Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(spdx): include required fields #2168

Merged
merged 7 commits into from Apr 30, 2024

Conversation

kzantow
Copy link
Contributor

@kzantow kzantow commented Sep 22, 2023

This PR includes some fields required in SPDX 2.2.

NOTE: one of the fixes is dependent on getting this upstream PR in: spdx/tools-golang#223

Fixes: #2163

Signed-off-by: Keith Zantow <kzantow@gmail.com>
spiffcs
spiffcs previously approved these changes Sep 26, 2023
@spiffcs
Copy link
Contributor

spiffcs commented Sep 26, 2023

Approved - waiting on spdx/tools-golang#223 to merge

@spiffcs spiffcs added the blocked Progress is being stopped by something label Sep 26, 2023
@wagoodman wagoodman dismissed spiffcs’s stale review February 2, 2024 19:06

too much time has passed and there could be large rebases needed

@wagoodman wagoodman marked this pull request as draft February 2, 2024 19:06
@kzantow kzantow marked this pull request as ready for review April 17, 2024 17:08
@kzantow kzantow removed the blocked Progress is being stopped by something label Apr 17, 2024
@spiffcs spiffcs merged commit b0c88dd into anchore:main Apr 30, 2024
11 checks passed
spiffcs added a commit to camcui/syft that referenced this pull request May 1, 2024
* main:
  chore(deps): bump github.com/docker/docker (anchore#2827)
  fix(spdx): include required fields (anchore#2168)
  fix: add correct vendor for dnsmasq CPE (anchore#2659)
  fix: close temp rpmdb file (anchore#2792)
  chore(deps): bump github/codeql-action from 3.25.2 to 3.25.3 (anchore#2817)
  Fill in SPDX originator for all supported package types (anchore#2822)
  chore(deps): bump anchore/sbom-action from 0.15.10 to 0.15.11 (anchore#2821)
  update spdx license list to 3.23 (anchore#2818)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

license_info_in_file is mandatory in SPDX-2.2
2 participants