Sebastian Schuberth

icon indicating a website link https://www.doubleopen.org/

icon company CTO of @doubleopen-project icon location Berlin, Germany icon location A Kotlin enthusiast who's enjoying to work with and on Open Source Software.

Results 1424 comments of Sebastian Schuberth

Converge OSV-Scanner OSV-Scalibr feature set

> This is complete! Should the boxes in the top post then also be ticked for completeness, @another-rex?

Make handling of package configuration files consistent with handling of package curation files

> The options for configurations use singular And that's probably because we actually use `readValue()` pretty much everywhere except for `FilePackageConfigurationProvider` where we use `readValue()`. Which means our code is...

Make handling of package configuration files consistent with handling of package curation files

This has been partly addressed in https://github.com/oss-review-toolkit/ort/pull/6858.

Support OSSelot as a curation provider

> There is no API By now there is, see https://wiki.osselot.org/index.php/REST. However, that "API" only gets us SPDX files in different formats.

Report detected root licenses as a fallback in the SPDX `licenseDeclared` field

@fviernau can we proceed with this? I'd really like to have the feature finally merged after 2 weeks.

Extend the advisor with Static Application Security Testing (SAST)

To start with, we should probably do [like GitLab does](https://docs.gitlab.com/ee/user/application_security/sast/index.html#supported-languages-and-frameworks) and use Semgrep for pretty much everything.

Provide a small self-contained analyzer-only distribution of ORT

Work on this has been started in https://github.com/oss-review-toolkit/ort/pull/10048.

Improve the SCANOSS integration in ORT

> Find a way to query the SCANOSS server version Hey @scanossjs, @eeisegn, is there currently an API endpoint for that?

Improve the SCANOSS integration in ORT

> > Find a way to query the SCANOSS server version > > Hey @scanossjs, @eeisegn, is there currently an API endpoint for that? Or @scanossjeronimo maybe?

Improve the SCANOSS integration in ORT

The new plan is to address this differently, my migrating from https://github.com/scanoss/scanner.java to https://github.com/scanoss/scanoss.java as a client, replacing ORT's own one.