python-ort/tests/data/example_simple_curation.yml at fd7ba0a189ea310df77853d37460ac3ea4e57f31 · cariad-tech/python-ort · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
- id: 'Maven:com.example.app:example:0.0.1'
  curations:
    comment: 'An explanation why the curation is needed or the reasoning for a license conclusion'
    purl: 'pkg:Maven/com.example.app/example@0.0.1?arch=arm64-v8a#src/main'
    authors:
      - 'Name of one author'
      - 'Name of another author'
    cpe: 'cpe:2.3:a:example-org:example-package:0.0.1:*:*:*:*:*:*:*'
    concluded_license: 'Valid SPDX license expression to override the license findings.'
    declared_license_mapping:
      'license a': 'Apache-2.0'
    description: 'Curated description.'
    homepage_url: 'http://example.com'
    binary_artifact:
      url: 'http://example.com/binary.zip'
      hash:
        value: 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
        algorithm: 'SHA256'
    source_artifact:
      url: 'http://example.com/sources.zip'
      hash:
        value: 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'
        algorithm: 'SHA-256'
    vcs:
      type: 'Git'
      url: 'http://example.com/repo.git'
      revision: '1234abc'
      path: 'subdirectory'
    is_metadata_only: true
    is_modified: true
    source_code_origins: [ARTIFACT, VCS]
    labels:
      my-key: 'my-value'