aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!
https://aboutcode.org/scancode/
2.14k stars 552 forks source link

Added OCI labels to dockerfile #3977

Open VarshaUN opened 1 week ago

VarshaUN commented 1 week ago

Reference: #3561

Tasks

Thanks!

Signed-off-by: Varsha U N varshaun58@gmail.com

VarshaUN commented 1 week ago

@pombredanne @AyanSinhaMahapatra kindly review this PR. THANK YOU

VarshaUN commented 1 week ago

There are probably a few more fields we can add from https://github.com/opencontainers/image-spec/blob/main/annotations.md?plain=1#L22

Sure @AyanSinhaMahapatra . I have added some which I think are not repeated.

Btw note that #3561 was for adding support to parse these information into package data from files we scan (So this does not fix the issue linked in your PR, I edited your PR comment).

OK I got this. Thanks for the clarification. I will look into it.