Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only trim spaces of array parameter entries #670

Closed
wants to merge 1 commit into from

Conversation

jonas-peeters
Copy link

  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.

Some packages include a space in the names of their license. In particular this is a problem with “Public Domain” in org.json:json here: https://github.com/stleary/JSON-java/blob/master/pom.xml#L32

I added the function to read the list of allowed licenses from the environment variable that does not remove all spaces but only ones at the beginning and end of each individual entry. This preserves spaces inside the entries. I have updated a unit test to cover this change.

Note: While all unit tests are passing, the GitHub Job “Scan Pull Request Tests” fails in my fork. This, however, appears not to be related to my change, as these were failing before as well. I think this may be caused by a different JFrog server version that reports some vulnerabilities slightly different from what is expected by these tests.

Please let me know if I need to change anything to move this PR forward.

Some packages include a space in the names of their license. In
particular this is a problem with "Public Domain" in org.json:json here:
https://github.com/stleary/JSON-java/blob/master/pom.xml#L32

Add a new function to read an array of strings from an environment
variable that does not remove all spaces but only ones at the beginning
and end of each individual entry. This preserves spaces inside the
entries. Read list of allowed licenses using this new function.
Copy link
Contributor

github-actions bot commented Mar 25, 2024

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

@jonas-peeters
Copy link
Author

I have read the CLA Document and I hereby sign the CLA

@jonas-peeters
Copy link
Author

Given, that the license for the org.json:json package was updated in Artifactory to CC0-1.0 (I think?) this is not an issue anymore for us. But feel free to reopen in the future.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant