summaryrefslogtreecommitdiff
path: root/spec/fixtures
AgeCommit message (Collapse)Author
2020-11-10fix: detect maven wrapper in sub directorymo khan
* chore: fix bin scripts
2020-11-05Update test fixturesmo khan
2020-10-21Update go modules fixture filesmo khan
Caused by: * https://gitlab.com/gitlab-org/security-products/tests/go-modules/-/merge_requests/59
2020-10-06Relocate projectmo khan
* chore: do not pass artifacts to downstream jobs * chore: expire artifacts * chore: point to new project_id * chore: remove after_script * refactor: rename license-management to license-finder * docs: Add changelog entry and update links to old repo
2020-10-06Add integration tests for rust-cargomo khan
2020-10-06Parse composite license expressionsmo khan
* docs: Add changelog entry * fix: update spec to match expected behaviour
2020-10-05test: add spec for python 3.4 projectmo khan
2020-10-05Perform scan from within dir containing `go.mod`mo khan
* fix: perform scan from within dir containing `go.mod` * docs: add changelog entry * test: add spec to reproduce defect
2020-09-10test: update test to fetch a single dependencymo khan
2020-09-10chore: tweak haproxy timeout settingsmo khan
2020-09-10chore: log http proxy and increment retriesmo khan
2020-09-10chore: Use modern version of haproxy for testsmo khan
2020-09-02Update conan fixturescan eldem
2020-08-21Install tools from .deb packagemo khan
2020-08-21Fix test fixtureTetiana Chupryna
2020-08-21Fix test issuesTetiana Chupryna
2020-08-21Fix failed testsTetiana Chupryna
2020-08-21Fix failed java specsTetiana Chupryna
2020-08-21Fix failed python specsTetiana Chupryna
2020-08-21Fix failed specsTetiana Chupryna
2020-08-21Fix some failed testsTetiana Chupryna
2020-08-18Update license_finder to 6.8.1mo khan
* Update CHANGELOG * Add default retry for all jobs * Ensure all deb packages are built
2020-08-17Update custom setup scriptmo khan
2020-08-13Ensure drupal pkgs are detected correctlymo khan
* Use same composer.json and composer.lock file from issue * Check if vendor path exists before specifying env vars * Install php from deb package
2020-08-07Add limited network support for Cargo projectsmo khan
* Add test to scan cargo project with packages from a private registry * Synchronize mono cert store * Wipe nuget package cache before specs * Compress /usr/local/share * Exclude development dependencies * Add CHANGELOG entry
2020-08-04Add spec to reproduce error in offline envmo khan
2020-08-05Update dotnet test fixturesmo khan
Related to changes in https://gitlab.com/gitlab-org/security-products/tests/csharp-nuget-dotnetcore/-/merge_requests/19
2020-08-04Exclude dev dependenciesmo khan
* Add test to install composer packages from custom TLS endpoint * Remove dev dependencies from fixture files * Install composer packages in vendor_path * Bump version and update CHANGELOG
2020-07-22Combine default/custom certs in cacertmo khan
2020-07-21Remove duplicate examplemo khan
2020-07-21Update maven/gradle offline testsmo khan
* Let maven figure out the version of the license plugin that it is compatible with * Print the error when the setup fails * Add tests for multiple versions of maven and java * Install packages into a project specific directory to prevent cross test pollution * Specify the list of supported Maven versions * Update CHANGELOG and bump the version
2020-07-15Add composer lock file for test project and fix failing buildmo khan
2020-07-14Fetch dependencies from a custom dotnet sourcemo khan
* Install custom ca certificate in location where nuget can recognize it * Add subject alternative name to the generate x509 cert * Do not cache packages and https requests * Detect vbproj, fsproj, csproj, and sln files * Improve nuget package detection * Parse SPDX license expression from nuspec files * Update version and update CHANGELOG
2020-07-10Isolate license_management ruby from projectmo khan
* Target ruby version 2.7.1 * Add spec to fetch gems from a custom source * Add proxy to rubygems.org config * Specify default env vars to support offline environment * Cleanup custom certificates after spec * Inline docker-test script * Do not install license_finder with each installed ruby * Increase gem log verbosity and include backtrace * Extract test fixtures for the different ruby scenarios * Find *.gemspec files in gems dir * Use RUBYLIB to hijack src path * Run scan from project path dir
2020-07-08Detect gems.rb and gems.lockedmo khan
2020-07-07Fix failing specmo khan
2020-07-06Install gems from custom source with custom CAmo khan
* Bump version and add CHANGELOG entry * Configure Bundler logging * Include install_path of gem * Use gem summary and full_gem_path * Specify a vendor path to install dependencies to prevent leakage between tests and take advantage of build job cache
2020-07-02Update version, CHANGELOG and READMEmo khan
* Install license_finder ~> 6.6 into default gems
2020-06-18Detect variations of the Eclipse Public Licensecan eldem
2020-06-08Use GOPROXY to test downloading modules for trusted and untrusted TLS endpointsmo khan
* Use haproxy to proxy to package registry * Install haproxy in setup script * Add markers for collapsible sections * Move ignored groups setup to prepare_project
2020-06-04List all dependencies that appear in go.modmo khan
* Update CHANGELOG and fix typo * Render severity based on exit code * Explicitly specify the default GOPROXY * Default to -mod=readonly and allow override * Do not modify `vendor` directory if it exists. * Skip `go mod tidy` to prevent modifying projects files. * Include dependencies that appear in go.mod but are not present in the vendor directory. * Remove severity from log output * Wipe golang module cache before each spec ```plaintext The -mod build flag provides additional control over updating and use of go.mod. If invoked with -mod=readonly, the go command is disallowed from the implicit automatic updating of go.mod described above. Instead, it fails when any changes to go.mod are needed. This setting is most useful to check that go.mod does not need updates, such as in a continuous integration and testing system. The "go get" command remains permitted to update go.mod even with -mod=readonly, and the "go mod" commands do not take the -mod flag (or any other build flags). If invoked with -mod=vendor, the go command loads packages from the main module's vendor directory instead of downloading modules to and loading packages from the module cache. The go command assumes the vendor directory holds correct copies of dependencies, and it does not compute the set of required module versions from go.mod files. However, the go command does check that vendor/modules.txt (generated by 'go mod vendor') contains metadata consistent with go.mod. If invoked with -mod=mod, the go command loads modules from the module cache even if there is a vendor directory present. If the go command is not invoked with a -mod flag and the vendor directory is present and the "go" version in go.mod is 1.14 or higher, the go command will act as if it were invoked with -mod=vendor. ``` - https://golang.org/cmd/go/#hdr-Maintaining_module_requirements
2020-05-29Ensure the correct license is detectedmo khan
2020-05-29Allow custom conan configurationmo khan
* Use git fetch with a depth of 1 * Control Conan environment via environment variables * Allow specifying a custom CONAN_LOGIN_USERNAME and CONAN_PASSWORD * Specify a default CONAN_CACERT_PATH to point the system cert file * Tie CONAN_LOGGING_LEVEL to LOG_LEVEL * Tag and skip offline environment tests because it was shutdown * Add CHANGELOG entry
2020-05-27Add tests for each report version when scanning conan projectsmo khan
2020-05-26Scan Conan projectsmo khan
* Scan the conan examples project * Split licenses by comma * Add integration test job for c projects * Add package_manager, version and path to v2.1 report * Detect collisions between names from different package managers * Add CHANGELOG entry * Update README to indicate Conan support * Print timestamps in install script
2020-05-22Add functional tests to the pipelinemo khan
* Move jobs to gitlab-ci.yml files that match the stage they belong to. * Move linter job to build stage * Add functional test jobs * Reduce max size to 2 GB * Pass the current pipeline image to the downstream jobs * Replace `edge` tag with `latest` * Use $CI_DEFAULT_BRANCH instead of master * Move `.env*` files to config dir and update RELEASE instructions * Combine `tag` and `release` stages into `deploy` stage as recommended in GitLab docs * Make the `build-docker-image` job interruptible * Fix issues found in code quality report
2020-05-20Specify license of maven packagemo khan
2020-05-20Detect maven package from the same GL projectmo khan
2020-05-20Upload maven package to GL repo for testingmo khan
2020-05-19Fetch bower dependencies from custom repo with custom cert chainmo khan
generated by cgit v1.2.3 (git 2.39.1) at 2026-02-02 05:37:31 +0000