microsoft
/
component-detection
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
707 коммитов 47 Ветки 137 Теги 18 MiB
Граф коммитов

707 Коммитов

Автор SHA1 Сообщение Дата
Sebastian Gomez 293fc608ed
Add Author/License to LinuxComponent (#934) 
* Add Author/License to LinuxComponent

* Add unit test. Remove comment

* Increase coverage.

* Feedback

* Fix. Only Author and License are nullable.

---------

Co-authored-by: Sebastian Gomez <segomez@microsoft.com>
 2023-12-19 11:53:19 -08:00
Sebastian Gomez ce76f5df26
Adds an entry point for the sbom-tool use the ScanCommand class. (#936) 
* Add Author/License to LinuxComponent

* Add method to scan that returns a ScanResult Object

* Revert "Add Author/License to LinuxComponent"

This reverts commit 643dc09393.

* Add unit tests

---------

Co-authored-by: Sebastian Gomez <segomez@microsoft.com>
 2023-12-19 11:17:37 -08:00
Fernando Rojo d4ca976992
Fix exit code check and virtual manifest parsing (RustCli) (#937) 
* Fix exit code check and virtual manifest break

* Update test
 2023-12-19 10:25:49 -08:00
Fernando Rojo ae7438f86c
Enable Experimental Rust and update telemetry (#931) 
* Enable Experimental Rust and update telemetry
 2023-12-07 22:07:42 -07:00
Greg Villicana 5f21f73f73
Promote NPM Lockfile v3 detector to run by default (#924) 2023-12-01 14:25:33 -08:00
renovate[bot] 4eb61d8c37
chore(deps): update dotnet monorepo (#892) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-01 21:39:24 +00:00
renovate[bot] 33e6eb334b
chore(deps): update actions/github-script action to v7 (#898) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-12-01 21:30:01 +00:00
Coby Allred b4def4c25b
Resolve Pip TryAdd exception on duplicates (#920) 
Co-authored-by: Coby Allred <coallred@microsoft.com>
 2023-12-01 08:54:37 -08:00
dependabot[bot] 5b5df20cfb
build(deps): bump github/codeql-action from 2.22.6 to 2.22.8 (#913) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.6 to 2.22.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](689fdc5193...407ffafae6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Coby Allred <cobyallred@gmail.com>
 2023-11-30 18:59:34 +00:00
Michael Loughry 2455e9bd35
Skip detection of workspace projects in Yarn detector (#915) 
* Potential fix for very large monorepos with yarn berry

* Update detector version

* Rename YarnLockVersion.V2 to YarnLockVersion.Berry

* Update CONTRIBUTING.md

* Add functional tests

---------

Co-authored-by: OWA Framework <owaframe@microsoft.com>
 2023-11-30 08:56:52 -08:00
Sebastien Lebreton 46cbc8733e
Update detector-arguments.md (#918) 2023-11-29 11:58:58 -08:00
Sebastien Lebreton 2b8468b206
Add a parameter to disable the summary display (#917) 2023-11-29 11:33:07 -08:00
renovate[bot] 2bd065b51f
chore(deps): update dependency microsoft.sourcelink.github to v8 (#907) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-15 22:45:16 +00:00
renovate[bot] 6b8e481f29
chore(deps): update dependency microsoft.net.test.sdk to v17.8.0 (#893) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-15 22:02:29 +00:00
dependabot[bot] 16b87e382a
build(deps): bump github/codeql-action from 2.22.5 to 2.22.6 (#903) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.5 to 2.22.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](74483a38d3...689fdc5193)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-15 22:01:54 +00:00
renovate[bot] 8fd8eb7009
chore(deps): update dependency polly to v8.2.0 (#902) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-15 06:11:14 -08:00
renovate[bot] 454842ee6f
chore(deps): update dependency serilog to v3.1.1 (#895) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-15 06:07:47 -08:00
Rob Jellinghaus 03a561ac9c
Add --all-features per issue #894 (#897) 
* Add --all-features per issue #894

* Fix formatting.

---------

Co-authored-by: Rob Jellinghaus <rjelling@microsoft.com>
 2023-11-13 14:15:56 -06:00
Justin Perez 2701804770
fix(rust): don't mark build deps as dev deps (#889) 2023-11-06 13:22:47 -06:00
Amitla Vannikumar f42b36b1f8
Removing VCPKG Properties (#890) 
* removing the VCPKG properties because they do not need to be in CD public

* changes

---------

Co-authored-by: Amitla Vannikumar <avannikumar@microsoft.com>
 2023-11-06 11:21:29 -08:00
Jamie Magee b61d0ec02c
Remove `Microsoft.AspNet.WebApi.Client` (#886) 2023-11-01 18:10:07 +00:00
renovate[bot] 6d7c9b2768
chore(deps): update actions/checkout digest to b4ffde6 (#870) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-01 18:00:06 +00:00
renovate[bot] 097bb71836
chore(deps): update dependency morelinq to v4 (#882) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-01 17:51:27 +00:00
renovate[bot] 8f96a4f383
chore(deps): update actions/checkout action to v4.1.1 (#863) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-01 10:39:05 -07:00
renovate[bot] 283b996177
chore(deps): update dependency yamldotnet to v13.7.1 (#846) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-01 17:38:19 +00:00
renovate[bot] d380f4d1cc
chore(deps): update dependency spectre.console.cli.extensions.dependencyinjection to v0.2.0 (#884) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-11-01 17:37:44 +00:00
renovate[bot] 6701090145
chore(deps): update dependency polly to v8.1.0 (#885) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-31 14:12:21 -07:00
renovate[bot] 15e9b60f82
chore(deps): update dependency fluentassertions.analyzers to v0.26.0 (#881) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-30 09:24:16 -07:00
renovate[bot] e216582028
chore(deps): update dotnet monorepo (#851) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-27 19:05:56 +01:00
renovate[bot] adb01c493b
chore(deps): update shogo82148/actions-upload-release-asset action to v1.7.2 (#860) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-27 19:05:36 +01:00
renovate[bot] cfdf53c494
chore(deps): update ossf/scorecard-action action to v2.3.1 (#874) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-27 19:04:59 +01:00
KonH 53b405919f
Add FluentAssertions.Analyzers to Detectors.Tests, fix warnings (#879) 2023-10-27 19:04:04 +01:00
renovate[bot] 0724ca1aa5
chore(deps): update github/codeql-action action to v2.22.5 (#852) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-27 19:00:11 +01:00
dependabot[bot] 4dcff48484
build(deps): bump github/codeql-action from 2.22.1 to 2.22.4 (#871) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.1 to 2.22.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](fdcae64e14...49abf0ba24)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-22 08:15:06 -07:00
dependabot[bot] 62c482be94
build(deps): bump release-drafter/release-drafter from 5.24.0 to 5.25.0 (#866) 
Bumps [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) from 5.24.0 to 5.25.0.
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](65c5fb495d...09c613e259)

---
updated-dependencies:
- dependency-name: release-drafter/release-drafter
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-18 08:37:51 -07:00
Amitla Vannikumar a54cb7cd51
Add Properties VCPKG (#855) 
* added properties

* changed download location parsing to sanitize better

* added more checks

---------

Co-authored-by: Amitla Vannikumar <avannikumar@microsoft.com>
 2023-10-15 23:56:16 -07:00
renovate[bot] 25e572f6b1
chore(deps): update mcr.microsoft.com/dotnet/runtime-deps:6.0-cbl-mariner2.0 docker digest to 98e5a9a (#845) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-10 11:09:56 -07:00
Omotola 7221fd4388
move simple pip to default off (#836) 2023-10-09 09:36:40 -07:00
Justin Perez b22f08d22d
fix(cmd): allow `ScanSettings` to be serialized 2023-10-09 09:30:54 -07:00
renovate[bot] 23b192e5a7
chore(deps): update stefanzweifel/git-auto-commit-action action to v5 (#837) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-09 16:18:54 +00:00
renovate[bot] 85b50ee52a
chore(deps): update github/codeql-action action to v2.22.1 (#834) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-09 09:06:46 -07:00
renovate[bot] 6b922cdccb
chore(deps): update dependency yamldotnet to v13.5.2 (#832) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-09 09:06:24 -07:00
renovate[bot] 75476010d5
chore(deps): update shogo82148/actions-upload-release-asset action to v1.7.0 (#835) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-09 09:05:48 -07:00
dependabot[bot] e7160bcf2f
build(deps): bump stefanzweifel/git-auto-commit-action from 4.16.0 to 5.0.0 (#842) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-09 09:05:25 -07:00
dependabot[bot] 121b9aa32b
build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#841) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-09 09:04:50 -07:00
renovate[bot] ae50a41fc4
chore(deps): update dependency fluentassertions.analyzers to v0.25.0 (#828) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-05 09:16:56 -07:00
renovate[bot] bac12e6b55
chore(deps): update dependency yamldotnet to v13.5.1 (#830) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-10-05 09:16:08 -07:00
Omotola d4c7815350
Switch from clientfactory to regular httpclient (#823) 
* Switch from clientfactory to regular httpclient
* fix: inject `NullLogger`

---------

Co-authored-by: Justin Perez <justinperez@microsoft.com>
 2023-10-03 21:27:22 +00:00
sebasgomez238 b1044c7302
Revert "Added spdx package component information from SPDX file (#766)" (#825) 
Co-authored-by: Sebastian Gomez <segomez@microsoft.com>
 2023-10-03 10:20:36 -07:00
Omotola 56b3100ba9
Fix to hide Http MessageHandler cleanup messages (#816) 2023-09-29 12:53:22 -07:00