argo-cd, criticality_score, lettuce, scorecard, sigstore reports (#205)

* argo-cd, criticality_score, lettuce, scorecard, sigstore reports
Be-Secure · Feb 21, 2024 · f466d6e · f466d6e
1 parent 7a03720
commit f466d6e
Show file tree

Hide file tree

Showing 50 changed files with 313,551 additions and 188 deletions.
diff --git a/argo-cd/v2.10.1/criticality_score/argo-cd-v2.10.1-criticality_score-report.json b/argo-cd/v2.10.1/criticality_score/argo-cd-v2.10.1-criticality_score-report.json
@@ -0,0 +1,16 @@
+{
+    "name": "argo-cd",
+    "url": "https://github.com/Be-Secure/argo-cd",
+    "language": "Go",
+    "created_since": 73,
+    "updated_since": 0,
+    "contributor_count": 1247,
+    "org_count": 4,
+    "commit_frequency": 21.63,
+    "recent_releases_count": 59,
+    "updated_issues_count": 0,
+    "closed_issues_count": 0,
+    "comment_frequency": 0,
+    "dependents_count": 0,
+    "criticality_score": 0.49469
+}
diff --git a/argo-cd/v2.10.1/license-compliance/argo-cd-v2.10.1-fossology-report.json b/argo-cd/v2.10.1/license-compliance/argo-cd-v2.10.1-fossology-report.json
@@ -0,0 +1,266 @@
+[
+    {
+        "FileName": "PackageName: argo-cd-v2.10.1.zip - PackageFileName: argo-cd-v2.10.1.zip",
+        "SPDXID": "",
+        "LicenseConcluded": "",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "",
+        "FileCopyrightText": ""
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/ui/LICENSE",
+        "SPDXID": "SPDXRef-item355534",
+        "LicenseConcluded": "Apache-2.0",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "copyright owner or by an individual or Legal Entity authorized to submit on behalf of;(c) You must retain, in the Source form of any Derivative Works;copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and;Copyright 2017-2018 The Argo Authors"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/LICENSE",
+        "SPDXID": "SPDXRef-item357357",
+        "LicenseConcluded": "Apache-2.0",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "copyright owner or by an individual or Legal Entity authorized to submit on behalf of;(c) You must retain, in the Source form of any Derivative Works;copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and;Copyright 2017-2018 The Argo Authors"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/test/remote/README.md",
+        "SPDXID": "SPDXRef-item354941",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-UnclassifiedLicense",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/ui/package.json",
+        "SPDXID": "SPDXRef-item355922",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/pkg/apis/application/v1alpha1/applicationset_types.go",
+        "SPDXID": "SPDXRef-item357015",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/cmd/argocd-repo-server/commands/argocd_repo_server.go",
+        "SPDXID": "SPDXRef-item357252",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-URL",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/SECURITY-INSIGHTS.yml",
+        "SPDXID": "SPDXRef-item357353",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-URL",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/server/server.go",
+        "SPDXID": "SPDXRef-item357698",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-URL",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/assets/argocd-ui.gif",
+        "SPDXID": "SPDXRef-item357849",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-GPL",
+        "FileCopyrightText": "© BY¯6éwң8Ŵ¯üگþú¯?°?;°?[°?{°ÿz?W9x49x·? ¦·,?;±?K±½w±?[±?»±f?¹± ²\"»±?[²#{²(²$[²?«².«²±?³±zé0?5;LVS  Íð4Þ8Luð_là Ézq~?r?EP\"½?'+?v÷ªwºT[µÚi X«ùqT??·?Xy:d,bÎ9²a¥ȝ¹³Tñi׃?;·t[·v{·x·¡nQÀ?©éª?'³[¸ÿ{¸¸÷5«Ù?L4?ͰbÓ?ép¹?¹ép?i?µp?é?LÒ:?B?pc<0évøں'iµ°?»+y¯?òµ P?"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/operator-manual/applicationset/Getting-Started.md",
+        "SPDXID": "SPDXRef-item357982",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-file",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/operator-manual/applicationset/Use-Cases.md",
+        "SPDXID": "SPDXRef-item357983",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-doc.OTHER",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/operator-manual/upgrading/2.7-2.8.md",
+        "SPDXID": "SPDXRef-item357998",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-UnclassifiedLicense",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/user-guide/parameters.md",
+        "SPDXID": "SPDXRef-item358050",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-file",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/user-guide/annotations-and-labels.md",
+        "SPDXID": "SPDXRef-item358212",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-See-doc.OTHER",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/proposals/rollout-extension.png",
+        "SPDXID": "SPDXRef-item358243",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-GPL",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/snyk/v2.8.5/quay.io_argoproj_argocd_v2.8.5.html",
+        "SPDXID": "SPDXRef-item358284",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LGPL-3.0-only",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/snyk/v2.8.5/argocd-test.html",
+        "SPDXID": "SPDXRef-item358288",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LGPL-3.0-only",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/snyk/v2.9.0-rc3/quay.io_argoproj_argocd_v2.9.0-rc3.html",
+        "SPDXID": "SPDXRef-item358309",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LGPL-3.0-only",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/snyk/v2.9.0-rc3/argocd-test.html",
+        "SPDXID": "SPDXRef-item358313",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LGPL-3.0-only",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/snyk/master/quay.io_argoproj_argocd_latest.html",
+        "SPDXID": "SPDXRef-item358317",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LGPL-3.0-only",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/snyk/master/argocd-test.html",
+        "SPDXID": "SPDXRef-item358321",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LGPL-3.0-only",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/CHANGELOG.md",
+        "SPDXID": "SPDXRef-item358328",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  LicenseRef-fossology-UnclassifiedLicense",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/applicationset/controllers/applicationset_controller.go",
+        "SPDXID": "SPDXRef-item358332",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/ui-test/package.json",
+        "SPDXID": "SPDXRef-item358672",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/hack/gen-resources/util/sizedwaitgroup.go",
+        "SPDXID": "SPDXRef-item358685",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  MIT",
+        "FileCopyrightText": "Copyright (c) 2018 Rémy Mathieu;© 2016 package util"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/hack/boilerplate.go.txt",
+        "SPDXID": "SPDXRef-item358700",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "NOASSERTION"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/hack/update-codegen.sh",
+        "SPDXID": "SPDXRef-item358850",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "  \n  Apache-2.0",
+        "FileCopyrightText": "Copyright 2017 The Kubernetes Authors."
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/.github/pull_request_template.md",
+        "SPDXID": "SPDXRef-item357739",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "NOASSERTION",
+        "FileCopyrightText": "(c) this does not need to be in the release notes. The title of the PR states what changed and the related issues number (used for the release note). The title of the PR conforms to the [Toolchain Guide](https://argo-cd.readthedocs.io/en/latest/developer-guide/toolchain-guide/#title-of-t"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/assets/zitadel-argocd-user-info.png",
+        "SPDXID": "SPDXRef-item357791",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "NOASSERTION",
+        "FileCopyrightText": "©\t5O~¿u5i?7¦6\"\"\"zö<7±?3j\"þ¨]M?Î5ôa¦ÒÍÔ\\hl& èq ܫ¡nu}ü|=S?úC¾ÜïíZJ®|sB±û? ®KDD?õÜôij٤&ÑÛiyòÍ?Mj?`£±üLÒo.¤ËC|w) zx½?½ ?ïÉÃu?ì¤?L±xIÏMM[ajc=¹FM[q1Q"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/assets/azure-enterprise-saml-urls.png",
+        "SPDXID": "SPDXRef-item357800",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "NOASSERTION",
+        "FileCopyrightText": "©\tUD§7m?a1"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/assets/select_repo.png",
+        "SPDXID": "SPDXRef-item357812",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "NOASSERTION",
+        "FileCopyrightText": "©\tlRcc$¸Z IU?©Âq߉&ù ïÌñ¤X yÎ'?N׷cíOj¬f`¥±Èä!¼i´ ÙFÜh?«Â?F}Í6ZƆWäîB4!K(3 %+ ӆ@vÔ?|}0/[u£¤Åir?MN?pP]ÞÂdTµ7¢Q?ոýÎ"
+    },
+    {
+        "FileName": "argo-cd-v2.10.1.zip/argo-cd-2.10.1/docs/assets/argocd-arch-authn-authz.jpg",
+        "SPDXID": "SPDXRef-item357857",
+        "LicenseConcluded": "NOASSERTION",
+        "LicenseComment": "",
+        "LicenseInfoInFile": "NOASSERTION",
+        "FileCopyrightText": "©\tSL1$ñi4± ÷T1-¦?ØÅ?-~Ì?½ûÛ?Oõ?Mqþ¡SOµþ£ZrL"
+    }
+]