chore: create a new release #927
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Trong Nhan Mai <[email protected]>
Signed-off-by: Ben Selwyn-Smith <[email protected]>
Pylint version 3.3.0 has added a new check too-many-positional-arguments, which is causing our linter checks to fail. This PR disables this check similar to other opinionated too-many-* checks. Signed-off-by: behnazh-w <[email protected]>
Signed-off-by: behnazh-w <[email protected]>
…nd make dependency resolution off by default (#840) Signed-off-by: Trong Nhan Mai <[email protected]>
Signed-off-by: Ben Selwyn-Smith <[email protected]>
Signed-off-by: Ben Selwyn-Smith <[email protected]>
…878) Signed-off-by: behnazh-w <[email protected]>
Signed-off-by: behnazh-w <[email protected]>
…on macOS gracefully (#877) Signed-off-by: Jens Troeger <[email protected]>
…880) Signed-off-by: behnazh-w <[email protected]>
…any try statements” checker (#890) Signed-off-by: Jens Troeger <[email protected]>
Signed-off-by: Jens Troeger <[email protected]>
Signed-off-by: Jens Troeger <[email protected]>
Signed-off-by: Jens Troeger <[email protected]>
Signed-off-by: Jens Troeger <[email protected]>
Signed-off-by: Jens Troeger <[email protected]>
Signed-off-by: behnazh-w <[email protected]>
Signed-off-by: behnazh-w <[email protected]>
…e artifact (#873) Signed-off-by: Mohammad Abdollahpour <[email protected]>
This PR aims to address the remaining comments from PR#873. - Generate API documents for modified and new code. - Make the repository verification check generic. - Fix repo verification fact parameter docs. Signed-off-by: Mohammad Abdollahpour <[email protected]> Co-authored-by: Behnaz Hassanshahi <[email protected]>
This pull request adds a new check that identifies whether a supported build tool configuration exists in the associated source code repository of a software component. Signed-off-by: behnazh-w <[email protected]>
This PR adds a new command, find-source, that runs the commit finder and repo finder on a given PURL whilst skipping analysis. It also optionally accepts a repo path, in which case only the commit finder will be called. The results of the operation show up in the logs, and are written to a file in a JSON report format. Signed-off-by: Ben Selwyn-Smith <[email protected]>
Signed-off-by: Trong Nhan Mai <[email protected]>
Signed-off-by: Ben Selwyn-Smith <[email protected]>
Signed-off-by: Ben Selwyn-Smith <[email protected]>
This PR renames `mcn_infer_artifact_pipeline_1` to `mcn_find_artifact_pipeline_1`. This check can support all the package registries now. When a verifiable provenance is found for an artifact, we use it to obtain the pipeline trigger. Otherwise, we use heuristics to find the triggering pipeline. Signed-off-by: behnazh-w <[email protected]>
…923) The GitHub API for some reason does not anymore return the steps information of the job that has published pkg:maven/io.micronaut.test/[email protected] even though it was published in Aug 2024, which is much earlier than the 400 retention policy. This PR raises a new exception to handle this case and allows the corresponding integration test to fail. Signed-off-by: behnazh-w <[email protected]>
If a package is already known to be malicious, this PR reports it as part of the mcn_detect_malicious_metadata_1 check. Additionally, two new integration tests for known Python and npm malware have been added. Signed-off-by: behnazh-w <[email protected]>
Signed-off-by: behnazh-w <[email protected]>
oracle-contributor-agreement
bot
added
the
OCA Verified
tromai
previously approved these changes
Nov 26, 2024
Signed-off-by: behnazh-w <[email protected]>
tromai
approved these changes
Nov 26, 2024
tromai
approved these changes
Nov 26, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.