Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Upgrade to fossology 4.4.0 -> fossology-python 3.2.0

See merge request !82

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

see https://github.com/fossology/fossology/issues/2684



We need to restart fossology service at every upload to prevent that issue to happen

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

We need to keep python 3.8 in a separate venv for scancode until we upgrade it, too

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

We put version in a separate module, so that dotenv is not
needed any more to run setup

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Setting it to true may lead to unwanted side effects in Fossology,
especially for files that do not have any license header or information
inside

In Fossology, licenseInfo data correspond to scanner findings,
and are stored in the db on a per-file basis, so they are automatically
applied to any occurrence of that file in any upload (even future ones).
If such data turn out to be wrong or incorrect in the context of another
upload, there is no other way to delete them than manually deleting
them in the db.

License conclusions, that may have been made based
on the context and not on the license header found in the file, should
never be stored as license findings, which are always applied regardless
of the context. Actually, this option shouldn't be there at all, in
Fossology

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

snapmatch: add workaround for 404 errors

Closes #100

See merge request !80

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

For some package versions, snapmatch.debian.org returns
error 404 when trying to get source file information: add
workaround to choose the closest available version that
can be downloaded

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

in fossology-python Fossology.session.get(),
array params are wrongly serialized like in
"agent=monk;agent=ojo;agent=nomos",
so fossology API takes only the last one.
We need to add parameters directly in the
get string in the right way, like in
"agent=monk,ojo,nomos"

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

otherwise in case of error, the AlienMatcherError exception raises
another exception because self.curpkg is not defined

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Resolve "build jobs should not run in MR, and test jobs shoud run before build jobs"

Closes #96

See merge request !79

Signed-off-by: sebastien.heurtematte <sebastien.heurtematte@eclipse-foundation.org>

Signed-off-by: sebastien.heurtematte <sebastien.heurtematte@eclipse-foundation.org>

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

add --remove-variants functionality

See merge request !78

Signed-off-by: Alberto Pianon <alberto@pianon.eu>

Pipeline migration: Migration EF runner

See merge request !77

ci: EF migration. Related to eclipse-wg/oniro-wg/products-services-oniro-wg/it-services-oniro-wg/pipelines-architecture-oniro-wg#61



Signed-off-by: sebastien.heurtematte <sebastien.heurtematte@eclipse-foundation.org>

harvest: add cve stats calculation

See merge request !76

Otherwise severe issues for which one of the two scores (v2 or v3) is 
not set may be put below less severe issues in issue list ordered by 
cveScoreSum