You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/source/pages/using.rst
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -120,19 +120,19 @@ The list bellow shows examples for the corresponding PURL string for different g
120
120
* - ``https://gitlab.com/gitlab-org/gitlab``
121
121
- ``pkg:gitlab.com/gitlab-org/gitlab``
122
122
123
-
After the PURL string has been obtained, the analysis could be run with:
123
+
After the PURL string has been obtained, the analysis can be run with:
124
124
125
125
.. code-block:: shell
126
126
127
127
./run_macaron.sh analyze -purl <purl_string>
128
128
129
-
You can also provide the PURL string together with the repository path. In this case, the PURL string will be used as the unique identifier to the analysis target:
129
+
You can also provide the PURL string together with the repository path. In this case, the PURL string will be used as the unique identifier for the analysis target:
.. note:: When provide the PURL and the repository path, both branch name and commit digest must be provided as well.
135
+
.. note:: When providing the PURL and the repository path, both the branch name and commit digest must be provided as well.
136
136
137
137
-------------------------------------------------
138
138
Verifying provenance expectations in CUE language
@@ -262,7 +262,7 @@ Running the policy engine
262
262
Macaron's policy engine accepts policies specified in `Datalog <https://en.wikipedia.org/wiki/Datalog>`_. An example policy
263
263
can verify if a project and all its dependencies pass certain checks. We use `Soufflé <https://souffle-lang.github.io/index.html>`_
264
264
as the Datalog engine in Macaron. Once you run the checks on a target project as described :ref:`here <analyze-action>`,
265
-
the check results will be stored in ``macaron.db`` in the output directory. Because the check results of different software component can be stored into the database at ``macaron.db``, we must specify the target software component in the Datalog policy file to be enforced by the policy engine. There are two ways that we could
265
+
the check results will be stored in ``macaron.db`` in the output directory. Because the check results of different software components can be stored in the database at ``macaron.db``, we must specify the target software component in the Datalog policy file to be enforced by the policy engine. There are two ways that we can
266
266
specify the target software component in the Datalog policy file:
267
267
268
268
#. Using the complete name of the target component (e.g. ``github.com/oracle-quickstart/oci-micronaut``)
@@ -298,7 +298,7 @@ The differences between the two policy files can be observed below:
0 commit comments