-
Notifications
You must be signed in to change notification settings - Fork 96
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ABOUT files should be mapped when their documented resource is mapped #825
Comments
Tag about files and LICENSE/NOTICE files accompanying the ABOUT file as "about-mapped", and ignore these files from the scanning step. Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
Tag about files and LICENSE/NOTICE files accompanying the ABOUT file as "about-mapped", and ignore these files from the scanning step. Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
@pombredanne I've implemented this in the commit above, but just to confirm:
Did you mean to say they should not be scanned further? Also just detailing the changes to confirm this is what we want:
|
Yes... I fat fingered it!
Actually all files mapped through an ABOUT file should be mapped super early in the pipeline and tagged such that there is NOT ANY other step that processes them further be it for mapping, matching, scanning or anything else. Their analysis is essentially "done". |
Tag about files and LICENSE/NOTICE files accompanying the ABOUT file as "about-mapped", and ignore these files from the scanning step. Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
Tag about files and LICENSE/NOTICE files accompanying the ABOUT file as "about-mapped", and ignore these files from the scanning step. Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
Signed-off-by: Ayan Sinha Mahapatra <[email protected]>
@AyanSinhaMahapatra ready to be closed? |
@pombredanne I've only modified the @tdruez everything mentioned in #825 (comment) is implemented, but should we do more based on the above comments? ^ |
@AyanSinhaMahapatra I am letting find the best solution with @keshav-space and @tdruez if need be :) |
Ack @pombredanne , will update the |
Closing this issue as this is completed. |
ABOUT files should be mapped when their documented resource is mapped. They should be mapped to the same origin and license (e.g., the package documented in the ABOUT file) AND the .LICENSE and .NOTICE if any should also be mapped. All these assigned a status and should not be part of further scans
The text was updated successfully, but these errors were encountered: