Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed compund SPDX expression resolution in detection & clue matches #619

Merged
merged 1 commit into from
Dec 9, 2023

Conversation

OmkarPh
Copy link
Collaborator

@OmkarPh OmkarPh commented Dec 6, 2023

This fixes the spdx license expression resolution issue discussed in #610

Signed-off-by: Omkar Phansopkar <omkarphansopkar@gmail.com>
@OmkarPh
Copy link
Collaborator Author

OmkarPh commented Dec 6, 2023

Hey @AyanSinhaMahapatra
Can you share some scans with complex license expressions?
I just want to ensure there aren't any edge cases

@OmkarPh OmkarPh changed the title Fixed compund SPDX expression resolution in detection & clues matches Fixed compund SPDX expression resolution in detection & clue matches Dec 6, 2023
Copy link
Member

@AyanSinhaMahapatra AyanSinhaMahapatra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!
Thanks @OmkarPh
The issue was resolved by this.
Here's another scan I used for testing a long license-expression:
test.json.txt

Looks good to me now, should be good. For match-level license-expressions this should be enough, there could be composite license-expression corner cases but no use building a perfect license-expression -> SPDX license expression here in workbench, as that's something that should be (and is presently) handled in SCTK.
Anyway I think we are soon having SPDX license expressions everywhere we have our expressions, so then this will be better as we don't want to do this computation on the workbench side.
Please merge!

@OmkarPh
Copy link
Collaborator Author

OmkarPh commented Dec 9, 2023

Thanks @AyanSinhaMahapatra
Merging !

Looks good to me now, should be good. For match-level license-expressions this should be enough, there could be composite license-expression corner cases but no use building a perfect license-expression -> SPDX license expression here in workbench, as that's something that should be (and is presently) handled in SCTK. Anyway I think we are soon having SPDX license expressions everywhere we have our expressions, so then this will be better as we don't want to do this computation on the workbench side. Please merge!

That's nice 😄
This would still be useful in maintaining backward compatibility

@OmkarPh OmkarPh merged commit 99a1525 into develop Dec 9, 2023
@pombredanne pombredanne deleted the fix/missing-license-expressions_spdx branch December 10, 2024 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants