CycloneDX / CycloneDX/cyclonedx-gomod

mod failed due to calculating has of non go file

Open
#201 8 comments 0 reactions 0 assignees View on GitHub
bug triage:needs-reproducer
Dominant language
Go
Stars
187
Forks
40
Avg merge
1d 7h
Merged PRs (30d)
14

Description

# Command:

```
cyclonedx-gomod mod -verbose
```

# Error:

```
....
1:33AM DBG skipping license detection module=golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c reason="no detector provided"
1:33AM DBG calculating module hash module=golang.org/x/sync@v0.0.0-20210220032951-036812b2e83c
1:33AM DBG converting module to component module=golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
1:33AM DBG skipping license detection module=golang.org/x/sys@v0.0.0-20220209214540-3681064d5158 reason="no detector provided"
1:33AM DBG calculating module hash module=golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
1:33AM DBG converting module to component module=golang.org/x/text@v0.3.7
1:33AM DBG skipping license detection module=golang.org/x/text@v0.3.7 reason="no detector provided"
1:33AM DBG calculating module hash module=golang.org/x/text@v0.3.7
1:33AM DBG converting module to component module=golang.org/x/time@v0.0.0-20210723032227-1f47c861a9ac
1:33AM DBG skipping license detection module=golang.org/x/time@v0.0.0-20210723032227-1f47c861a9ac reason="no detector provided"
1:33AM DBG calculating module hash module=golang.org/x/time@v0.0.0-20210723032227-1f47c861a9ac
1:33AM DBG converting module to component module=golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1
1:33AM DBG skipping license detection module=golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1 reason="no detector provided"
1:33AM DBG calculating module hash module=golang.org/x/xerrors@v0.0.0-20200804184101-5ec99f83aff1
1:33AM DBG converting module to component module=google.golang.org/api@v0.70.0
1:33AM DBG skipping license detection module=google.golang.org/api@v0.70.0 reason="no detector provided"
1:33AM DBG calculating module hash module=google.golang.org/api@v0.70.0
1:33AM DBG converting module to component module=google.golang.org/appengine@v1.6.7
1:33AM DBG skipping license detection module=google.golang.org/appengine@v1.6.7 reason="no detector provided"
1:33AM DBG calculating module hash module=google.golang.org/appengine@v1.6.7
{"level":"error","error":"failed to convert modules: failed to calculate module hash: open /.env.development: no such file or directory","time":"2022-10-12T01:33:05Z"}
```

Contributor guide

Open the contributing guide

Research direction

Reproduce the failure with `cyclonedx-gomod mod -verbose` and start by tracing the module-hash calculation reported in the error. Determine why the command attempts to open `/.env.development`, then verify that non-Go files no longer cause the command to fail and that module conversion completes successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.