-
Notifications
You must be signed in to change notification settings - Fork 2
Feature/patch bom alternative #58
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
martinleim
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I am not fully through, but I think we should discuss the overall approach of the patch process.
core/src/main/java/de/medavis/lct/core/metadata/ComponentMetaDataLoader.java
Outdated
Show resolved
Hide resolved
core/src/main/java/de/medavis/lct/core/patcher/ComponentMetaDataManager.java
Outdated
Show resolved
Hide resolved
core/src/main/java/de/medavis/lct/core/patcher/ComponentMetaDataManager.java
Outdated
Show resolved
Hide resolved
martinleim
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @elomagic, summary of our discussion:
Patcher will be reworked so that it
- Read components from BOM
- Compares each component against the configured meta data. If there is a match, check if has licenses configured and replace the licenses from BOM wth those from the configured meta data
- Normalize license name against those configured in license mapping data
- Use license IDs and URL from configured license data
- Patch BOM by overwriting the licenses of each component with the licenses obtained from the previous steps.
core/src/main/resources/de/medavis/lct/core/patcher/DefaultLicenseMapping.json5
Outdated
Show resolved
Hide resolved
core/src/main/resources/de/medavis/lct/core/patcher/SpdxLicenseList.json5
Outdated
Show resolved
Hide resolved
core/src/test/java/de/medavis/lct/core/patcher/ComponentMetaDataManagerTest.java
Outdated
Show resolved
Hide resolved
core/src/test/resources/de/medavis/lct/core/patcher/test-rules.json5
Outdated
Show resolved
Hide resolved
jenkins/src/main/java/de/medavis/lct/jenkins/patch/BomPatcherBuilder.java
Outdated
Show resolved
Hide resolved
# Conflicts: # cli/src/main/java/de/medavis/lct/cli/Main.java # core/src/main/java/de/medavis/lct/core/asset/AssetLoader.java # core/src/main/java/de/medavis/lct/core/metadata/ComponentMetadata.java # core/src/test/java/de/medavis/lct/core/asset/AssetLoaderTest.java # doc/GlobalConfiguration.png # jenkins/src/main/java/de/medavis/lct/jenkins/config/ManifestGlobalConfiguration.java # jenkins/src/main/resources/de/medavis/lct/jenkins/config/ManifestGlobalConfiguration/config.jelly
No description provided.