dejacode
dejacode copied to clipboard
aboutcode-org
Automate open source license compliance and ensure software supply chain integrity
It should be possible to contribute curations directly from the CRAVEX UI.
**Describe the bug** Users that are assigned to the "Legal" group and have _Staff Status_ enable, currently posses the following permissions among others, as documented by the permission matrix: -...
See https://github.com/OpenChain-Project/SBOM-sg-SEPIA by @HansMKern and team It will provide a mapping between SPDX and CycloneDX. Since we can already read/combine/merge and write back SPDX and CycloneDX here in DejaCode and...
**Is your enhancement request related to a problem? Please describe.** Currently, DejaCode attempts to convert the PURL to a URL in order to submit a scan to ScanCode.io. Since PURLs...
**Describe the bug** It appears that importing an SBOM that contains a mix of npm and Maven packages only results in npm packages being scanned by ScanCode.io. It seems that...
As SBOMs start to get some adoption, we should consider using SPDX license identifiers for display and reporting throughout the AboutCode stack and demote our own license keys as secondary....
It would be great to support lifecycle events at the product level. For instance, when I have a portfolio of products and product releases: - some products are end-of-life -...
**Is your enhancement request related to a problem? Please describe.** Products may have vulnerabilities in their own source code, not just in their dependencies. The Cyber Resilience Act mandates that...
**Is your enhancement request related to a problem? Please describe.** I would like to see in vulnerabilities the package versions sorted with the ones with a non vulnerable "actionable" version...
**What type of documentation would you like?** Details on integration of PurlDB and Vulnerable Code: https://dejacode.readthedocs.io/en/latest/application-settings.html **Documentation topic** When running DejaCode it by default connects to public instances of PurlDB...
Metadata
Owner
Metadata
Automate open source license compliance and ensure software supply chain integrity