Paul Sastrasinh comments

Results 23 comments of


                                            Paul Sastrasinh

Publish statically linked binaries (musl?)

@guenhter ack, sorry getting back to triaging issues after a long hiatus. yes this would be great. i'd probably like to bring a lot of the same publishing from https://github.com/psastras/sarif-rs...

feature request: converter for cargo-deny

Agree it would be nice, open to additions, or if I find some time in the future I can look into it.

allow installation via `cargo-binstall` on windows

@rursprung yeah, unfortunately I think it might be a bit more involved. since the CI systems rely on `nix` which isn't really available on Windows. probably the right thing is...

cargo-sbom produces invalid SPDX for some dual licensed packages

@mikhailantoshkin hey, thanks for the issue and offer to help, PR sounds good!

Enhance SPDX output to appease parsers

@rpavlik hey sorry i didn't see this for a while, i'll take a look this week

Enhance SPDX output to appease parsers

@rpavlik thank you! i was about to handle the conflict appreciate it

SPDX SBOMs say `OPERATING-SYSTEM` in the spec, but `OPERATING_SYSTEM` in the JSON schema

@ctron ack, will take a look at this -- sorry I'm just getting to triaging all the issues in this repo

Reduce build times for dependents by moving `build.rs` to a snapshot test

yeah that sounds like a good idea. ill see if I have time for it, but also welcome to anybody that wants to do this.

Creating a Regex is very expensive. Should be removed from loop.

whoops, yeah agree that's not great...

Add Support for SonarQube-Compatible SARIF Reports

@shlok-007 hey, this feature does not already exist in the tool as far as I'm aware. sorry for the late reply, but happy to support this change if you still...