chore: create a new release #927
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Trong Nhan Mai <trong.nhan.mai@oracle.com>
Signed-off-by: Ben Selwyn-Smith <benselwynsmith@googlemail.com>
Pylint version 3.3.0 has added a new check too-many-positional-arguments, which is causing our linter checks to fail. This PR disables this check similar to other opinionated too-many-* checks. Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
…nd make dependency resolution off by default (#840) Signed-off-by: Trong Nhan Mai <trong.nhan.mai@oracle.com>
Signed-off-by: Ben Selwyn-Smith <benselwynsmith@googlemail.com>
Signed-off-by: Ben Selwyn-Smith <benselwynsmith@googlemail.com>
…878) Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
…on macOS gracefully (#877) Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
…880) Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
…any try statements” checker (#890) Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
Signed-off-by: Jens Troeger <jens.troeger@light-speed.de>
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
…e artifact (#873) Signed-off-by: Mohammad Abdollahpour <mohammad.abdollahpour@oracle.com>
This PR aims to address the remaining comments from PR#873. - Generate API documents for modified and new code. - Make the repository verification check generic. - Fix repo verification fact parameter docs. Signed-off-by: Mohammad Abdollahpour <mohammad.abdollahpour@oracle.com> Co-authored-by: Behnaz Hassanshahi <behnaz.hassanshahi@oracle.com>
This pull request adds a new check that identifies whether a supported build tool configuration exists in the associated source code repository of a software component. Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
This PR adds a new command, find-source, that runs the commit finder and repo finder on a given PURL whilst skipping analysis. It also optionally accepts a repo path, in which case only the commit finder will be called. The results of the operation show up in the logs, and are written to a file in a JSON report format. Signed-off-by: Ben Selwyn-Smith <benselwynsmith@googlemail.com>
Signed-off-by: Trong Nhan Mai <trong.nhan.mai@oracle.com>
Signed-off-by: Ben Selwyn-Smith <benselwynsmith@googlemail.com>
Signed-off-by: Ben Selwyn-Smith <benselwynsmith@googlemail.com>
This PR renames `mcn_infer_artifact_pipeline_1` to `mcn_find_artifact_pipeline_1`. This check can support all the package registries now. When a verifiable provenance is found for an artifact, we use it to obtain the pipeline trigger. Otherwise, we use heuristics to find the triggering pipeline. Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
…923) The GitHub API for some reason does not anymore return the steps information of the job that has published pkg:maven/io.micronaut.test/micronaut-test-junit5@4.5.0 even though it was published in Aug 2024, which is much earlier than the 400 retention policy. This PR raises a new exception to handle this case and allows the corresponding integration test to fail. Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
If a package is already known to be malicious, this PR reports it as part of the mcn_detect_malicious_metadata_1 check. Additionally, two new integration tests for known Python and npm malware have been added. Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
oracle-contributor-agreement
bot
added
the
OCA Verified
tromai
previously approved these changes
Nov 26, 2024
Signed-off-by: behnazh-w <behnaz.hassanshahi@oracle.com>
tromai
approved these changes
Nov 26, 2024
tromai
approved these changes
Nov 26, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.