oss-review-toolkit / ort

A suite of tools to automate software compliance checks.

https://oss-review-toolkit.org

oss-review-toolkit/ort Issues

Bazel: Support `archive_override`
Updated 18 days ago15
Bazel: It should be possible to disable the disk cache
Closed 18 days ago8
Bazel: Support `local_path_override`
Updated 18 days ago
Make vulnerability icons better distinguishable in web app
Updated 19 days ago1
Allow "non-repository" input to the analyzer
Updated 19 days ago
FossID: Scanner option `fetchSnippetMatchedLines` should be removed
Updated 19 days ago
Bazel: Change the identification of registry URLs
Updated 19 days ago3
Bazel: Multiple registry URLs should be supported
Updated 19 days ago
Invalid expires attribute date on setting Cookies during Analyzer
Closed 20 days ago6
FileNotFoundException for some dependencies with ScanCode plugin and npm repository
Updated 21 days ago6
Problems with contradicting use-cases for SPDX documents
Updated 21 days ago
Kotlin 2.0 and GradleInspector: Issues with variant selection
Updated 25 days ago7
ort --info report -f CycloneDx -i bom.json -o .
Updated a month ago7
Gemfile parsing for Bundler (Ruby) doesn't correctly take into account platforms (ruby, java etc.)
Updated a month ago9
Reuse creating SPDX with faulty information
Updated a month ago
Reuse emits deprecation warnings
Updated a month ago1
Document the precedence / behavior in case of multiple package configuration providers
Updated a month ago
Add "Black Duck" as advisor for known security vulnerabilities
Updated a month ago4
Enable the reporting of known security vulnerabilities as Open VEX document
Updated a month ago1
Automate the creation of how-to-fix hints for vulnerabilities
Updated a month ago
Support getting Node-related tooling versions from the `frontend-gradle-plugin`
Updated a month ago1
package-curations: Allow adding arbitrary tags to packages
Updated a month ago12
SSLHandshakeException with ClearlyDefined.io
Updated a month ago1
Consolidate Scan Storages
Updated a month ago2
Enable ORT to generate CycloneDX 1.6 SBOMs
Closed 2 months ago2
Generated package configuration path excludes does not respect vcs path curations
Updated 2 months ago1
Effective license of `BSD-3-Clause AND BSD-3-Clause`
Updated 2 months ago
Mention the ORT version the report was created with.
Updated 2 months ago
Consider using `testcontainers-git` to test authentication with Git servers
Updated 2 months ago
Docker image for version 22.3.0 does not contain the `scancode` executable anymore
Closed 2 months ago8
FossID: improve the error reporting when the credentials are wrong
Updated 3 months ago
tests: Turn assets into resources
Updated 3 months ago1
Failing to scan repository with FossID: Cannot deserialize value of type `java.util.LinkedHashMap<java.lang.String,java.lang.String>`
Updated 3 months ago8
[BUG] Cargo: submodules and local packages are being skipped
Closed 3 months ago3
PURL encoding for SwiftPM is invalid as PURL specification.
Updated 3 months ago1
Make VCS plugins configurable
Updated 3 months ago
declared_license_mapping curations are not applied in git repo projects
Updated 3 months ago
Make further database connection (pool) parameters configurable for Postgres based storages
Closed 3 months ago
best solution to scan a project separately and combine results to a final report
Closed 3 months ago6
Wrong type and provider in Request-URL for Curations from ClearyDefined
Updated 3 months ago
In SPDX reports, include licenseInfoFromFiles and file-level information for the scanned project itself as well
Updated 3 months ago5
Allow usage of GOPROXY variable for go module downloads
Closed 3 months ago10
Failing to analyze - with Cargo failed to resolve dependencies for path 'rust-client/Cargo.toml': NoSuchElementException: Collection contains no element matching the predicate.
Closed 3 months ago5
Allow extending URL prefix replacements for Git
Closed 3 months ago3
Analyzer does not allow to have multiple independent projects with the same type / name / version
Updated 3 months ago6
Add Bun as supported package manager
Updated 3 months ago
Upgrade to ScanCode 32.1.0
Closed 3 months ago
Support dynamic linking for Bazel
Updated 4 months ago
Take Bazel's patches to source artifacts into account
Updated 4 months ago1
Support external package managers for Bazel (like Maven or Pip)
Updated 4 months ago