mirror of
https://github.com/anchore/grype.git
synced 2026-10-28 08:24:36 +08:00
Juan Ariza ToledanoandWill Murphy
42c333e00a
* feat(vex): CSAF support Add CSAF VEX JSON documents as a supported format, with equivalent functionality to the existing OpenVEX implementation. Promote status definitions to their own vex/status package since different implementations need to refer to the overall status and still define their own statuses. --------- Signed-off-by: juan131 <jariza@vmware.com> Signed-off-by: juan131 <juan.ariza@broadcom.com> Signed-off-by: Will Murphy <willmurphyscode@users.noreply.github.com> Co-authored-by: Will Murphy <willmurphyscode@users.noreply.github.com>
69 lines
2.2 KiB
YAML
69 lines
2.2 KiB
YAML
permit:
|
|
- BSD.*
|
|
- CC0.*
|
|
- MIT.*
|
|
- Apache.*
|
|
- MPL.*
|
|
- ISC
|
|
- WTFPL
|
|
|
|
ignore-packages:
|
|
# packageurl-go is released under the MIT license located in the root of the repo at /mit.LICENSE
|
|
- github.com/anchore/packageurl-go
|
|
|
|
# github.com/gocsaf/csaf is released under the Apache License, version 2.0 (Apache-2.0)
|
|
# https://github.com/gocsaf/csaf/blob/main/LICENSE-Apache-2.0.txt
|
|
- github.com/gocsaf/csaf/v3/csaf
|
|
- github.com/gocsaf/csaf/v3/internal/misc
|
|
- github.com/gocsaf/csaf/v3/util
|
|
|
|
# tools-golang is released under the Apache License, version 2.0 (Apache-2.0)
|
|
# https://github.com/spdx/tools-golang/blob/main/LICENSE.code
|
|
- github.com/spdx/tools-golang
|
|
|
|
# crypto/internal/boring is released under the openSSL license as a part of the Golang Standard Libary
|
|
- crypto/internal/boring
|
|
|
|
# from: https://github.com/xi2/xz/blob/master/LICENSE
|
|
# All these files have been put into the public domain.
|
|
# You can do whatever you want with these files.
|
|
- github.com/xi2/xz
|
|
|
|
# from: https://github.com/owenrumney/go-sarif/blob/main/LICENSE
|
|
# This is released into the public domain using the "Unlicense license"
|
|
- github.com/owenrumney/go-sarif
|
|
|
|
# github.com/sorairolake/lzip-go is released under the Apache License, version 2.0 (Apache-2.0)
|
|
# https://github.com/sorairolake/lzip-go/blob/develop/LICENSE-APACHE
|
|
- github.com/sorairolake/lzip-go
|
|
|
|
# from: https://gitlab.com/cznic/sqlite/-/blob/v1.66.3/LICENSE
|
|
# This is a BSD-3-Clause license
|
|
- modernc.org/libc
|
|
- modernc.org/libc/errno
|
|
- modernc.org/libc/fcntl
|
|
- modernc.org/libc/fts
|
|
- modernc.org/libc/grp
|
|
- modernc.org/libc/langinfo
|
|
- modernc.org/libc/limits
|
|
- modernc.org/libc/netdb
|
|
- modernc.org/libc/netinet/in
|
|
- modernc.org/libc/poll
|
|
- modernc.org/libc/pthread
|
|
- modernc.org/libc/pwd
|
|
- modernc.org/libc/signal
|
|
- modernc.org/libc/stdio
|
|
- modernc.org/libc/stdlib
|
|
- modernc.org/libc/sys/socket
|
|
- modernc.org/libc/sys/stat
|
|
- modernc.org/libc/sys/types
|
|
- modernc.org/libc/termios
|
|
- modernc.org/libc/time
|
|
- modernc.org/libc/unistd
|
|
- modernc.org/libc/utime
|
|
- modernc.org/libc/uuid/uuid
|
|
- modernc.org/libc/wctype
|
|
- modernc.org/mathutil
|
|
- modernc.org/memory
|
|
|