feat(scanoss): Add release date to snippet findings

Include releaseDate in snippetFindings additionalData and add a new
column to display this information in generated reports.

Signed-off-by: Agustin Isasmendi <[email protected]>

Author: isasmendiagus

plugins/reporters/scanoss/src/main/resources/templates/asciidoc/scanoss_snippet.ftl

@@ -79,9 +79,9 @@ License(s):
 [#assign snippetCount = snippetFinding.snippets?size]
 
 [width=100%]
-[cols="1,3,4,1"]
+[cols="1,3,4,1,2"]
 |===
-| Source Location | pURL | License | Score
+| Source Location | pURL | License | Score | Release Date
 
 .${snippetCount*2}+|
 Partial match +
@@ -93,6 +93,7 @@ ${sourceLocation.startLine?c}-${sourceLocation.endLine?c}
 | ${snippet.purl!""}
 | ${snippet.license!""}
 | ${snippet.score!""}
+| ${snippet.additionalData['release_date']}
 
 4+a|
 .Create a snippet choice for this snippet or mark it as false positive

plugins/scanners/scanoss/src/main/kotlin/ScanOssResultParser.kt

@@ -84,6 +84,7 @@ internal fun generateSummary(startTime: Instant, endTime: Instant, results: List
         licenseFindings = licenseFindings,
         copyrightFindings = copyrightFindings,
         snippetFindings = snippetFindings
+
     )
 }
 
@@ -154,12 +155,14 @@ private fun getSnippets(details: ScanFileDetails): Set<Snippet> {
     val vcsInfo = VcsHost.parseUrl(url.takeUnless { it == "none" }.orEmpty())
     val provenance = RepositoryProvenance(vcsInfo, ".")
 
+    val additionalData = mapOf("release_date" to details.releaseDate)
+
     return buildSet {
         purls.forEach { purl ->
             locations.forEach { snippetLocation ->
                 val license = licenses.andOrNull()?.sorted() ?: SpdxLicenseIdExpression(SpdxConstants.NOASSERTION)
 
-                add(Snippet(score, snippetLocation, provenance, purl, license))
+                add(Snippet(score, snippetLocation, provenance, purl, license, additionalData))
             }
         }
     }

plugins/scanners/scanoss/src/test/kotlin/ScanOssResultParserTest.kt

@@ -126,7 +126,8 @@ class ScanOssResultParserTest : WordSpec({
                                 "."
                             ),
                             "pkg:github/vdurmont/semver4j",
-                            SpdxExpression.parse("CC-BY-SA-2.0")
+                            SpdxExpression.parse("CC-BY-SA-2.0"),
+                            additionalData = mapOf("release_date" to "2019-09-13")
                         )
                     )
                 )

plugins/scanners/scanoss/src/test/kotlin/ScanOssScannerDirectoryTest.kt

@@ -107,7 +107,8 @@ class ScanOssScannerDirectoryTest : StringSpec({
                                 VcsInfo(VcsType.GIT, "https://github.com/scanoss/ort.git", ""), "."
                             ),
                             "pkg:github/scanoss/ort",
-                            SpdxExpression.parse("Apache-2.0")
+                            SpdxExpression.parse("Apache-2.0"),
+                            additionalData = mapOf("release_date" to "2021-03-18")
                         )
                     )
                 )