OpenGrep Corresponding Source Information

Binary-reported version: 1.27.1
Installer/source ref: v1.28.0-interfile.alpha.1
Source commit: e7202581ac004654035f5bd08f590ef67bd9c95d
Upstream repository: https://github.com/opengrep/opengrep
License: GNU Lesser General Public License version 2.1

Executable acquisition evidence:
PostQ installs OpenGrep from the pinned upstream installer/source ref above.
Pinned installer SHA-256: 765f8eba6df9349a172ce3103d2e8f21966d3826b6cb2d84b97442b0883a6d5b

Corresponding source:
Repository: https://github.com/opengrep/opengrep
Tag/ref: v1.28.0-interfile.alpha.1
Commit: e7202581ac004654035f5bd08f590ef67bd9c95d
Archive: https://github.com/opengrep/opengrep/archive/refs/tags/v1.28.0-interfile.alpha.1.tar.gz

PostQ modification statement and build/rebuild information:
PostQ does not modify OpenGrep source code or OpenGrep executable code for this beta release.
PostQ supplies and runs scanner rules separately from OpenGrep.
OpenGrep rebuild and source review should use the upstream repository, tag/ref, and commit listed
above.

Durable customer source location:
https://github.com/opengrep/opengrep/tree/e7202581ac004654035f5bd08f590ef67bd9c95d

Open-source compliance contact:
contact@postqsoftwarelabs.com