-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Upgrade scancode to 32.4.0 and revert pinning of click #49576
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade scancode to 32.4.0 and revert pinning of click #49576
Conversation
src/arcade/src/Microsoft.DotNet.Build.Tasks.Installers/build/deb-package-tool/templates/debian/copyright|unknown-license-reference | ||
src/arcade/src/Microsoft.DotNet.Build.Tasks.Installers/build/rpm_templates/copyright|unknown-license-reference |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would categorize these as false positives since they aren't true license references.
# Windows installer files that have a reference to a URL for license | ||
src/aspnetcore/src/Installers/Windows/**/*.wxl|unknown-license-reference | ||
src/aspnetcore/src/Installers/Windows/**/*.wxs|unknown-license-reference | ||
src/aspnetcore/src/Installers/Debian/tools/templates/debian/copyright|unknown-license-reference |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should be categorized as false positive.
{ | ||
"path": "src/application-insights/WEB/ThirdPartyNotices.txt", | ||
"detected_license_expression": "(unknown-license-reference AND bsd-new) AND mit AND ms-pl AND apache-2.0 AND (cc-by-3.0-us AND cc-by-3.0 AND mit) AND ms-rl" | ||
} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This should be removed. The unknown-license-reference
should be defined as a false positive in the exclusions file.
Please update dotnet/dotnet#1401 and dotnet/installer#20486 based on the changes to make here. |
Fixes: dotnet/source-build#5208
New release of scancode is available, revert pinning of click package.