Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feat] add the hackage meta analyzer #3546

Closed

Conversation

MangoIV
Copy link
Contributor

@MangoIV MangoIV commented Mar 12, 2024

Description

This adds support for pulling information from hackage necessary to offer using a newer version for vulnerable packages.

Addressed Issue

solves task 1 in #3545

Additional Details

Checklist

  • I have read and understand the contributing guidelines
  • This PR implements an enhancement, and I have provided tests to verify that it works as intended

Signed-off-by: Magnus Viernickel <magnus.viernickel@wire.com>
Signed-off-by: Magnus Viernickel <magnus.viernickel@wire.com>
@MangoIV MangoIV force-pushed the mangoiv/hackage-meta-analyzer branch from 7e41b77 to ba13d15 Compare March 12, 2024 17:57
Signed-off-by: Magnus Viernickel <magnus.viernickel@wire.com>
@MangoIV MangoIV force-pushed the mangoiv/hackage-meta-analyzer branch from c8eada3 to 6f07185 Compare March 12, 2024 18:47
@MangoIV MangoIV marked this pull request as ready for review March 12, 2024 18:55
@MangoIV
Copy link
Contributor Author

MangoIV commented Mar 13, 2024

package-url/packageurl-java#130 has been merged, I hope to rebase as soon as they have cut a release and your dependency bot has bumped packageur-java

@MangoIV
Copy link
Contributor Author

MangoIV commented Mar 14, 2024

Yeah this will fail for the same reason as the other thing, the license headers are missing (unfortunately I couldn’t see them because intellij idea decided it was too much visual clutter, it seems to have a weird way of handling screen estate) 😅

@MangoIV
Copy link
Contributor Author

MangoIV commented Mar 18, 2024

I think I will move this to #3549 so I don't have to rebase on the changes required for this PR there.

@MangoIV MangoIV closed this Mar 18, 2024
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Apr 18, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant