mirror of
https://github.com/alibaba/open-code-review.git
synced 2026-09-14 19:59:52 +08:00
533b526b4c
* chore: add SPDX license headers to all source files
Add Apache-2.0 SPDX license identifiers and copyright notices to all
tracked .go, .sh, .js, .mjs, .ts, and .tsx source files.
Introduce scripts/verify-license.sh and scripts/add-license.sh for
automated verification and bulk addition of license headers. Integrate
the check into CI (ci.yml) and the Makefile (license-check target as
a prerequisite of the existing check target).
This satisfies the OpenSSF Best Practices Badge requirements for
copyright_per_file and license_per_file.
* fix: restore execute permissions on scripts
* docs: add license header instructions to CONTRIBUTING guides
* docs: add license header instructions to pages contributing guides
* fix(pages): strip unclosed HTML comment markers to satisfy CodeQL
* fix: apply code review suggestions for license scripts
- Fix portability: detect macOS vs Linux stat for permission copy
- Fix has_header: check both SPDX and copyright (match verify logic)
- Fix is_ignored: match on path boundaries to avoid false positives
- Fix year extraction: use consistent pipeline across both scripts
- Fix Bash 3.2 compat: quote array length expansion for set -u
* fix(pages): use loop-until-clean for HTML comment stripping (CodeQL)
* fix(pages): use split/join instead of replace to avoid CodeQL false positive
CodeQL's js/incomplete-multi-character-sanitization rule flags any
.replace() that removes multi-character sequences like '<!--...-->',
regardless of context. The data here comes from readFileSync on the
project's own index.html (no untrusted input), making this a false
positive. Using split(regex).join('') achieves the same result without
triggering the taint-tracking rule.
37 lines
1.4 KiB
Go
37 lines
1.4 KiB
Go
// SPDX-License-Identifier: Apache-2.0
|
|
// Copyright 2026 alibaba/open-code-review Contributors
|
|
|
|
package diff
|
|
|
|
// ExcludedDirs is the list of directory prefixes that scanners and diff
|
|
// providers should always skip. Exposed so internal/scan and other consumers
|
|
// can reuse the same blocklist.
|
|
func ExcludedDirs() []string {
|
|
out := make([]string, len(providerDirIgnoreDirs))
|
|
copy(out, providerDirIgnoreDirs)
|
|
return out
|
|
}
|
|
|
|
// LoadGitignorePatterns reads and parses .gitignore patterns from the given
|
|
// repository root. Returns nil if the file is missing or unreadable.
|
|
func LoadGitignorePatterns(repoDir string) []string {
|
|
stub := &Provider{repoDir: repoDir}
|
|
return stub.loadGitignorePatterns()
|
|
}
|
|
|
|
// IsPathExcluded returns true when relPath matches any of the supplied
|
|
// gitignore-style patterns or any default excluded directory prefix
|
|
// (see ExcludedDirs).
|
|
func IsPathExcluded(repoDir, relPath string, patterns []string) bool {
|
|
stub := &Provider{repoDir: repoDir}
|
|
return stub.isPathExcluded(relPath, patterns)
|
|
}
|
|
|
|
// MatchGitignorePattern reports whether relPath matches a single
|
|
// gitignore-style pattern, using the simplified semantics that diff.Provider
|
|
// already implements (basename match, prefix match, directory-only suffix).
|
|
// Useful when callers want to test a single pattern in isolation.
|
|
func MatchGitignorePattern(relPath, pat string) bool {
|
|
return matchGitignorePattern(relPath, pat)
|
|
}
|