gitlab-license_finder 6.14.2.1

data/CONTRIBUTING.md

@@ -0,0 +1,121 @@
+# Contributing
+
+## TL;DR
+
+* Fork the project from https://github.com/pivotal/LicenseFinder
+* Create a feature branch.
+* Make your feature addition or bug fix. Please make sure there is appropriate test coverage.
+* Rebase on top of master.
+* Send a pull request with commit messages tagged with an entry specified here: https://keepachangelog.com/en/1.0.0/.
+
+## Running Tests
+
+You can use the [LicenseFinder docker image](https://hub.docker.com/r/licensefinder/license_finder/) to run the tests by using the `dlf` script.
+There are 2 sets of tests to run in order to confirm that License Finder is working as intended:
+
+```
+./dlf rake spec
+./dlf bundle exec rake features
+```
+
+The `spec` task runs all the unit test and the `features` task will run all the feature test.
+Note that the feature test needs to be wrapped in `bundle exec`, or else it
+will use the gem version installed inside the docker image.
+
+## Useful Tips
+
+To build the docker image simply call `docker build .` or explicitly pass the `Dockerfile`. Prebuilt versions of the
+dockerfile can also be found on [Dockerhub](https://hub.docker.com/r/licensefinder/license_finder/tags/).
+
+To launch the docker image and interact with it via bash:
+```
+docker run -v $PWD:/scan -it licensefinder/license_finder /bin/bash -l
+
+```
+`-v $PWD:/scan` will mount the current working directory to the /scan path.
+
+## Adding Package Managers
+
+There are a few steps to adding a new package manager.
+The main things which need to be implemented are mentioned in [Package Manager](https://github.com/pivotal/LicenseFinder/blob/master/lib/license_finder/package_manager.rb).
+
+[Here](https://github.com/pivotal/LicenseFinder/compare/v2.0.0...v2.0.1) is how
+support was added for `rebar`, an `erlang` package manager.
+
+There are feature tests and unit tests for each currently supported package manager.
+* [Feature test example](https://github.com/pivotal/LicenseFinder/blob/master/features/features/package_managers/gvt_spec.rb)
+* [Unit test example](https://github.com/pivotal/LicenseFinder/blob/master/spec/lib/license_finder/package_managers/gvt_spec.rb)
+
+## Adding Licenses
+
+Add new licenses to `lib/license_finder/license/definitions.rb`.  There are
+existing tools for matching licenses; see, for example, the MIT license, which
+can be detected in many different ways.
+
+
+## Adding Reports
+
+If you need `license_finder` to output additional package data, consider
+submitting a pull request which adds new columns to
+`lib/license_finder/reports/csv_report.rb`.
+
+It is also possible to generate a custom report from an ERB template.  Use this
+[example](https://github.com/pivotal/LicenseFinder/blob/master/examples/custom_erb_template.rb) as a starting
+point.  These reports will have access to the helpers in
+[`LicenseFinder::ErbReport`](https://github.com/pivotal/LicenseFinder/blob/master/lib/license_finder/reports/erb_report.rb).
+
+If you need a report with more detailed data or in a different format, we
+recommend writing a custom ruby script.  This
+[example](https://github.com/pivotal/LicenseFinder/blob/master/examples/extract_license_data.rb) will get you
+started.
+
+If you come up with something useful, consider posting it to the Google Group
+[license-finder@googlegroups.com](license-finder@googlegroups.com).
+
+
+## Development Dependencies
+
+To successfully run the test suite, you will need the following installed:
+- NPM (requires Node)
+- Yarn (requires Node)
+- Bower (requires Node and NPM)
+- Maven (requires Java)
+- Gradle (requires Java)
+- Pip (requires python)
+- Rebar (requires erlang)
+- GoDep, GoWorkspace, govendor, Glide, Dep, and Gvt (requires golang)
+- CocoaPods (requires ruby)
+- Bundler (requires ruby)
+- Carthage (requires homebrew)
+- Mix (requires Elixir)
+- Conan
+- NuGet
+- dotnet
+- Conda (requires python)
+
+The [LicenseFinder docker image](https://hub.docker.com/r/licensefinder/license_finder/) already contains these dependencies.
+
+If you run `rake check_dependencies`, you'll see exactly which package managers you're missing.
+
+### Python
+
+For the python dependency tests you will want to have virtualenv
+installed, to allow pip to work without sudo. For more details, see
+this [post on virtualenv][].
+
+  [post on virtualenv]: http://hackercodex.com/guide/python-development-environment-on-mac-osx/#virtualenv
+
+You'll need a pip version >= 6.0.
+
+### JRuby
+
+If you're running the test suite with jruby, you're probably going to
+want to set up some environment variables:
+
+```
+JAVA_OPTS='-client -XX:+TieredCompilation -XX:TieredStopAtLevel=1' JRUBY_OPTS='-J-Djruby.launch.inproc=true'
+```
+
+### Gradle
+
+You'll need a gradle version >= 1.8.

data/Dockerfile

@@ -0,0 +1,249 @@
+FROM ubuntu:bionic
+
+WORKDIR /tmp
+
+# Versioning
+ENV PIP_INSTALL_VERSION 19.0.2
+ENV PIP3_INSTALL_VERSION 20.0.2
+ENV GO_LANG_VERSION 1.14.3
+ENV MAVEN_VERSION 3.6.0
+ENV SBT_VERSION 1.3.3
+ENV GRADLE_VERSION 5.6.4
+ENV RUBY_VERSION 2.7.1
+ENV MIX_VERSION 1.0
+ENV COMPOSER_ALLOW_SUPERUSER 1
+
+# programs needed for building
+RUN apt-get update && apt-get install -y \
+  build-essential \
+  curl \
+  sudo \
+  unzip \
+  wget \
+  gnupg2 \
+  apt-utils \
+  software-properties-common \
+  bzr
+
+RUN add-apt-repository ppa:git-core/ppa && apt-get update && apt-get install -y git
+
+# nodejs seems to be required for the one of the gems
+RUN curl -sL https://deb.nodesource.com/setup_14.x | bash - && \
+    apt-get -y install nodejs
+
+# install yarn
+RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add - && \
+  echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list && \
+  apt-get update && \
+  apt-get install yarn
+
+# install bower
+RUN npm install -g bower && \
+    echo '{ "allow_root": true }' > /root/.bowerrc
+
+# install jdk 12
+RUN curl -L -o openjdk12.tar.gz https://download.java.net/java/GA/jdk12.0.2/e482c34c86bd4bf8b56c0b35558996b9/10/GPL/openjdk-12.0.2_linux-x64_bin.tar.gz && \
+    tar xvf openjdk12.tar.gz && \
+    rm openjdk12.tar.gz && \
+    sudo mv jdk-12.0.2 /opt/ && \
+    sudo rm /opt/jdk-12.0.2/lib/src.zip
+ENV JAVA_HOME=/opt/jdk-12.0.2
+ENV PATH=$PATH:$JAVA_HOME/bin
+RUN java -version
+
+# install rebar3
+RUN curl -o rebar3 https://s3.amazonaws.com/rebar3/rebar3 && \
+    sudo chmod +x rebar3 && \
+    sudo mv rebar3 /usr/local/bin/rebar3
+
+# install and update python and python-pip
+RUN apt-get install -y python python-pip python3-pip && \
+    python3 -m pip install pip==$PIP3_INSTALL_VERSION --upgrade && \
+    python -m pip install pip==$PIP_INSTALL_VERSION --upgrade --force
+
+# install maven
+RUN curl -O https://archive.apache.org/dist/maven/maven-3/$MAVEN_VERSION/binaries/apache-maven-$MAVEN_VERSION-bin.tar.gz && \
+    tar -xf apache-maven-$MAVEN_VERSION-bin.tar.gz; rm -rf apache-maven-$MAVEN_VERSION-bin.tar.gz && \
+    mv apache-maven-$MAVEN_VERSION /usr/local/lib/maven && \
+    ln -s /usr/local/lib/maven/bin/mvn /usr/local/bin/mvn
+
+# install sbt
+RUN mkdir -p /usr/local/share/sbt-launcher-packaging && \
+    curl --progress \
+    --retry 3 \
+    --retry-delay 15 \
+    --location "https://github.com/sbt/sbt/releases/download/v${SBT_VERSION}/sbt-${SBT_VERSION}.tgz" \
+    --output "/tmp/sbt-${SBT_VERSION}.tgz" && \
+    tar -xzf "/tmp/sbt-${SBT_VERSION}.tgz" -C /usr/local/share/sbt-launcher-packaging --strip-components=1 && \
+    ln -s /usr/local/share/sbt-launcher-packaging/bin/sbt /usr/local/bin/sbt && \
+    rm -f "/tmp/sbt-${SBT_VERSION}.tgz"
+
+# install gradle
+RUN curl -L -o gradle.zip https://services.gradle.org/distributions/gradle-$GRADLE_VERSION-bin.zip && \
+    unzip -q gradle.zip && \
+    rm gradle.zip && \
+    mv gradle-$GRADLE_VERSION /root/gradle
+ENV PATH=/root/gradle/bin:$PATH
+
+#install go
+WORKDIR /go
+RUN wget https://storage.googleapis.com/golang/go$GO_LANG_VERSION.linux-amd64.tar.gz -O go.tar.gz && tar --strip-components=1 -xf go.tar.gz && rm -f go.tar.gz
+ENV GOROOT /go
+ENV PATH=$PATH:/go/bin
+
+# godep is now required for license_finder to work for project that are still managed with GoDep
+ENV GOROOT=/go
+ENV GOPATH=/gopath
+ENV PATH=$PATH:$GOPATH/bin
+RUN mkdir /gopath && \
+  go get github.com/tools/godep && \
+  go get github.com/FiloSottile/gvt && \
+  go get github.com/Masterminds/glide && \
+  go get github.com/kardianos/govendor && \
+  go get github.com/golang/dep/cmd/dep && \
+  go get -u github.com/rancher/trash && \
+  go clean -cache
+
+WORKDIR /tmp
+# Fix the locale
+RUN apt-get install -y locales
+RUN locale-gen en_US.UTF-8
+ENV LANG=en_US.UTF-8
+ENV LANGUAGE=en_US:en
+ENV LC_ALL=en_US.UTF-8
+
+# install Cargo
+RUN curl https://sh.rustup.rs -sSf | bash -ls -- -y --profile minimal
+
+#install rvm
+RUN apt-add-repository -y ppa:rael-gc/rvm && \
+    apt update && apt install -y rvm && \
+    /usr/share/rvm/bin/rvm install --default $RUBY_VERSION
+
+# install bundler
+RUN bash -lc "gem update --system && gem install bundler"
+
+#install mix
+RUN wget https://packages.erlang-solutions.com/erlang-solutions_${MIX_VERSION}_all.deb && \
+    sudo dpkg -i erlang-solutions_${MIX_VERSION}_all.deb && \
+    sudo rm -f erlang-solutions_${MIX_VERSION}_all.deb && \
+    sudo apt-get update && \
+    sudo apt-get install -y esl-erlang && \
+    sudo apt-get install -y elixir
+
+# install conan
+RUN apt-get install -y python-dev && \
+	pip install --no-cache-dir --ignore-installed six --ignore-installed colorama \
+	    --ignore-installed requests --ignore-installed chardet \
+	    --ignore-installed urllib3 \
+	    --upgrade setuptools && \
+    pip install --no-cache-dir -Iv conan==1.11.2 && \
+    conan config install https://github.com/conan-io/conanclientcert.git
+
+
+# install NuGet (w. mono)
+# https://docs.microsoft.com/en-us/nuget/install-nuget-client-tools#macoslinux
+RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 3FA7E0328081BFF6A14DA29AA6A19B38D3D831EF &&\
+  echo "deb https://download.mono-project.com/repo/ubuntu stable-bionic main" | sudo tee /etc/apt/sources.list.d/mono-official-stable.list &&\
+  apt-get update &&\
+  apt-get install -y mono-complete &&\
+  curl -o "/usr/local/bin/nuget.exe" "https://dist.nuget.org/win-x86-commandline/latest/nuget.exe" &&\
+  curl -o "/usr/local/bin/nugetv3.5.0.exe" "https://dist.nuget.org/win-x86-commandline/v3.5.0/nuget.exe"
+
+# install dotnet core
+RUN wget -q https://packages.microsoft.com/config/ubuntu/18.04/packages-microsoft-prod.deb &&\
+  sudo dpkg -i packages-microsoft-prod.deb &&\
+  rm packages-microsoft-prod.deb &&\
+  sudo apt-get update &&\
+  sudo apt-get install -y dotnet-runtime-2.1 dotnet-sdk-2.1 dotnet-sdk-2.2 dotnet-sdk-3.0 dotnet-sdk-3.1
+
+# install Composer
+# The ARG and ENV are for installing tzdata which is part of this installaion.
+# https://serverfault.com/questions/949991/how-to-install-tzdata-on-a-ubuntu-docker-image
+ENV TZ=GMT
+RUN apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 4F4EA0AAE5267A6C &&\
+    echo "deb http://ppa.launchpad.net/ondrej/php/ubuntu bionic main" | sudo tee /etc/apt/sources.list.d/php.list &&\
+    apt-get update &&\
+    export DEBIAN_FRONTEND=noninteractive &&\
+    apt-get install -y php7.4-cli &&\
+    EXPECTED_COMPOSER_INSTALLER_CHECKSUM="$(curl --silent https://composer.github.io/installer.sig)" &&\
+    php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" &&\
+    ACTUAL_COMPOSER_INSTALLER_CHECKSUM="$(php -r "echo hash_file('sha384', 'composer-setup.php');")" &&\
+    test "${ACTUAL_COMPOSER_INSTALLER_CHECKSUM}" = "${EXPECTED_COMPOSER_INSTALLER_CHECKSUM}" || (echo "ERROR: Invalid installer checksum" >&2; false) &&\
+    php composer-setup.php &&\
+    php -r "unlink('composer-setup.php');" &&\
+    mv composer.phar /usr/bin/composer
+
+# install miniconda
+# See https://docs.conda.io/en/latest/miniconda_hashes.html
+# for latest versions and SHAs.
+RUN  \
+  conda_installer=Miniconda3-py38_4.9.2-Linux-x86_64.sh &&\
+  ref='1314b90489f154602fd794accfc90446111514a5a72fe1f71ab83e07de9504a7' &&\
+  wget -q https://repo.anaconda.com/miniconda/${conda_installer} &&\
+  sha=`openssl sha256 "${conda_installer}" | cut -d' ' -f2` &&\
+  ([ "$sha" = "${ref}" ] || (echo "Verification failed: ${sha} != ${ref}"; false)) &&\
+  (echo; echo "yes") | sh "${conda_installer}"
+
+# install Swift Package Manager
+# Based on https://github.com/apple/swift-docker/blob/main/5.3/ubuntu/18.04/Dockerfile
+# The GPG download steps has been modified. Keys are now on LF repo and copied instaad of downloaded.
+# Refer to https://swift.org/download/#using-downloads in the Linux section on how to download the keys
+RUN apt-get -q install -y \
+    libatomic1 \
+    libcurl4 \
+    libxml2 \
+    libedit2 \
+    libsqlite3-0 \
+    libc6-dev \
+    binutils \
+    libgcc-5-dev \
+    libstdc++-5-dev \
+    zlib1g-dev \
+    libpython2.7 \
+    tzdata \
+    git \
+    pkg-config \
+    && rm -r /var/lib/apt/lists/*
+
+# pub   4096R/ED3D1561 2019-03-22 [SC] [expires: 2023-03-23]
+#       Key fingerprint = A62A E125 BBBF BB96 A6E0  42EC 925C C1CC ED3D 1561
+# uid                  Swift 5.x Release Signing Key <swift-infrastructure@swift.org
+ARG SWIFT_SIGNING_KEY=A62AE125BBBFBB96A6E042EC925CC1CCED3D1561
+ARG SWIFT_PLATFORM=ubuntu18.04
+ARG SWIFT_BRANCH=swift-5.3.3-release
+ARG SWIFT_VERSION=swift-5.3.3-RELEASE
+ARG SWIFT_WEBROOT=https://download.swift.org
+
+ENV SWIFT_SIGNING_KEY=$SWIFT_SIGNING_KEY \
+    SWIFT_PLATFORM=$SWIFT_PLATFORM \
+    SWIFT_BRANCH=$SWIFT_BRANCH \
+    SWIFT_VERSION=$SWIFT_VERSION \
+    SWIFT_WEBROOT=$SWIFT_WEBROOT
+
+COPY swift-all-keys.asc .
+RUN set -e; \
+    SWIFT_WEBDIR="$SWIFT_WEBROOT/$SWIFT_BRANCH/$(echo $SWIFT_PLATFORM | tr -d .)" \
+    && SWIFT_BIN_URL="$SWIFT_WEBDIR/$SWIFT_VERSION/$SWIFT_VERSION-$SWIFT_PLATFORM.tar.gz" \
+    && SWIFT_SIG_URL="$SWIFT_BIN_URL.sig" \
+    # - Grab curl here so we cache better up above
+    && export DEBIAN_FRONTEND=noninteractive \
+    && apt-get -q update && apt-get -q install -y curl && rm -rf /var/lib/apt/lists/* \
+    # - Download the GPG keys, Swift toolchain, and toolchain signature, and verify.
+    && export GNUPGHOME="$(mktemp -d)" \
+    && curl -fsSL "$SWIFT_BIN_URL" -o swift.tar.gz "$SWIFT_SIG_URL" -o swift.tar.gz.sig \
+    && gpg --import swift-all-keys.asc \
+    && gpg --batch --verify swift.tar.gz.sig swift.tar.gz \
+    # - Unpack the toolchain, set libs permissions, and clean up.
+    && tar -xzf swift.tar.gz --directory / --strip-components=1 \
+    && chmod -R o+r /usr/lib/swift \
+    && rm -rf "$GNUPGHOME" swift.tar.gz.sig swift.tar.gz \
+    set +e
+
+# install license_finder
+COPY . /LicenseFinder
+RUN bash -lc "cd /LicenseFinder && bundle config set no-cache 'true' && bundle install -j4 && rake install"
+
+WORKDIR /
+
+CMD cd /scan && /bin/bash -l

data/Gemfile

@@ -0,0 +1,2 @@
+source 'https://rubygems.org'
+gemspec

data/LICENSE

@@ -0,0 +1,22 @@
+The MIT License
+
+Copyright (c) 2012-2020 Pivotal Software, Inc. All Rights Reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+