Michele Scarlato

Results 12 comments of Michele Scarlato

Can I have a look at the branches that still trigger the **Build and push the license feeder Docker image** and **Build and push the python license detector Docker image**...

> Hello, the root cause of the issue are those 3 lines at the deployment files: > > https://github.com/fasten-project/fasten/blob/da66973a2a731809ca0b0a2f4fad99c348dd227e/.github/workflows/docker-license-detector-plugin.yml#L13-L15 > > More specifically, in both [ Build and push the...

Hi there, I performed the modification suggested by @gdrosos Giorgos. I merged [this branch](https://github.com/fasten-project/fasten/pull/460) with the proposed modification.

Well, to perform license compliance verification (which is done through another service, called LCV) we need to get the data from the metadata field and parse them. Isolating the content...

That is what I am currently doing. Are the APIs still down? I am mocking many things while writing the PyPI plugin code.

Sorry guys (@MagielBruntink @mir-am @gdrosos ), If a package/packageVersion is not available on FASTEN, is it correct to receive a 404? I thought we should provide a 500 error for...

@MagielBruntink , thanks for the input. A follow-up question is: - when the license detector consumes the [`fasten.MetadataDBExtension.out`](https://github.com/fasten-project/fasten/wiki/Kafka-Topics#fastenmetadatadbextension), where will it find the `sourcesUrl` that you indicated to me [here](https://github.com/fasten-project/fasten/blob/fd0e82ac5524d3b5b17c92a4a9234f7f910a5bd0/analyzer/vulnerability-packages-listener/src/test/resources/real-pom-analyzer-message.json#L17)?...

Hi @MagielBruntink Magiel, I am integrating the portion of code that you are suggesting [here](https://github.com/fasten-project/fasten/blob/debian-license-collector/analyzer/debian-license-detector/src/main/java/eu/fasten/analyzer/debianlicensedetector/DebianLicenseDetectorPlugin.java#L359) and [here](https://github.com/fasten-project/fasten/blob/debian-license-collector/analyzer/debian-license-detector/src/main/java/eu/fasten/analyzer/debianlicensedetector/DebianLicenseDetectorPlugin.java#L383) (I need to extract the package name and the package version, in Debian)....

The Java license detector made heavy use of the messages produced by the RepoCloner. Unfortunately, modifications to the detector's code are required to adapt it to a new approach. Also,...