aboutcode-org / aboutcode-org/fetchcode

Add FetchCode support for rpm

Aperta
#171 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Lingua principale
HTML
Stelle
13
Fork
24
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

At first glance, you cannot derive a deterministic download URL for RPM packages from a PURL - even with qualifiers - because RPM ecosystems lack a centralized, standardized CDN like Alpine or Debian. RPMs are distributed across many vendor-specific, versioned, and dynamically updated repositories.

But in practice we can download RPMs alright so we need to try harder! The code is to be written alright, in PurlDB and FetchCode

See these places:
- https://github.com/aboutcode-org/purldb/blob/main/minecode/miners/repodata_rpms.py
- https://github.com/aboutcode-org/purldb/blob/main/minecode/miners/repodata.py
- https://github.com/aboutcode-org/purldb/blob/main/minecode/miners/repomd.py
- https://github.com/aboutcode-org/purldb/blob/main/minecode/miners/fedora.py
- https://github.com/aboutcode-org/vulnerablecode/blob/dcb0511c73283654ab8a4ca340b71d6d9c5a16b9/vulnerabilities/rpm_utils.py#L76
- https://github.com/aboutcode-org/scancode-toolkit/blob/develop/src/packagedcode/rpm.py

Guida per i contributori

Nessuna guida per i contributori indicizzata per questo repository

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.