antenna

antenna copied to clipboard

Support NPM artifacts by adding a format mapper.

bs-ondem

Change dependencies for sw360 client library and http support once SW360 is released and remove them here

1

With the merge of the sw360 client library into the SW360 Main Repository: https://github.com/eclipse/sw360/pull/1064 We are now waiting for https://github.com/eclipse/sw360/issues/981 to be done to be able to change the dependencies...

neubs-bsi

info: shifting JDK major versions in build pipeline

1

Why do we setup [JDK 8](https://github.com/eclipse/antenna/blob/7777c1196704cef1295614c9b6d4975a7a35fe49/.github/workflows/pull_request_build.yml#L47) after setting up [JDK 11](https://github.com/eclipse/antenna/blob/7777c1196704cef1295614c9b6d4975a7a35fe49/.github/workflows/pull_request_build.yml#L34) in the pipeline. And again we setup [JDK 11](https://github.com/eclipse/antenna/blob/7777c1196704cef1295614c9b6d4975a7a35fe49/.github/workflows/pull_request_build.yml#L84) at the end. It would be great if somebody can...

ohbus

The GitHub Actions [Antenna Build](https://github.com/eclipse/antenna/blob/7777c1196704cef1295614c9b6d4975a7a35fe49/.github/workflows/pull_request_build.yml#L10) has a security vulnerability which can be exploited to run scans for the project provided the pom has been been configured for the same. I...

ohbus

Consider using the Maven wrapper

2

As Antenna is [sensitive regarding the Maven version](https://github.com/eclipse/antenna#install-and-build-antenna) to be used for building, we should consider using the [Maven wrapper](https://github.com/takari/maven-wrapper) so that the correct Maven version is automatically used.

sschuberth

Rework of Artifact::mergeWith

1

### Summary of the Bug The `Artifact::mergeWith` method will not work correctly if there are two artifacts with the same coordinates and facts but different content. ### Steps to reproduce...

neubs-bsi

ORT Downloader: Update ORT dependency to match latest ORT Analyzer output

1

### Summary of the Bug It is not currently possible to use analyzer_result.yml files from the latest version of ORT as input to Antenna with the ORT Downloader enabled. When...

andreaslarfors

### Summary of the Bug Workflow isn't taken from a child pom at all. If a parent pom has a workflow defined in its tina plugin a workflow in a...

neubs-bsi

### Situation If one enters an SPDX Expression into any of the license columns in the CSV File, the string gets directly mapped onto a license. Hence statements like: `(...

neubs-bsi

### Summary of the Improvement Depends on: https://github.com/eclipse/antenna/issues/393 needs to be fixed first We have sw360 integration tests that could be added to Jenkins to test antenna.sw360 changes. If we...

neubs-bsi