-
Notifications
You must be signed in to change notification settings - Fork 594
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: emit NOASSERTION for copyright text to fix SPDX 2.2 validation failure #3495
Conversation
Signed-off-by: Fearkin <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
I plan to add a test that would have caught this on |
Signed-off-by: Will Murphy <[email protected]>
Signed-off-by: Will Murphy <[email protected]>
Signed-off-by: Will Murphy <[email protected]>
Tests added and snapshots updated. This is ready for re-review. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nit: just a heads up for the future... there are two things that can be updated:
https://github.com/anchore/syft/blob/main/syft/format/spdxjson/encoder_test.go#L20-L21
I think the image did not need to be updated (and rarely needs to be), only the snapshots needed to be updated.
…syft into spdx-absolute-path-file * 'spdx-absolute-path-file' of https://github.com/anchore/syft: chore(deps): update CPE dictionary index (#3507) chore(deps): update tools to latest versions (#3506) chore(deps): bump github.com/magiconair/properties from 1.8.7 to 1.8.9 (#3508) chore(deps): bump actions/cache from 4.1.2 to 4.2.0 (#3503) Add relationships for rust audit binary packages (#3500) fix order of rust dependencies and support git sources in Cargo.lock dependencies (#3502) chore(deps): update tools to latest versions (#3501) chore(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 (#3499) chore: add and document target for updating unit snapshots (#3498) fix: emit NOASSERTION for copyright text to fix SPDX 2.2 validation failure (#3495)
Description
@Fearkin I could not push to your branch since it was on
main
of your fork. I've pushed a commit, checked out a local branch, and kept your commits so you still get the contribution credit.FileCopyrightText
to SPDX formatsFixes #3346
Type of change
Checklist: