Skip to content

Commit 529114f

Browse files
tsteenbetsteenbe
committed
Add SPDX 2.2 funtest resources from ORT 67.1.0 reporter
Signed-off-by: Thomas Steenbergen <[email protected]>
1 parent 191de3c commit 529114f

File tree

4 files changed

+660
-0
lines changed

4 files changed

+660
-0
lines changed

‎scanpipe/tests/data/integrations-ort/ort-reporter-spdx-2.2-funtest-resources/synthetic-scan-result-expected-output.spdx.json‎

Lines changed: 324 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,324 @@
1+
{
2+
"SPDXID" : "SPDXRef-DOCUMENT",
3+
"spdxVersion" : "SPDX-2.2",
4+
"creationInfo" : {
5+
"comment" : "some creation info comment",
6+
"created" : "<REPLACE_CREATION_DATE_AND_TIME>",
7+
"creators" : [ "Person: some creation info person", "Organization: some creation info organization", "Tool: ort-<REPLACE_ORT_VERSION>" ],
8+
"licenseListVersion" : "<REPLACE_LICENSE_LIST_VERSION>"
9+
},
10+
"name" : "some document name",
11+
"dataLicense" : "CC0-1.0",
12+
"comment" : "some document comment",
13+
"hasExtractedLicensingInfos" : [ {
14+
"extractedText" : "ASMUS License\n\nDisclaimer and legal rights\n---------------------------\n\nThis file contains bugs. All representations to the contrary are void.\n\nSource code in this file and the accompanying headers and included \nfiles may be distributed free of charge by anyone, as long as full \ncredit is given and any and all liabilities are assumed by the \nrecipient.",
15+
"licenseId" : "LicenseRef-scancode-asmus"
16+
}, {
17+
"extractedText" : "To anyone who acknowledges that the file \"sRGB Color Space Profile.icm\" \nis provided \"AS IS\" WITH NO EXPRESS OR IMPLIED WARRANTY:\npermission to use, copy and distribute this file for any purpose is hereby \ngranted without fee, provided that the file is not changed including the HP \ncopyright notice tag, and that the name of Hewlett-Packard Company not be \nused in advertising or publicity pertaining to distribution of the software \nwithout specific, written prior permission. Hewlett-Packard Company makes \nno representations about the suitability of this software for any purpose.",
18+
"licenseId" : "LicenseRef-scancode-srgb"
19+
} ],
20+
"documentNamespace" : "<REPLACE_DOCUMENT_NAMESPACE>",
21+
"documentDescribes" : [ "SPDXRef-Project-Maven-proj1-grp-proj1-0.0.1" ],
22+
"packages" : [ {
23+
"SPDXID" : "SPDXRef-Project-Maven-proj1-grp-proj1-0.0.1",
24+
"copyrightText" : "NONE",
25+
"downloadLocation" : "https://github.com/path/proj1-repo.git",
26+
"filesAnalyzed" : false,
27+
"homepage" : "https://example.com/proj1/homepage",
28+
"licenseConcluded" : "NOASSERTION",
29+
"licenseDeclared" : "MIT",
30+
"name" : "proj1",
31+
"versionInfo" : "0.0.1"
32+
}, {
33+
"SPDXID" : "SPDXRef-Package-Go-gopkg.in.yaml.v3-3.0.1",
34+
"copyrightText" : "Copyright (c) 2006-2010 Kirill Simonov",
35+
"downloadLocation" : "NONE",
36+
"externalRefs" : [ {
37+
"referenceCategory" : "PACKAGE_MANAGER",
38+
"referenceType" : "purl",
39+
"referenceLocator" : "pkg:golang/gopkg.in/[email protected]"
40+
} ],
41+
"filesAnalyzed" : false,
42+
"homepage" : "NONE",
43+
"licenseConcluded" : "NOASSERTION",
44+
"licenseDeclared" : "Apache-2.0 AND MIT",
45+
"name" : "gopkg.in/yaml.v3",
46+
"versionInfo" : "3.0.1"
47+
}, {
48+
"SPDXID" : "SPDXRef-Package-Go-gopkg.in.yaml.v3-3.0.1-vcs",
49+
"copyrightText" : "Copyright (c) 2006-2010 Kirill Simonov",
50+
"downloadLocation" : "git+https://gopkg.in/yaml.v3@f6f7691b1fdeb513f56608cd2c32c51f8194bf51",
51+
"externalRefs" : [ {
52+
"referenceCategory" : "PACKAGE_MANAGER",
53+
"referenceType" : "purl",
54+
"referenceLocator" : "pkg:golang/gopkg.in/[email protected]"
55+
} ],
56+
"filesAnalyzed" : true,
57+
"hasFiles" : [ "SPDXRef-File-1", "SPDXRef-File-2" ],
58+
"homepage" : "NONE",
59+
"licenseConcluded" : "NOASSERTION",
60+
"licenseDeclared" : "Apache-2.0 AND MIT",
61+
"licenseInfoFromFiles" : [ "Apache-2.0", "MIT" ],
62+
"name" : "gopkg.in/yaml.v3",
63+
"packageVerificationCode" : {
64+
"packageVerificationCodeValue" : "1ee5bcb5fe279ad210bd57c8bc9bcfe5ae99729f"
65+
},
66+
"versionInfo" : "3.0.1"
67+
}, {
68+
"SPDXID" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1",
69+
"checksums" : [ {
70+
"algorithm" : "SHA1",
71+
"checksumValue" : "0000000000000000000000000000000000000000"
72+
} ],
73+
"copyrightText" : "Copyright 2020 Some copyright holder in VCS\nCopyright 2020 Some copyright holder in source artifact\nCopyright 2020 Some other copyright holder in source artifact",
74+
"description" : "Description of pkg1.",
75+
"downloadLocation" : "https://example.com/pkg1.jar",
76+
"externalRefs" : [ {
77+
"referenceCategory" : "PACKAGE_MANAGER",
78+
"referenceType" : "purl",
79+
"referenceLocator" : "pkg:maven/pkg1-grp/[email protected]"
80+
} ],
81+
"filesAnalyzed" : false,
82+
"homepage" : "https://example.com/pkg1/homepage",
83+
"licenseConcluded" : "BSD-2-Clause AND BSD-3-Clause AND MIT",
84+
"licenseDeclared" : "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND (GPL-2.0-only OR MIT) AND MIT",
85+
"name" : "pkg1",
86+
"versionInfo" : "0.0.1"
87+
}, {
88+
"SPDXID" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1-vcs",
89+
"copyrightText" : "Copyright 2020 Some copyright holder in VCS\nCopyright 2020 Some copyright holder in source artifact\nCopyright 2020 Some other copyright holder in source artifact",
90+
"description" : "Description of pkg1.",
91+
"downloadLocation" : "git+ssh://github.com/path/pkg1-repo.git@deadbeef#project-path",
92+
"externalRefs" : [ {
93+
"referenceCategory" : "PACKAGE_MANAGER",
94+
"referenceType" : "purl",
95+
"referenceLocator" : "pkg:maven/pkg1-grp/[email protected]"
96+
} ],
97+
"filesAnalyzed" : true,
98+
"hasFiles" : [ "SPDXRef-File-3" ],
99+
"homepage" : "https://example.com/pkg1/homepage",
100+
"licenseConcluded" : "NOASSERTION",
101+
"licenseDeclared" : "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND (GPL-2.0-only OR MIT) AND MIT",
102+
"licenseInfoFromFiles" : [ "Apache-2.0", "BSD-2-Clause" ],
103+
"name" : "pkg1",
104+
"packageVerificationCode" : {
105+
"packageVerificationCodeValue" : "3700a1e8575c082653af662ac024337faf78990f"
106+
},
107+
"versionInfo" : "0.0.1"
108+
}, {
109+
"SPDXID" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1-source-artifact",
110+
"checksums" : [ {
111+
"algorithm" : "SHA1",
112+
"checksumValue" : "0000000000000000000000000000000000000000"
113+
} ],
114+
"copyrightText" : "Copyright 2020 Some copyright holder in VCS\nCopyright 2020 Some copyright holder in source artifact\nCopyright 2020 Some other copyright holder in source artifact",
115+
"description" : "Description of pkg1.",
116+
"downloadLocation" : "https://example.com/pkg1-sources.jar",
117+
"externalRefs" : [ {
118+
"referenceCategory" : "PACKAGE_MANAGER",
119+
"referenceType" : "purl",
120+
"referenceLocator" : "pkg:maven/pkg1-grp/[email protected]"
121+
} ],
122+
"filesAnalyzed" : false,
123+
"homepage" : "https://example.com/pkg1/homepage",
124+
"licenseConcluded" : "NOASSERTION",
125+
"licenseDeclared" : "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND (GPL-2.0-only OR MIT) AND MIT",
126+
"name" : "pkg1",
127+
"versionInfo" : "0.0.1"
128+
}, {
129+
"SPDXID" : "SPDXRef-Package-Maven-pkg2-grp-pkg2-0.0.1",
130+
"copyrightText" : "NONE",
131+
"downloadLocation" : "NONE",
132+
"externalRefs" : [ {
133+
"referenceCategory" : "PACKAGE_MANAGER",
134+
"referenceType" : "purl",
135+
"referenceLocator" : "pkg:maven/pkg2-grp/[email protected]"
136+
} ],
137+
"filesAnalyzed" : false,
138+
"homepage" : "NONE",
139+
"licenseConcluded" : "NOASSERTION",
140+
"licenseDeclared" : "NONE",
141+
"name" : "pkg2",
142+
"versionInfo" : "0.0.1"
143+
}, {
144+
"SPDXID" : "SPDXRef-Package-Maven-pkg3-grp-pkg3-0.0.1",
145+
"copyrightText" : "NONE",
146+
"downloadLocation" : "NONE",
147+
"externalRefs" : [ {
148+
"referenceCategory" : "PACKAGE_MANAGER",
149+
"referenceType" : "purl",
150+
"referenceLocator" : "pkg:maven/pkg3-grp/[email protected]"
151+
} ],
152+
"filesAnalyzed" : false,
153+
"homepage" : "NONE",
154+
"licenseConcluded" : "NOASSERTION",
155+
"licenseDeclared" : "NONE",
156+
"name" : "pkg3",
157+
"versionInfo" : "0.0.1"
158+
}, {
159+
"SPDXID" : "SPDXRef-Package-Maven-pkg4-grp-pkg4-0.0.1",
160+
"copyrightText" : "NONE",
161+
"downloadLocation" : "NONE",
162+
"externalRefs" : [ {
163+
"referenceCategory" : "PACKAGE_MANAGER",
164+
"referenceType" : "purl",
165+
"referenceLocator" : "pkg:maven/pkg4-grp/[email protected]"
166+
} ],
167+
"filesAnalyzed" : false,
168+
"homepage" : "NONE",
169+
"licenseConcluded" : "NOASSERTION",
170+
"licenseDeclared" : "MIT",
171+
"name" : "pkg4",
172+
"versionInfo" : "0.0.1"
173+
}, {
174+
"SPDXID" : "SPDXRef-Package-Maven-pkg6-grp-pkg6-0.0.1",
175+
"copyrightText" : "NONE",
176+
"downloadLocation" : "NONE",
177+
"externalRefs" : [ {
178+
"referenceCategory" : "PACKAGE_MANAGER",
179+
"referenceType" : "purl",
180+
"referenceLocator" : "pkg:maven/pkg6-grp/[email protected]"
181+
} ],
182+
"filesAnalyzed" : false,
183+
"homepage" : "NONE",
184+
"licenseConcluded" : "LicenseRef-scancode-srgb",
185+
"licenseDeclared" : "LicenseRef-scancode-asmus",
186+
"name" : "pkg6",
187+
"versionInfo" : "0.0.1"
188+
}, {
189+
"SPDXID" : "SPDXRef-Package-Maven-pkg7-grp-pkg7-0.0.1",
190+
"copyrightText" : "Copyright 2020 Some copyright holder in source artifact",
191+
"downloadLocation" : "NONE",
192+
"externalRefs" : [ {
193+
"referenceCategory" : "PACKAGE_MANAGER",
194+
"referenceType" : "purl",
195+
"referenceLocator" : "pkg:maven/pkg7-grp/[email protected]"
196+
} ],
197+
"filesAnalyzed" : false,
198+
"homepage" : "NONE",
199+
"licenseConcluded" : "NOASSERTION",
200+
"licenseDeclared" : "GPL-2.0-only WITH NOASSERTION",
201+
"name" : "pkg7",
202+
"versionInfo" : "0.0.1"
203+
}, {
204+
"SPDXID" : "SPDXRef-Package-Maven-pkg7-grp-pkg7-0.0.1-source-artifact",
205+
"checksums" : [ {
206+
"algorithm" : "SHA1",
207+
"checksumValue" : "0000000000000000000000000000000000000000"
208+
} ],
209+
"copyrightText" : "Copyright 2020 Some copyright holder in source artifact",
210+
"downloadLocation" : "https://example.com/pkg7-sources.jar",
211+
"externalRefs" : [ {
212+
"referenceCategory" : "PACKAGE_MANAGER",
213+
"referenceType" : "purl",
214+
"referenceLocator" : "pkg:maven/pkg7-grp/[email protected]"
215+
} ],
216+
"filesAnalyzed" : true,
217+
"hasFiles" : [ "SPDXRef-File-4", "SPDXRef-File-5" ],
218+
"homepage" : "NONE",
219+
"licenseConcluded" : "NOASSERTION",
220+
"licenseDeclared" : "GPL-2.0-only WITH NOASSERTION",
221+
"licenseInfoFromFiles" : [ "GPL-2.0-only WITH NOASSERTION" ],
222+
"name" : "pkg7",
223+
"packageVerificationCode" : {
224+
"packageVerificationCodeValue" : "e14acc46fad3a38a1ef2830067619812b51cb4bc"
225+
},
226+
"versionInfo" : "0.0.1"
227+
} ],
228+
"files" : [ {
229+
"SPDXID" : "SPDXRef-File-1",
230+
"checksums" : [ {
231+
"algorithm" : "SHA1",
232+
"checksumValue" : "0398ccd0f49298b10a3d76a47800d2ebecd49859"
233+
} ],
234+
"copyrightText" : "NONE",
235+
"fileName" : "LICENSE",
236+
"licenseConcluded" : "NOASSERTION",
237+
"licenseInfoInFiles" : [ "Apache-2.0", "MIT" ]
238+
}, {
239+
"SPDXID" : "SPDXRef-File-2",
240+
"checksums" : [ {
241+
"algorithm" : "SHA1",
242+
"checksumValue" : "b8f428421b06957fe3859ebc30df70d16fc537d4"
243+
} ],
244+
"copyrightText" : "Copyright (c) 2006-2010 Kirill Simonov",
245+
"fileName" : "readerc.go",
246+
"licenseConcluded" : "NOASSERTION",
247+
"licenseInfoInFiles" : [ "NONE" ]
248+
}, {
249+
"SPDXID" : "SPDXRef-File-3",
250+
"checksums" : [ {
251+
"algorithm" : "SHA1",
252+
"checksumValue" : "8c38f605503f2a48ef7b6220ad06aa0f3387484b"
253+
} ],
254+
"copyrightText" : "Copyright 2020 Some copyright holder in VCS\nCopyright 2020 Some copyright holder in source artifact\nCopyright 2020 Some other copyright holder in source artifact",
255+
"fileName" : "project-path/some/file",
256+
"licenseConcluded" : "NOASSERTION",
257+
"licenseInfoInFiles" : [ "NONE" ]
258+
}, {
259+
"SPDXID" : "SPDXRef-File-4",
260+
"checksums" : [ {
261+
"algorithm" : "SHA1",
262+
"checksumValue" : "0398ccd0f49298b10a3d76a47800d2ebecd49859"
263+
} ],
264+
"copyrightText" : "NONE",
265+
"fileName" : "LICENSE",
266+
"licenseConcluded" : "NOASSERTION",
267+
"licenseInfoInFiles" : [ "GPL-2.0-only WITH NOASSERTION" ]
268+
}, {
269+
"SPDXID" : "SPDXRef-File-5",
270+
"checksums" : [ {
271+
"algorithm" : "SHA1",
272+
"checksumValue" : "4552f707bdf537911c9943cec56a0bf11bd8468d"
273+
} ],
274+
"copyrightText" : "Copyright 2020 Some copyright holder in source artifact",
275+
"fileName" : "some/file",
276+
"licenseConcluded" : "NOASSERTION",
277+
"licenseInfoInFiles" : [ "NONE" ]
278+
} ],
279+
"relationships" : [ {
280+
"spdxElementId" : "SPDXRef-Package-Go-gopkg.in.yaml.v3-3.0.1",
281+
"relationshipType" : "GENERATED_FROM",
282+
"relatedSpdxElement" : "SPDXRef-Package-Go-gopkg.in.yaml.v3-3.0.1-vcs"
283+
}, {
284+
"spdxElementId" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1",
285+
"relationshipType" : "GENERATED_FROM",
286+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1-source-artifact"
287+
}, {
288+
"spdxElementId" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1",
289+
"relationshipType" : "GENERATED_FROM",
290+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1-vcs"
291+
}, {
292+
"spdxElementId" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1",
293+
"relationshipType" : "DEPENDS_ON",
294+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg2-grp-pkg2-0.0.1"
295+
}, {
296+
"spdxElementId" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1",
297+
"relationshipType" : "DEPENDS_ON",
298+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg3-grp-pkg3-0.0.1"
299+
}, {
300+
"spdxElementId" : "SPDXRef-Package-Maven-pkg3-grp-pkg3-0.0.1",
301+
"relationshipType" : "DEPENDS_ON",
302+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg6-grp-pkg6-0.0.1"
303+
}, {
304+
"spdxElementId" : "SPDXRef-Package-Maven-pkg4-grp-pkg4-0.0.1",
305+
"relationshipType" : "DEPENDS_ON",
306+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg7-grp-pkg7-0.0.1"
307+
}, {
308+
"spdxElementId" : "SPDXRef-Package-Maven-pkg7-grp-pkg7-0.0.1",
309+
"relationshipType" : "GENERATED_FROM",
310+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg7-grp-pkg7-0.0.1-source-artifact"
311+
}, {
312+
"spdxElementId" : "SPDXRef-Project-Maven-proj1-grp-proj1-0.0.1",
313+
"relationshipType" : "DEPENDS_ON",
314+
"relatedSpdxElement" : "SPDXRef-Package-Go-gopkg.in.yaml.v3-3.0.1"
315+
}, {
316+
"spdxElementId" : "SPDXRef-Project-Maven-proj1-grp-proj1-0.0.1",
317+
"relationshipType" : "DEPENDS_ON",
318+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg1-grp-pkg1-0.0.1"
319+
}, {
320+
"spdxElementId" : "SPDXRef-Project-Maven-proj1-grp-proj1-0.0.1",
321+
"relationshipType" : "DEPENDS_ON",
322+
"relatedSpdxElement" : "SPDXRef-Package-Maven-pkg4-grp-pkg4-0.0.1"
323+
} ]
324+
}

‎scanpipe/tests/data/integrations-ort/ort-reporter-spdx-2.2-funtest-resources/synthetic-scan-result-expected-output.spdx.json.ABOUT‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
about_resource: synthetic-scan-result-expected-output.spdx.json
2+
name: ort
3+
version: 67.1.0
4+
download_url: https://raw.githubusercontent.com/oss-review-toolkit/ort/729d577730ee46c3bded6cf04d5aa9813b6a8591/plugins/reporters/spdx/src/funTest/resources/v2.2/synthetic-scan-result-expected-output.spdx.json
5+
description: The OSS Review Toolkit (ORT) is a FOSS policy automation and orchestration toolkit
6+
homepage_url: https://oss-review-toolkit.org
7+
license_expression: apache-2.0
8+
copyright: Copyright (C) 2017-2025 The ORT Project Authors
9+
redistribute: yes
10+
attribute: yes
11+
track_changes: yes
12+
package_url: pkg:github/oss-review-toolkit/[email protected]#plugins/reporters/spdx/src/funTest/resources/v2.2/synthetic-scan-result-expected-output.spdx.json

0 commit comments

Comments
 (0)