| Age | Commit message (Collapse) | Author |
|---|
|
That allows for better visibility control.
|
|
- put all the core ones that are required to declare liceneses in
providers.bzl
- move all the ones needed to gather licenses into private/gather_liceneses.bzl
This keeps ownership and visibility clearer. Users can depend on
the values in provider.bzl. The structs in gathering_providers.bzl
should be considered private to the implementation.
Also, make it clear that MetadataInfo is experimental by renaming it.
|
|
- Add rules/package_info.bzl
- Refactor get_transitive_licenses to get_transitive_metadata.
- Take a list of providers to gather.
- Some hackery for Bazel 5.x support. This can be fixed if starlark
visibility gets backported to Bazel 5.
- Add gather_metadata.bzl. This is so we can freely experiment on
techniques for multi provider support in OSS land, without impacting
existing users in Google. We can merge them some day in the future.
- Create a dummy sbom writer.
There is also experimental code to show a different design choice
for new types of Metadata. I want to preserve both for a while
to have a broader design discussion over the next month.
|
|
|
|
The core of the PR is an expert from Google, but it applies
several changes to account for Bazel differences.
- deal with bazel 5.x 6.x @// handling
- restore package_url and package_version. This is temporary
they will move to other providers.
PiperOrigin-RevId: 483521567
|
|
This change adjust the indentation slightly to be consistent with rest
of the file. Also fix a few spelling mistakes.
|
|
|
|
These are needed for minimal SBOM creation.
Also see #32
|
|
This should make the aspect more reliably collect licenses from included files.
|
|
|
