mawl

GoMod: go list -deps error: no matching files found

4

Hey, We have an issue with the GoMod Package Manager ``` 10:35:45.499 [DefaultDispatcher-worker-1] ERROR org.ossreviewtoolkit.analyzer.managers.GoMod - Resolving GoMod dependencies for path 'go.mod' failed with: IOException: Running 'go list -deps -f...

How to suppress the error "AnalyzerResult contains packages that are also projects."

3

Hey, How can we suppress following error concerning npm dependencies in a monorepo? Some of the dependencies are also projects in it. ``` 07:18:50.479 [DefaultDispatcher-worker-4] ERROR org.ossreviewtoolkit.analyzer.AnalyzerResultBuilder - Multiple projects...

dependency-track high cpu usage

4

### Current Behavior:   ### Expected Behavior: No high cpu usage, no cascading effect. ### Environment: - Dependency-Track Version: 4.3.6 apiserver, 4.3.1 frontend - Distribution: docker-compose - Database Server:...

apache-2.0: are there plans to handle the content of a NOTICE file?

11

Hey, We've got a question from a customer if it would be possible to print out the content of NOTICE files in NOTICE_default or other freemarker based output along with...

gitsign verify command throws error getting certificate root: error getting targets: error getting target fulcio_intermediate_v1.crt.pem

4

Hey, Making my first steps with gitsign on windows, installed with chocolatey. My config: ``` git config --local commit.gpgsign true git config --local tag.gpgsign true git config --local gpg.x509.program gitsign...

When converting cyclonedx xml to json and a dependency has multiple licenses, only the first license is taken into account

1

When converting a cyclonedx.xml to json and a dependency/component has multiple licenses, only the first license is taken into account. ``` cyclonedx-cli convert \ --input-format xml \ --input-file ${ORT_OUTPUT_DIR}/bom.cyclonedx.xml \...

Support licenses without spdx ids; add scancode LicenseDB as an additional datasource

5

Hi there, First of all, dependency-track is a great piece of software - thanks for your work. ### Current Behavior: Actually only licenses with spdx ids are supported. ### Proposed...

Enhancement: docker pull rate limits - missing option to set registry mirror during cri-o install / sysbox-k8s-deploy

2

Because of the docker subscription changes: https://www.docker.com/pricing/november-2024-subscription-changes/ Can you please provide an option to set custom docker registry mirrors? This would significantly lower the amount of pull requests against hub.docker.com/docker.io:...

Hey, gitlab-runner v17.8.0 had some critical bugs: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/38496 what hits us was: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/38496 Please provide v17.8.3 as additional chocolatey package. Thanks and regards.

Large Memory Consumption with Cargo Workspace

4

Hey, One of your teams has a Cargo monorepo project containing 1 virtual workspace Cargo.toml and around 21 child Cargo.toml files, some of which belong to the workspace and some...