scancode.io

scancode.io copied to clipboard

There are a few ways to look at this: - multiple images with a docker compose - single image (pulp style) with only docker - some wrapper script to make...

pombredanne

SCIO: Lookup/fetch and match base image for containers and windows containers

1

Find way to lookup Windows container layers in the Docker of mcr registry APIs For instance https://mcr.microsoft.com/v2/windows/manifests/10.0.17763.5576-amd64 is for a windows image version 10.0.17763.5576 on amd64 It may require to...

pombredanne

Search box in resource page is too small

1

I find that the search box in the resource page of a project is quickly very small and is therefore hard to use at times.

pombredanne

OrganizationalEntity validation error while loading CycloneDX SBOM

1

Empty values properties such as `{"supplier":{"name":""}` raise an exception.

tdruez

``` $ pip install source-inspector==0.5.1 Collecting source-inspector==0.5.1 Collecting tree-sitter==0.22.0 (from source-inspector==0.5.1) Using cached tree_sitter-0.22.0-cp312-cp312-macosx_11_0_arm64.whl.metadata (10 kB) INFO: pip is looking at multiple versions of source-inspector to determine which version is...

tdruez

- This would expect that clamav is installed and in the path - We should run clamscan on the extracted codebase - If there are viruses detected, we should report...

pombredanne

Currently we have different mapper functions for every ecosystem/process. We should move to a more abstract way of doing this. Consider this commit as an example https://github.com/nexB/scancode.io/pull/1170/commits/1c08d6ff22914e5df2d033f01a44b9060fadd792 This is a...

TG1999

Currently we are doing D2d in a serialized manner, but we should shift to an asynchronous way.

TG1999

Parts of the latest CycloneDX specs (1.5, 1.6) are not supported by `cyclonedx-python-lib`

1

For example, the `metadata.tools` as an array was deprecated in 1.5 and replaced by an object structure where you can define a list of `components` and `services`. The issue is...

tdruez

Use webpack'ed JS app as test case for d2d

1

See - source: https://github.com/microsoft/monaco-editor/archive/refs/tags/v0.47.0.tar.gz#from - binary: https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.47.0.tgz#to

pombredanne