Skip to content

Releases: fossas/fossa-cli

v3.8.0

01 Jun 15:35
b09ebd6
Compare
Choose a tag to compare
  • License Scanning: You can license scan your first-party code with the --experimental-force-first-party-scans flag (#1187)
  • Network requests: fossa-cli retries network requests, if it experiences timeout error. (#1203)
  • Monorepo is no longer a supported feature of FOSSA. (#1202)
  • experimental-enable-binary-discovery, detect-vendored: Redact file contents in debug bundles. (#1201)
  • setup.cfg: Adds support for setup.cfg, in conjuction with setup.py. (#1195)
  • Default Filters: Default filters are applied prior to analysis. Improves overall runtime performance. (#1193)
  • .fossa.yml and CLI args: Allow setting a policy by id in addition to by name. (#1203)
  • Doc only: Fixed an issue in the fossa-deps schema suggesting against the use of name for referenced RPM dependencies. If your editor utilizes SchemaStore, this file should now lint properly after this change propagates. (#1199).

v3.7.11

18 May 21:09
c90bf4b
Compare
Choose a tag to compare
  • fossa-deps.yml: Adds strict parsing to so that required field with only whitespace strings are prohibited early. Also throws an error, if incompatible character is used in vendor dependency's version field. (#1192)

v3.7.10

17 May 20:08
0d9237b
Compare
Choose a tag to compare
  • License Scanning: Fix a bug where the license scanner did not run on MacOS 13 on M1 Macs (#1193)
  • Debug bundle: The raw dependency graph FOSSA CLI discovers is output in the FOSSA Debug Bundle. (#1188)

v3.7.9

27 Apr 00:15
19f0ba4
Compare
Choose a tag to compare
  • License Scanning: Add support for "full file uploads" for CLI-side license scans. (#1181)

v3.7.8

24 Apr 19:43
264044e
Compare
Choose a tag to compare

Go: Do not fall back to module based analysis when using --experimental-use-go-v3-resolver. (#1184)

v3.7.7

20 Apr 18:50
d33bb2e
Compare
Choose a tag to compare
  • Adds --json flag to fossa container analyze (#1180)
  • License Scanning: Reduce false positives caused by indicator matches. This is done by only reporting indicator matches to SPDX keys and license names when we are scanning a manifest file (#1182)

v3.7.6

17 Apr 20:11
e8ddc16
Compare
Choose a tag to compare
  • RPM: Support origin paths for RPM spec file analysis (#1178)
  • Swift: Do not stop analysis if we encounter a badly formatted project.pbxproj file (#1177)

v3.7.5

12 Apr 16:16
2ed6f9b
Compare
Choose a tag to compare
  • Go: Introduce --experimental-use-v3-go-resolver to preview a new tactic for Go dependency scanning. (#1168) (#1173)
  • Themis: Update tag to support a new rule for the libdivide dependency. (#1172)

v3.7.4

27 Mar 17:14
45d187a
Compare
Choose a tag to compare
  • Gradle: Fix possible ConcurrentModificationException that can occur when getting dependencies (#1171)

v3.7.3

23 Mar 21:50
78b4166
Compare
Choose a tag to compare
  • Go: Collects environment variables in debug bundle. (#1132)
  • Diagnostics: Improves user-facing error messages and debugging tips for external commands and some HTTP error conditions (#1165)
  • License Scanning: Scan the full contents of "license.html" and "licence.html" for license content, not just the comments. (#1169)