mawl

Confirm freeze on a dotnetcore project: ``` ort { analyzer { ignoreToolVersions = true allowDynamicVersions = true } scanner { skipConcluded = false storages { artifactoryStorage { backend { httpFileStorage...

https://github.com/semantic-release/semantic-release

@fviernau here is a small example: [gomod-embed-non-existing-file.zip](https://github.com/oss-review-toolkit/ort/files/9112543/gomod-embed-non-existing-file.zip) - i'm no go pro, but I can build it by running: ``` compile: image: golang:latest stage: build script: - mkdir -p mybinaries...

As a workaround I use following script before running oss review toolkit, which removes the go:embed directive from relevant files (Leaving // as a comment) `grep -rl --include \*.go --exclude-dir=vendor...

Same Problem here in a CI enviroment - I would like to remove images where container start events are older than a couple of weeks. @fr-sgujrati Using docker events sounds...

Here is an example project reproducing this issue. [package-project.zip](https://github.com/oss-review-toolkit/ort/files/9534206/package-project.zip) We had to use a local package approach for that as we usually publish our packages to our private registry.

@mnonnenmacher: I have provided an example. Do you have any news for us concerning the progress? Thanks.

@sschuberth: Same issue here. As you can see, username and password is shown in the log: ``` 7:14:27.367 [DefaultDispatcher-worker-3] DEBUG org.eclipse.aether.internal.impl.DefaultTransporterProvider - Using transporter HttpTransporter with priority 5.0 for https://repo.acme.de/artifactory/repo...

Issue is now fixed for us - bei using ``` # fix file permissions RUN chown -R ort:ort ${HOME} # use non-root user at runtime USER ort ``` in our...

I suspect maven has no permissions to create files under /home/ort/.m2/repository - but has read permissions on the settings.xml file.