Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add composer and golang versions #72

Merged

Conversation

TG1999
Copy link
Contributor

@TG1999 TG1999 commented May 12, 2022

and also add support for their gitlab version ranges
Signed-off-by: Tushar Goel tushar.goel.dav@gmail.com

@TG1999 TG1999 force-pushed the version_ranges/composer_and_golang branch 4 times, most recently from 0f81bbf to eb8d96b Compare May 12, 2022 15:36
VersionConstraint(
comparator=comparator, version=vrc.version_class(version_constraint)
)
def from_gitlab_native(scheme, string):
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the scheme exactly that of GitLab? or this is ours and there has been a mapping already done upstream in VulnerableCode?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This scheme is exactly from GitLab itself, the tests that I have added here are from GitLab only and not changed at all.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good, so they use purl types like we do then! ... good.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One thing, what do you mean by scheme here? The version range or the package type itself? We map the type from slug in yaml file to package url type, and then use as scheme here

Copy link
Member

@pombredanne pombredanne left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! I just have one question.

@TG1999 TG1999 force-pushed the version_ranges/composer_and_golang branch from eb8d96b to 657b0f7 Compare May 13, 2022 11:15
And also support gitlab native ranges for them

Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>
@TG1999 TG1999 force-pushed the version_ranges/composer_and_golang branch from 657b0f7 to c80e716 Compare May 13, 2022 11:24
Copy link
Member

@pombredanne pombredanne left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 👍

@TG1999 TG1999 merged commit cce7806 into aboutcode-org:main May 13, 2022
keshav-space pushed a commit that referenced this pull request Aug 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants