porsche-rishisaxena

Implement a "delta-analysis" of only the changed dependencies in a given project

17

Is there any road-map designed for enabling "delta-scan" feature for Scan-Code from ORT standpoint? If yes, please share some information. *Edit* by @sschuberth: Please see this [comment](https://github.com/oss-review-toolkit/ort/issues/4347#issuecomment-904263650) which clarifies that...

Support Black Duck Hub as a snippet scanner

6

As ORT is an orchestrator, it should allow to configure BlackDuck as scanner where code snippet can be scanned and result can be stored in ORT backend storage i.e. PostgreSQL...

Yarn :: Analyzer is reading Packages package.json scopes wrongly

6

We have a root level package.json and package directory have their respective package.json. When analyzer is executed on the root level, the scopes (devdependencies Vs dependencies) are written wrongly in...

Path Excludes not working when workspaces are introduced in the code repository based on NPM, PNPM, Yarn2

3

### Describe the bug Path Excludes not working when workspaces are introduced in the code repository based on NPM, PNPM, Yarn2. ### To Reproduce Steps to reproduce the behavior: 1....

ORT Docker File :: Security Vulnerability Identified

2

### Describe the bug Docker Image of ORT stored in AWS ECR detected with security vulnerabilities ### Expected behavior Resolve or have minimal vulnerabilities to be compliant from security standpoint...