and add CHANGELOG entry * Configure Bundler logging * Include install_path of gem * Use gem summary and full_gem_path * Specify a vendor path to install dependencies to prevent leakage between tests and take advantage of build job cache
2020-07-02Update version, CHANGELOG and READMEmo khan
* Install license_finder ~> 6.6 into default gems
2020-06-26Update Java to match new naming conventionmo khan
2020-06-23Print gem version in log outputmo khan
2020-06-23Bump version and add CHANGELOG entrymo khan
2020-06-18Bump version and add spec for LGPL-2.1mo khan
2020-06-16Bump version and MR # to CHANGELOGmo khan
2020-06-08Use GOPROXY to test downloading modules for trusted and untrusted TLS endpointsmo khan
* Use haproxy to proxy to package registry * Install haproxy in setup script * Add markers for collapsible sections * Move ignored groups setup to prepare_project
2020-06-05Update CHANGELOG and bump versionmo khan
2020-06-05Launch the desired Java versionmo khan
2020-06-04List all dependencies that appear in go.modmo khan
* Update CHANGELOG and fix typo * Render severity based on exit code * Explicitly specify the default GOPROXY * Default to -mod=readonly and allow override * Do not modify `vendor` directory if it exists. * Skip `go mod tidy` to prevent modifying projects files. * Include dependencies that appear in go.mod but are not present in the vendor directory. * Remove severity from log output * Wipe golang module cache before each spec ```plaintext The -mod build flag provides additional control over updating and use of go.mod. If invoked with -mod=readonly, the go command is disallowed from the implicit automatic updating of go.mod described above. Instead, it fails when any changes to go.mod are needed. This setting is most useful to check that go.mod does not need updates, such as in a continuous integration and testing system. The "go get" command remains permitted to update go.mod even with -mod=readonly, and the "go mod" commands do not take the -mod flag (or any other build flags). If invoked with -mod=vendor, the go command loads packages from the main module's vendor directory instead of downloading modules to and loading packages from the module cache. The go command assumes the vendor directory holds correct copies of dependencies, and it does not compute the set of required module versions from go.mod files. However, the go command does check that vendor/modules.txt (generated by 'go mod vendor') contains metadata consistent with go.mod. If invoked with -mod=mod, the go command loads modules from the module cache even if there is a vendor directory present. If the go command is not invoked with a -mod flag and the vendor directory is present and the "go" version in go.mod is 1.14 or higher, the go command will act as if it were invoked with -mod=vendor. ``` - https://golang.org/cmd/go/#hdr-Maintaining_module_requirements
2020-05-29Specify CONAN_USER_USER and CONAN_RETRY* settingsmo khan
2020-05-29Allow custom conan configurationmo khan
* Use git fetch with a depth of 1 * Control Conan environment via environment variables * Allow specifying a custom CONAN_LOGIN_USERNAME and CONAN_PASSWORD * Specify a default CONAN_CACERT_PATH to point the system cert file * Tie CONAN_LOGGING_LEVEL to LOG_LEVEL * Tag and skip offline environment tests because it was shutdown * Add CHANGELOG entry
2020-05-26Scan Conan projectsmo khan
* Scan the conan examples project * Split licenses by comma * Add integration test job for c projects * Add package_manager, version and path to v2.1 report * Detect collisions between names from different package managers * Add CHANGELOG entry * Update README to indicate Conan support * Print timestamps in install script
2020-05-22Add functional tests to the pipelinemo khan
* Move jobs to gitlab-ci.yml files that match the stage they belong to. * Move linter job to build stage * Add functional test jobs * Reduce max size to 2 GB * Pass the current pipeline image to the downstream jobs * Replace `edge` tag with `latest` * Use $CI_DEFAULT_BRANCH instead of master * Move `.env*` files to config dir and update RELEASE instructions * Combine `tag` and `release` stages into `deploy` stage as recommended in GitLab docs * Make the `build-docker-image` job interruptible * Fix issues found in code quality report
2020-05-20Update CHANGELOGmo khan
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-02 14:50:31 +0000