Skip to content

Show detected licenses with their URLs

Tetiana Chupryna requested to merge 393476-links-to-license into master

What does this MR do and why?

Describe in detail what your merge request does and why.

With the introduction of the License Scanning SBOM Scanner, the License Compliance and Dependency List no longer provide links to the detected licenses. As we don't have links we just generate a link to SPDX catalogue and this is a working solution as the licenses that we have in GitLab License database all have SPDX id.

Note: in rare case of a custom id license, the link will be incorrect, and we're planning to address it in Generate accurate URL for detected licenses (#410389). This is a rare case and we (as Composition Analysis group) think that it's a good way to iterate.

Issue: #393476 (closed)

Changelog: fixed EE: true

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

How to set up and validate locally

include:
  - template: Jobs/Dependency-Scanning.gitlab-ci.yml
  • Go to 'Dependency List' page and check urls in license section

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #393476 (closed)

Edited by Tetiana Chupryna

Merge request reports