CycloneDX / CycloneDX/gh-python-generate-sbom
Using a non-default input path causes the action to fail
- 主要语言
- JavaScript
- 星标
- 14
- 派生
- 4
- PR 合并指标
- 30 天内没有已合并 PR
描述
When using either v1.0.0 or v1.0.1 of the action it fails when attempting to run the command to actually generate the bom. When running the 1.0.0 version of the action I get the log output:
```
Options:
i: ./xxxxx/requirements.txt
o: ./bom.xml
Running: cyclonedx-py -i ./xxxxx/requirements.txt -o ./pythonsbom.xml
usage: cyclonedx-py [-h] (-c | -cj | -e | -p | -pip | -r) [-i FILE_PATH]
[--format {xml,json}]
[--schema-version {1.4,1.3,1.2,1.1,1.0}] [-o FILE_PATH]
[-F] [-pb] [-X]
cyclonedx-py: error: one of the arguments -c/--conda -cj/--conda-json -e/--e/--environment -p/--p/--poetry -pip/--pip -r/--r/--requirements is required
Error: Command failed: cyclonedx-py -i ./xxxxx/requirements.txt -o ./bom.xml
usage: cyclonedx-py [-h] (-c | -cj | -e | -p | -pip | -r) [-i FILE_PATH]
[--format {xml,json}]
[--schema-version {1.4,1.3,1.2,1.1,1.0}] [-o FILE_PATH]
[-F] [-pb] [-X]
cyclonedx-py: error: one of the arguments -c/--conda -cj/--conda-json -e/--e/--environment -p/--p/--poetry -pip/--pip -r/--r/--requirements is required
```
That lead me to believe that since the -r flag wasn't set it was causing the command to fail. The 1.0.1 version doesn't actually give any output when it fails.
I was able to successfully generate a bom when I instead just ran the command to generate the bom in the workflow and provided it the -r flag.
If there's anything else that I can provide that would help just let me know.
贡献指南
调研方向
首先使用非默认输入路径复现 GitHub Action,并将记录的 cyclonedx-py 命令与包含 -r 的成功命令进行比较。追踪输入选项的组装位置;当 Action 能够针对非默认的 requirements 路径成功生成 BOM 时,即完成。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- javascript, python
- 领域
- ci-cd
- Issue 类型
- 缺陷
- 难度
- 3/5
- 预计耗时
- 1-2 天
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 35/100