You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
107 lines
3.8 KiB
107 lines
3.8 KiB
[archive]
|
|
use_module_proxy = true
|
|
pre_commands = [
|
|
# Change to a different sqlite3 backend without generated content and
|
|
# questionable licensing
|
|
# https://github.com/aquasecurity/trivy/discussions/6449
|
|
[
|
|
"sh", "-exc",
|
|
"""
|
|
sed -i 's|_ "modernc.org/sqlite"|_ "github.com/mattn/go-sqlite3"|' \
|
|
$(grep -rl '_ "modernc.org/sqlite"' pkg/ cmd/ integration/)
|
|
|
|
""",
|
|
],
|
|
["sed", "-i", "/modernc.org/d", "go.mod"],
|
|
["go", "get", "-u", "github.com/mattn/go-sqlite3"],
|
|
]
|
|
post_commands = [
|
|
# Copy missing license files that go mod vendor doesn't include
|
|
["mkdir", "-p", "vendor/github.com/csaf-poc/csaf_distribution/v3/LICENSES"],
|
|
[
|
|
"wget", "-q",
|
|
"https://github.com/csaf-poc/csaf_distribution/raw/v3.0.0/LICENSES/MIT.txt",
|
|
"-O", "vendor/github.com/csaf-poc/csaf_distribution/v3/LICENSES/MIT.txt"
|
|
],
|
|
[
|
|
"wget", "-q",
|
|
"https://github.com/csaf-poc/csaf_distribution/raw/v3.0.0/LICENSES/LicenseRef-Go119-BSD-Patentgrant.txt",
|
|
"-O", "vendor/github.com/csaf-poc/csaf_distribution/v3/LICENSES/BSD-3-Clause.txt"
|
|
],
|
|
[
|
|
"cp",
|
|
"vendor/github.com/hashicorp/golang-lru/v2/LICENSE",
|
|
"vendor/github.com/hashicorp/golang-lru/LICENSE"
|
|
],
|
|
|
|
[
|
|
"sh", "-c",
|
|
"""
|
|
# Ensure modernc is properly removed
|
|
! grep 'modernc.org' go.mod
|
|
# Remove bundled sqlite
|
|
rm -v \
|
|
vendor/github.com/mattn/go-sqlite3/sqlite3-binding.* \
|
|
vendor/github.com/mattn/go-sqlite3/sqlite3ext.h
|
|
""",
|
|
],
|
|
]
|
|
|
|
|
|
[licensing]
|
|
exclude_directories = [
|
|
"pkg/licensing/testdata",
|
|
"pkg/fanal/analyzer/language/golang/mod/testdata",
|
|
"pkg/fanal/analyzer/language/python/packaging/testdata/",
|
|
"pkg/fanal/analyzer/licensing/testdata/",
|
|
"vendor/github.com/google/licenseclassifier/v2/assets",
|
|
|
|
]
|
|
exclude_files = [
|
|
"vendor/cloud.google.com/go/internal/version/update_version.sh",
|
|
"vendor/cloud.google.com/go/storage/emulator_test.sh",
|
|
"vendor/github.com/go-git/go-git/v5/oss-fuzz.sh",
|
|
"vendor/go.opentelemetry.io/otel/get_main_pkgs.sh",
|
|
"vendor/go.opentelemetry.io/otel/verify_examples.sh",
|
|
"vendor/google.golang.org/grpc/regenerate.sh",
|
|
"vendor/k8s.io/kubectl/pkg/util/i18n/translations/extract.py",
|
|
]
|
|
backend = "trivy"
|
|
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/google/shlex/COPYING"
|
|
sha256sum = "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30"
|
|
expression = "Apache-2.0"
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/spdx/tools-golang/LICENSE.code"
|
|
sha256sum = "e914fb1f3927226e04b0438e0b541b3c6e3c65de4d64aa8f5cdaa803f05448fd"
|
|
expression = "Apache-2.0 OR GPL-2.0-or-later"
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/go-errors/errors/LICENSE.MIT"
|
|
sha256sum = "4c1b2259f160d975ec6594b602be5db4e6c0c06afe312ca3cd7cff91b75c7c26"
|
|
expression = "MIT"
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/alecthomas/chroma/COPYING"
|
|
sha256sum = "e7bf754e7153012a3a8ff697d21acd6c12e590d6a55f2aef8ee83616aa9a795f"
|
|
expression = "MIT"
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/BurntSushi/toml/COPYING"
|
|
sha256sum = "d21cb1c60785d6d3a84a7059323ccafc45c645b1bbda281c76a62d66ad2d7dc3"
|
|
expression = "MIT"
|
|
[[licensing.licenses]]
|
|
path = "pkg/iac/scanners/helm/test/mysql/README.md"
|
|
sha256sum = "745fadb84a68937b060856d30dca16516a731d5685e03271ee6fa124295054b0"
|
|
expression = "Apache-2.0"
|
|
[[licensing.licenses]]
|
|
path = "pkg/iac/scanners/helm/test/mysql/charts/common/README.md"
|
|
sha256sum = "62b77785b81344c7108495e6d0f29fa1b6e0d4078b88284d85f3113ab84a48f1"
|
|
expression = "Apache-2.0"
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/rcrowley/go-metrics/LICENSE"
|
|
sha256sum = "d2571186acad91c8a3121fb31f1aa5963e82ccd08608d00cef3eb3f3a6c8ad38"
|
|
expression = "BSD-2-Clause-Views"
|
|
[[licensing.licenses]]
|
|
path = "vendor/github.com/alecthomas/chroma/formatters/svg/font_liberation_mono.go"
|
|
sha256sum = "62b52a13f5eaa92c7ec5cecbdb9fc17871ad98095668967938ffe3ae4ee96a2c"
|
|
expression = "OFL-1.1-RFN"
|