Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

helper-cli: Allow to specify purls in package lists used for creating analyzer results #9529

Merged
merged 3 commits into from
Dec 2, 2024
Merged

helper-cli: Allow to specify purls in package lists used for creating analyzer results #9529

merged 3 commits into from
Dec 2, 2024

Commits on Dec 2, 2024

  1. feat(helper-cli): Change a construction to not use EMPTY.copy() 

    Call the constructor directly, in order to make use of the default
values `purl = id.toPurl()` and `vcsProcessed = vcs.normalize()`. This
has the effect that `purl` is not empty anymore, but set to the above
mentioned default value derived from the `id`.

This enables using the analyzer results created by this helper command
as-is as input for purl-based advisors.

Signed-off-by: Frank Viernau <[email protected]>
    @fviernau
    fviernau committed Dec 2, 2024
    Configuration menu
    Copy the full SHA
    cf7361a View commit details
    Browse the repository at this point in the history

  2. feat(helper-cli): Extend the PackageList by a purl 

    The `CreateAnalyzerResultFromPackageListCommand` can be used for
projects which do not use a package manager supported by ORT or at all.

In this case the currently used value `purl = id.toPurl()` always
yields a `purl` with the type `generic`. This is not always optimal.
For example, for dependencies of a CMAKE project the purl type `github`
can be more suitable for dependencies hosted on GitHub. Setting the
purl manually via the `PackageList` allows to use the created analyzer
result as-is with any purl-based advisor.

Signed-off-by: Frank Viernau <[email protected]>
    @fviernau
    fviernau committed Dec 2, 2024
    Configuration menu
    Copy the full SHA
    b7f4171 View commit details
    Browse the repository at this point in the history

  3. chore(mailmap): Add Frank's Zeiss e-mail address 

    Signed-off-by: Frank Viernau <[email protected]>
    @fviernau
    fviernau committed Dec 2, 2024
    Configuration menu
    Copy the full SHA
    dcde910 View commit details
    Browse the repository at this point in the history