Re: [spdx-tech] New SPDX Generation Tool

2018-02-09 Thread Matt Germonprez
Hi everyone, I'll chime in here too. At the University of Nebraska Omaha, we started a project focused on building a tool (DoSOCS) that integrated with CI processes: https://github.com/DoSOCSv2/DoSOCSv2 It's been a little while since its last action but could potentially inform efforts discussed

Re: [spdx-tech] New SPDX Generation Tool

2018-02-09 Thread Foster, Jeremiah
Hello! This looks interesting, I'll definitely check it out. (Also good to hear about the tool HERE uses since it includes dependency checking which can get kinda messy in the Java world.) The only thing I can comment on at the moment is that the name is a bit confusing, for two reasons; 1. I

Re: [spdx-tech] New SPDX Generation Tool

2018-02-09 Thread Schuberth, Sebastian
Nice, looks like something we could easily integrate as a simple scanner in our Open Source Review Toolkit (ORT): https://github.com/heremaps/oss-review-toolkit Regards, Sebastian From: spdx-tech-boun...@lists.spdx.org [mailto:spdx-tech-boun...@lists.spdx.org] On Behalf Of Ben Boyter Sent: Fr

Re: [spdx-tech] New SPDX Generation Tool

2018-02-08 Thread Philippe Ombredanne
On Fri, Feb 9, 2018 at 4:11 AM, Ben Boyter wrote: > Hi All, > > Thanks for the feedback before when I was seeking clarification about how to > generate portions of the SPDX. One of the issues I had with getting SPDX > adopted was to have a simple tool that would do it can could be hooked into > CI