sonatype-nexus-community / jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
https://jake.readthedocs.io/
Apache License 2.0
111 stars 24 forks source link

feat: Support for all input formats when running jake ddt or jake iq #125

Closed sanzoghenzo closed 1 year ago

sanzoghenzo commented 1 year ago

This pull request makes the following changes:

BREAKING CHANGE: changed iq -i switch to -a, removed sbom -t switch (only -it works)

It relates to the following issue #s:

cc @bhamail / @DarthHater

sonatypecla[bot] commented 1 year ago

Thanks for the contribution! Unfortunately we can't verify if the committer(s), Andrea Ghensi aghensi@systra.com, signed the CLA because they have not associated their commits with their GitHub user. Please follow these instructions to associate your commits with your GitHub user. Then sign the Sonatype Contributor License Agreement and this Pull Request will be revalidated.

sanzoghenzo commented 1 year ago

I'm having trouble verifying my new corporate email address (the email filter is too strong, I suppose), I opened a ticket with my IT support to try to solve it.

In the meantime, I saw that the static_code_analysis-310-locked fails on circleci but runs fine on my machine... I had poetry 1.1.15, but it works also if I downgrade to 1.1.11.

sanzoghenzo commented 1 year ago

Email verified, still don't know how to solve the circleci error! please advise

sanzoghenzo commented 1 year ago

Is there anyone out there? :wink:

sanzoghenzo commented 1 year ago

Thanks for the PR, and apologies for the slow replies.

Don't worry, as you can see I also struggle finding time to contribute to FOSS!

I hope I addressed everything in the last two commits!