Rust pipeline - #2204
Open
chinyeungli wants to merge 76 commits into
Open
Rust pipeline#2204chinyeungli wants to merge 76 commits into
chinyeungli wants to merge 76 commits into
Conversation
- Get the input and extract content into the from/ codebase. - Build the source and place the built files into the to/ codebase. - Run scans. - Identify sources in from/ that are used in the build. Signed-off-by: Chin Yeung Li <[email protected]>
…ses detected in the codebase #1767 * Introduce new "LICENSE_ISSUE" tag * License deduplication/simplification is not working well; work in progress Signed-off-by: Chin Yeung Li <[email protected]>
This commit is for testing purpose and is definitely not ready. Signed-off-by: Chin Yeung Li <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: Chin Yeung Li <[email protected]>
Signed-off-by: Chin Yeung Li <[email protected]>
* Use Docker for building instead of Cargo * Accept only one PURL as input * Use the .rlib found in .d files for D2D mapping * Remove unnecessary code Signed-off-by: Chin Yeung Li <[email protected]>
* Add comparison logic * Add tests * Update extra_data fields * Better code organization * etc.. Signed-off-by: Chin Yeung Li <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
…2101) Signed-off-by: tdruez <[email protected]>
Signed-off-by: Rishabh Rohil <[email protected]>
Signed-off-by: Rishabh Rohil <[email protected]>
…2102) Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
…#2106) Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
…2124) Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: OmAnand857 <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: Aayush Kumar <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
) Signed-off-by: tdruez <[email protected]>
#2187) Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
…2192) Signed-off-by: tdruez <[email protected]>
Signed-off-by: Mrityunjay Raj <[email protected]>
Signed-off-by: Prajakta Kamble <[email protected]>
Signed-off-by: dikshaa2909 <[email protected]>
… docstring (#2184) Signed-off-by: Prajakta Kamble <[email protected]>
…2193) Signed-off-by: tdruez <[email protected]>
…2194) Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: tdruez <[email protected]>
Signed-off-by: Chin Yeung Li <[email protected]>
Signed-off-by: Chin Yeung Li <[email protected]>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
…ring sanitization' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Chin Yeung <[email protected]>
Signed-off-by: Chin Yeung Li <[email protected]>
…et supoorted in matchcode #1767 Signed-off-by: Chin Yeung Li <[email protected]>
…1767 Signed-off-by: Chin Yeung Li <[email protected]>
Signed-off-by: Chin Yeung Li <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
10 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Issues
Changes
cargotype)codebase/from/and the built artifacts undercodebase/to/.Samples:
I used
pkg:cargo/[email protected]as a sample.The source crate files are put under the
codebase/fromand the built files are put under
codebase/toIf there is a license mismatch issue, a small red alert sign will be put next to the PURL
A comparison summary and issue info are put under the
extra_datatab(The logic behind
detected_codebase_licenseis to collect all license expressions detected in the codebase, deduplicate them, and join them usingAND. In the sample, the entire codebase is under(mit OR apache-2.0)and contains one apache‑2.0 license file and one mit license file. Therefore, the finaldetected_codebase_licensebecomes(mit OR apache-2.0) AND apache-2.0 AND mit)Checklist