OpenGrep Corresponding Source Information

Binary-reported version: 1.26.0
Installer/source ref: v1.26.0
Source commit: 1bef4ea4ff3264754132eec823b5b1d8cde3e4ee
Upstream repository: https://github.com/opengrep/opengrep
License: GNU Lesser General Public License version 2.1

Executable acquisition evidence:
PostQ installs OpenGrep from the pinned upstream installer/source ref above.
Pinned installer SHA-256: 765f8eba6df9349a172ce3103d2e8f21966d3826b6cb2d84b97442b0883a6d5b

Corresponding source:
Repository: https://github.com/opengrep/opengrep
Tag/ref: v1.26.0
Commit: 1bef4ea4ff3264754132eec823b5b1d8cde3e4ee
Archive: https://github.com/opengrep/opengrep/archive/refs/tags/v1.26.0.tar.gz

PostQ modification statement and build/rebuild information:
PostQ does not modify OpenGrep source code or OpenGrep executable code for this beta release.
PostQ supplies and runs scanner rules separately from OpenGrep.
OpenGrep rebuild and source review should use the upstream repository, tag/ref, and commit listed
above.

Durable customer source location:
https://github.com/opengrep/opengrep/tree/1bef4ea4ff3264754132eec823b5b1d8cde3e4ee

Open-source compliance contact:
contact@postqsoftwarelabs.com