software-composition-analysis

Description

These files need some review as there are some weird licenses detected:

• https://raw.githubusercontent.com/twbs/bootstrap/v3.3.6/docs/dist/css/bootstrap.min.css.map
• https://raw.githubusercontent.com/twbs/bootstrap/v3.3.6/dist/css/bootstrap-theme.min.css.map
• https://raw.githubusercontent.com/eclipse/org.aspectj/V1_8_7/weaver/src/aspectj_1_5_0.dtd
• https://raw.githubuserco

Current Behavior:

When viewing vulns in the Audit Vulnerabilities tab. the Analysis column appears to contain code (enum?) names, e.g. NOT_SET, FALSE_POSITIVE. This problem also occurs in Policy Violations tab.

Steps to Reproduce:

Open the Audit Vulnerabilities tab.

Expected Behavior:

The Analysis column contains language specific analysis values, e.g. Not Set, False Positive

Description
This task is contingent on merging task #995 into main. Now that we have a list of tests to invoke, we will implement invoking them.

To Do

1. Modify the file ci/release_tests.py to invoke each of the tests in the list tests.

import subprocess  # nosec

tests = [...] <-- changes to be included in #995 

for t in tests:
    subprocess.check_output(t, shell=Tr

Current output from the findings goal looks like the example below. It would be useful to have the Name of the issue in the output too.

Current:

[INFO] MEDIUM: org.apache.struts:struts-core:1.3.5
[INFO] 
[INFO] ** DISPUTED ** The DebuggingInterceptor component in Apache Struts befor
[INFO] e 2.3.1.1, when developer mode is used, allows remote attackers to execu
[INFO] te arbitrary c