aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
https://aquasecurity.github.io/trivy
Apache License 2.0
23.11k stars 2.28k forks source link

Improve license normalization #7132

Closed pbaumard closed 2 months ago

pbaumard commented 2 months ago

Discussed in https://github.com/aquasecurity/trivy/discussions/7130

Originally posted by **pbaumard** July 9, 2024 ### Description Some unmatched licenses with trivy 0.53 with a sample corresponding Maven package name: - "MIT License": org.slf4j:slf4j-api - "The MIT License": org.mockito:mockito-core - "BSD License 3": org.hamcrest:hamcrest - "Eclipse Public License 1.0": junit:junit - "GPL2 w/ CPE": jakarta.annotation:jakarta.annotation-api - "MIT-0": org.reactivestreams:reactive-streams ### Target None ### Scanner License
github-actions[bot] commented 2 months ago

Please see https://aquasecurity.github.io/trivy/latest/community/contribute/issue/