Parse Python licenses from LicenseFile entry in the Wheel Metadata #2331
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
coheigea
force-pushed
the
coheigea/python-LicenseFile
branch
from
ea57de1
to
1a11adc
Compare
wagoodman
reviewed
Nov 16, 2023
Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
coheigea
force-pushed
the
coheigea/python-LicenseFile
branch
from
1a11adc
to
c1ce3b0
Compare
|
bump for a review @wagoodman |
|
Reminder on this one please @spiffcs @wagoodman |
spiffcs
approved these changes
Dec 13, 2023
spiffcs
added a commit
to LaurentGoderre/syft
that referenced
this pull request
Dec 18, 2023
* main: (30 commits) Add binary classifier for the ERLang interpretter (anchore#2417) Add binary classifier for Julia lang (anchore#2427) Add binary detection for PHP composer (anchore#2432) chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (anchore#2433) chore(deps): update CPE dictionary index (anchore#2442) chore(deps): update stereoscope to 4b999b76ca8901d15bb97aef445dc94c38d11d5c (anchore#2440) fix syft-json test to use pretty json for snapshot testing (anchore#2441) refactor pkg.Collection (anchore#2439) refactor javascript cataloger to use configuration options when creating packages (anchore#2438) use single source of truth for archive options (anchore#2437) fix file digest cataloger when passed coordinates (anchore#2436) chore(deps): bump github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0 (anchore#2413) Look for a maven version in a pom from a parent dependency management section (anchore#2423) Parse Python licenses from LicenseExpression entry in the Wheel Metadata (anchore#2431) chore(deps): bump github/codeql-action from 2.22.10 to 3.22.11 (anchore#2430) chore(deps): bump modernc.org/sqlite from 1.27.0 to 1.28.0 (anchore#2429) chore(deps): update tools to latest versions (anchore#2428) Parse Python licenses from LicenseFile entry in the Wheel Metadata (anchore#2331) fix: use filepath instead of path for file source exclusions (anchore#2411) chore(deps): bump github.com/charmbracelet/bubbletea (anchore#2424) ...
GijsCalis
pushed a commit
to GijsCalis/syft
that referenced
this pull request
Feb 19, 2024
…nchore#2331) Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Syft only finds Python licenses if the Wheel metadata contains a "License" entry. This PR adds support to also parse the License-File entry. With this PR, Syft finds licenses for these packages:
Further PRs will follow with enhanced support.