reference.conf

# A reference configuration file containing all possible ORT configuration options. Some of those options are mutually
# exclusive, so this file is only used to show all options and to validate the configuration.
ort {
  licenseFilePatterns {
    licenseFilenames = ["license*"]
    patentFilenames = [patents]
    rootLicenseFilenames = ["readme*"]
  }

  severeIssueThreshold = ERROR
  severeRuleViolationThreshold = ERROR

  enableRepositoryPackageCurations = true
  enableRepositoryPackageConfigurations = true

  analyzer {
    allowDynamicVersions = true

    sw360Configuration {
      restUrl = "https://your-sw360-rest-url"
      authUrl = "https://your-authentication-url"
      username = username
      password = password
      clientId = clientId
      clientPassword = clientPassword
      token = token
    }
  }

  advisor {
    nexusIq {
      serverUrl = "https://rest-api-url-of-your-nexus-iq-server"
      browseUrl = "https://web-browsing-url-of-your-nexus-iq-server"
      username = username
      password = password
    }

    vulnerableCode {
      serverUrl = "http://localhost:8000"
    }

    gitHubDefects {
      token = githubAccessToken
      labelFilter = [ "!duplicate", "!enhancement", "!invalid", "!question", "!documentation", "*" ]
      maxNumberOfIssuesPerRepository = 50
      parallelRequests = 5
    }

    options {
      # A map of maps from advice provider names to provider-specific key-value pairs. This map can be used to provide
      # configuration information for external advisor plugins.
      CustomAdvisor {
        apiKey = "<some_api_key>"
      }
    }
  }

  downloader {
    allowMovingRevisions = true

    # Only used by the CLI tool when the '--license-classifications-file' option is specified.
    includedLicenseCategories = [
      category-a,
      category-b
    ]

    sourceCodeOrigins = [
      VCS, ARTIFACT
    ]
  }

  scanner {
    skipConcluded = true

    archive {
      fileStorage {
        localFileStorage {
          directory = ~/.ort/scanner/archive
          compression = false
        }
      }

      postgresStorage {
        url = "jdbc:postgresql://your-postgresql-server:5444/your-database"
        schema = public
        username = username
        password = password
        sslmode = required
        sslcert = /defaultdir/postgresql.crt
        sslkey = /defaultdir/postgresql.pk8
        sslrootcert = /defaultdir/root.crt
      }
    }

    createMissingArchives = false

    options {
      # A map of maps from scanner class names to scanner-specific key-value pairs.
      # At the example of applying custom options for ScanCode, this would look like:
      ScanCode {
        commandLine = --copyright --license --info --strip-root --timeout 300
        parseLicenseExpressions = true

        # Criteria for matching stored scan results. These can be configured for any scanner that uses semantic
        # versioning. Note that the "maxVersion" is exclusive and not part of the range of accepted versions.
        minVersion = "3.2.1-rc2"
        maxVersion = "30.2.0"
      }

      FossId {
        serverUrl = "https://fossid.example.com/instance/"
        user = "user"
        apiKey = "XYZ"

        namingProjectPattern = "$Var1_$Var2"
        namingScanPattern = "$Var1_#projectBaseCode_$Var3"
        namingVariableVar1 = "myOrg"
        namingVariableVar2 = "myTeam"
        namingVariableVar3 = "myUnit"

        waitForResult = "false"
        packageNamespaceFilter = "myorg.myunit"
        addAuthenticationToUrl = "false"

        deltaScans = "true"
        deltaScanLimit = "10"
        timeout = "60"
      }
    }

    storages {
      local {
        backend {
          localFileStorage {
            directory = ~/.ort/scanner/results
            compression = false
          }
        }
      }

      http {
        backend {
          httpFileStorage {
            url = "https://your-http-server"
            query = "?username=user&password=123"
            headers {
              key1 = value1
              key2 = value2
            }
          }
        }
      }

      clearlyDefined {
        serverUrl = "https://api.clearlydefined.io"
      }

      postgres {
        url = "jdbc:postgresql://your-postgresql-server:5444/your-database"
        schema = public
        username = username
        password = password
        sslmode = required
        sslcert = /defaultdir/postgresql.crt
        sslkey = /defaultdir/postgresql.pk8
        sslrootcert = /defaultdir/root.crt
      }

      sw360Configuration {
        restUrl = "https://your-sw360-rest-url"
        authUrl = "https://your-authentication-url"
        username = username
        password = password
        clientId = clientId
        clientPassword = clientPassword
        token = token
      }
    }

    storageReaders = [
      local, postgres, http, clearlyDefined
    ]

    storageWriters = [
      postgres
    ]

    ignorePatterns = [
      "**/META-INF/DEPENDENCIES"
    ]

    provenanceStorage {
      fileStorage {
        localFileStorage {
          directory = ~/.ort/scanner/provenance
          compression = false
        }
      }

      postgresStorage {
        url = "jdbc:postgresql://your-postgresql-server:5444/your-database"
        schema = public
        username = username
        password = password
        sslmode = required
        sslcert = /defaultdir/postgresql.crt
        sslkey = /defaultdir/postgresql.pk8
        sslrootcert = /defaultdir/root.crt
      }
    }
  }

  notifier {
    mail {
      hostName = "localhost"
      username = "user"
      password = "secret"
      port = 465
      useSsl = true
      fromAddress = "no-reply@oss-review-toolkit.org"
    }

    jira {
        host = "localhost"
        username = "user"
        password = "secret"
    }
  }
}