Nicolas Nobelis

The user can define multiple registry URLs in the `.bazelrc` file: ``` # Internal registry for custom packages common --registry=file://%workspace%/tools/bazelbuild/registry/ # fall back to Bazel Central Registry common --registry=https://raw.githubusercontent.com/bazelbuild/bazel-central-registry/main/ ```...

Buildozer: Cannot print `path`of a `local_path_override` rule

5

I have a `MODULE.bazel` file with a `local_path_override`: ``` local_path_override( module_name = "test_module", path = "./modules/test_module", ) ``` When I run `buildozer 'print module_name path' //MODULE.bazel:%local_path_override` to get the value...

Bazel: Support `local_path` type in package metadata

1

When a local registry is configured in a Bazel project (for instance https://github.com/oss-review-toolkit/ort/tree/main/plugins/package-managers/bazel/src/funTest/assets/projects/synthetic/bazel-local-registry), the source code of some packages present in the local registry can be in the same repository....

Python Inspector does not support comments in `.netrc` files

8

Running Python-inspector version 0.9.3 on Debian Stable. Using this `.netrc` file ``` machine example.com login foo password bar #machine github.com login foo password bar default login foo password bar ```...

Snippet Model cannot be mapped from FossID multiline range matching

18

Currently, for performance reasons (see https://github.com/oss-review-toolkit/ort/issues/7028), the matched lines are not fetched from FossID. However it seems the current snippet model is not capable of representing certain FossID responses. For...

FossID API for matched line needs to be improved.

3

This ticket is following a discussion at https://github.com/oss-review-toolkit/ort/pull/7022#discussion_r1200165856. When listing the snippets through FossID API, FossID return each snippet with such a payload (in the _highlighting_ property) : ``` {...

Suse scores importer should support version 4

8

Given a sample Suse score https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml: ``` CVE-2024-35255: cvss: - version: 3.1 score: 5.5 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - version: 4 score: 6.8 vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N ``` The version 4 cvss is not...