You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
reason = "No a real issue, just a warning about third party package."
4
-
5
1
[[PackageOverrides]]
6
2
name = "github.com/AdaLogics/go-fuzz-headers"
7
3
version = "0.0.0-20230811130428-ced1acdcaa24"
@@ -16,13 +12,6 @@ ecosystem = "Go"
16
12
license.override = ["MIT"]
17
13
reason = "Unidentified license, remove once https://github.com/google/deps.dev/issues/87 is resolved"
18
14
19
-
[[PackageOverrides]]
20
-
name = "github.com/containers/storage"
21
-
version = "1.55.0"
22
-
ecosystem = "Go"
23
-
license.override = ["Apache-2.0"]
24
-
reason = "Unidentified license, remove once https://github.com/google/deps.dev/issues/104 is resolved"
25
-
26
15
[[PackageOverrides]]
27
16
name = "github.com/distribution/distribution/v3"
28
17
version = "3.0.0-beta.1"
@@ -41,32 +30,28 @@ reason = "This package has dual license - the code is licensed under the Apache
41
30
name = "github.com/go-sql-driver/mysql"
42
31
version = "1.8.1"
43
32
ecosystem = "Go"
44
-
# Override the license to an allowed one until https://github.com/google/osv-scanner/issues/1124 is resolved and we can skip it from license scanning instead
45
-
license.override = ["Apache-2.0"]
33
+
license.ignore = true
46
34
reason = "This package has MPL-2.0 which is not approved in CNCF Allowlist, but it has an exception. See https://github.com/cncf/foundation/blob/main/license-exceptions/CNCF-licensing-exceptions.csv"
47
35
48
36
[[PackageOverrides]]
49
37
name = "github.com/hashicorp/errwrap"
50
38
version = "1.1.0"
51
39
ecosystem = "Go"
52
-
# Override the license to an allowed one until https://github.com/google/osv-scanner/issues/1124 is resolved and we can skip it from license scanning instead
53
-
license.override = ["Apache-2.0"]
40
+
license.ignore = true
54
41
reason = "This package has MPL-2.0 which is not approved in CNCF Allowlist, but it has an exception. See https://github.com/cncf/foundation/blob/main/license-exceptions/CNCF-licensing-exceptions.csv"
55
42
56
43
[[PackageOverrides]]
57
44
name = "github.com/hashicorp/go-multierror"
58
45
version = "1.1.1"
59
46
ecosystem = "Go"
60
-
# Override the license to an allowed one until https://github.com/google/osv-scanner/issues/1124 is resolved and we can skip it from license scanning instead
61
-
license.override = ["Apache-2.0"]
47
+
license.ignore = true
62
48
reason = "This package has MPL-2.0 which is not approved in CNCF Allowlist, but it has an exception. See https://github.com/cncf/foundation/blob/main/license-exceptions/CNCF-licensing-exceptions.csv"
63
49
64
50
[[PackageOverrides]]
65
51
name = "github.com/hashicorp/hcl"
66
52
version = "1.0.0"
67
53
ecosystem = "Go"
68
-
# Override the license to an allowed one until https://github.com/google/osv-scanner/issues/1124 is resolved and we can skip it from license scanning instead
69
-
license.override = ["Apache-2.0"]
54
+
license.ignore = true
70
55
reason = "This package has MPL-2.0 which is not approved in CNCF Allowlist, but it has an exception. See https://github.com/cncf/foundation/blob/main/license-exceptions/CNCF-licensing-exceptions.csv"
71
56
72
57
[[PackageOverrides]]
@@ -80,19 +65,11 @@ reason = "This package has dual license - the code is licensed under the Apache
80
65
name = "github.com/shoenig/go-m1cpu"
81
66
version = "0.1.6"
82
67
ecosystem = "Go"
83
-
# Override the license to an allowed one until https://github.com/google/osv-scanner/issues/1124 is resolved and we can skip it from license scanning instead
84
-
license.override = ["Apache-2.0"]
68
+
license.ignore = true
85
69
reason = "This package has MPL-2.0 which is not approved in CNCF Allowlist, but it has an exception. See https://github.com/cncf/foundation/blob/main/license-exceptions/cncf-exceptions-2023-08-31.spdx"
86
70
87
71
[[PackageOverrides]]
88
72
name = "stdlib"
89
73
ecosystem = "Go"
90
74
license.override = ["BSD-3-Clause"]
91
75
reason = "Unidentified license, remove once https://github.com/google/deps.dev/issues/86 is resolved"
0 commit comments