Integrations:
JIRA: Breaking Change, Update Required
FOSSA’s Jira integration now supports connecting multiple Jira Sites to the same FOSSA instance. This change requires updates to your configurations within your integration settings.
Webhooks on Jira that send notifications to FOSSA will need to be reconfigured to include an authorization key. The new webhook URL can be found in Settings > Integrations > Jira. For more information on configuring webhooks, please see our documentation. If the webhooks are not updated, then exported issues that are closed on Jira will not be resolved on FOSSA.
Adding Projects
We’ve overhauled our archive uploader to improve both product stability and performance. Our investments in the archive uploader infrastructure not only improve analysis speed but also allow FOSSA to support much larger file sizes.
Reporting
New Reporting Format: SPDX
SPDX is an industry-standard that makes reporting and communicating open source dependencies easier. We are excited to roll out SPDX to all our users. Contact us at support@fossa.com if you are interested in getting it activated for your account.
The image that was here has been lost to the sands of time
Please contact support@fossa.com to activate SPDX reporting for your account
New Report Data Available: Dependency Graphs for Provided Builds
Understand how each open source component is brought into your product by including Dependency Paths in your reports. You can include dependency graphs by selecting Customize Columns in the reporting view for each project.
The image that was here has been lost to the sands of time
FOSSA-CLI
In addition to improving general stability and performance, we have made the following updates:
RPM Support
We now support integrating the FOSSA-CLI with projects using RPM as the package manager. Please check out these docs to get started.
FOSSA Report Dependency Update
The CLI command fossa report dependencies outputs a JSON report that now includes the open source component’s version and commit hash. This allows Golang dependencies to have their commit hashes explicitly defined in CLI reports.
Python Support 2.0
We have updated our Python analyzer to improve accuracy and performance.