grype/.bouncer.yaml

permit:
  - BSD.*
  - MIT.*
  - Apache.*
  - MPL.*
  - ISC
ignore-packages:
  # packageurl-go is released under the MIT license located in the root of the repo at /mit.LICENSE
  - github.com/anchore/packageurl-go
add license validation 2020-07-13 17:42:21 +00:00			`permit:`
			`- BSD.*`
			`- MIT.*`
			`- Apache.*`
add release pipeline & replace imgbom with syft (#60) 2020-07-24 01:26:03 +00:00			`- MPL.*`
Change kebab case to camelCase, use updated syft version Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com> Ignore packageurl-go which is a dependency from syft, and has a weird license format Signed-off-by: Samuel Dacanay <sam.dacanay@anchore.com> 2020-09-15 15:51:45 +00:00			`- ISC`
			`ignore-packages:`
			`# packageurl-go is released under the MIT license located in the root of the repo at /mit.LICENSE`
Bugfixes + Integration test for sbom input vs grype library comparison (#424) This change both adds a test to identify and fixes differences between loading sboms from json and loading sboms from Syft as a library. * adds integration test that compares SBOM input vs image input * fix integration test cache path * Add handler for ApkMetadataType in partialSyftPackage.UnmarshalJSON * Fix Epoch missing from Package.New RpmdbMetadataType handler and update RpmDbMetadata test in TestNew_MetadataExtraction * bump syft to version 0.24.0 * update license check for packageurl-go Co-authored-by: Alex Goodman <alex.goodman@anchore.com> Co-authored-by: Vijay Pillai <vijay.pillai@anchore.com> Signed-off-by: Alex Goodman <alex.goodman@anchore.com> Signed-off-by: Vijay Pillai <vijay.pillai@anchore.com> 2021-09-23 01:53:32 +00:00			`- github.com/anchore/packageurl-go`