Skip to content

fix: sanitize SPDX LicenseRefs#1657

Merged
kzantow merged 1 commit intoanchore:mainfrom
kzantow-anchore:fix/spdx-licenseref
Mar 6, 2023
Merged

fix: sanitize SPDX LicenseRefs#1657
kzantow merged 1 commit intoanchore:mainfrom
kzantow-anchore:fix/spdx-licenseref

Conversation

@kzantow
Copy link
Copy Markdown
Contributor

@kzantow kzantow commented Mar 6, 2023

Some SPDX LicenseRefs may be output incorrectly with invalid characters or whitespace, this PR sanitizes licenseRefs to adhere to the spec.

Fixes: #1651

Signed-off-by: Keith Zantow <kzantow@gmail.com>
@kzantow kzantow merged commit 7cfdffa into anchore:main Mar 6, 2023
@kzantow kzantow deleted the fix/spdx-licenseref branch March 6, 2023 16:02
spiffcs added a commit to deitch/syft that referenced this pull request Mar 21, 2023
* main: (47 commits)
  Deprecate config.yaml as valid config source; Add unit regression for correct config paths (anchore#1640)
  chore: Update syft bootstrap tools to latest versions. (anchore#1682)
  Update documentation: (anchore#1680)
  chore: Update Stereoscope to 7928713c391e20abaede6a029f4ce37b628a4c8b (anchore#1681)
  fix: reduce logging for bad dpkg lines (anchore#1675)
  fix ruby classifier (anchore#1678)
  feat: add shared dir for easier cleanup (anchore#1676)
  chore(deps): bump github.com/google/go-containerregistry (anchore#1672)
  chore(deps): bump actions/setup-go from 3 to 4 (anchore#1671)
  fix: move defer after error to protect panic case (anchore#1670)
  feat: add argocd, helm, kustomize and kubectl binary classifiers (anchore#1663)
  defer closing file (anchore#1668)
  fix: remove author contributing to javascript CPEs (anchore#1669)
  fix: more python matching support (anchore#1667)
  Update syft bootstrap tools to latest versions. (anchore#1666)
  feat: add ruby classifier (anchore#1665)
  Update syft bootstrap tools to latest versions. (anchore#1658)
  fix: improved Python binary detection (anchore#1648)
  fix: suppress some known incorrect vendor candidates for npm CPEs (anchore#1659)
  fix: sanitize SPDX LicenseRefs (anchore#1657)
  ...

Signed-off-by: Christopher Phillips <christopher.phillips@anchore.com>
GijsCalis pushed a commit to GijsCalis/syft that referenced this pull request Feb 19, 2024
Signed-off-by: Keith Zantow <kzantow@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[SPDX][TV] SBOM value format is incorrect for LicenseID

2 participants