aboutcode-org / aboutcode-org/scancode-toolkit

Scancode fails to inventory package manifest files

Abierto
#2,408 17 comentarios 0 reacciones 0 asignados Ver en GitHub
bug package scan
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

### Description

Hey there,

Scancode appears to only scan package manifest files based on the name AND if the scan is run in the same directory. For example, if my python manifest file is named `dev.txt`, scancode does not appear to inventory it. However, if I rename the file to `requirements.txt` **_AND_** run scancode from the same directory, scancode will inventory it and the package dependencies will populate in the json output.. as shown below. There's also a possibility I am using it wrong and this is expected.

### How To Reproduce

#### Here we run scancode against the entire directory (no package dependencies shown)

Command: `scancode -clpeui --json-pp out.json flask-sqlalchemy`

```
{
"path": "flask-sqlalchemy/requirements/dev.txt", ### name is dev.txt
"type": "file",
"name": "dev.txt",
"base_name": "dev",
"extension": ".txt",
"size": 2363,
"date": "2021-02-19",
"sha1": "f3ec0c8082673263ff92cf965fa104bc9c11e078",
"md5": "80d6553a1d0caf914fb7ff299d742b2a",
"sha256": "53dd0a09ff4313129309e0231463226372482868af9601fedf8758d2f74cea74",
"mime_type": "text/plain",
"file_type": "ASCII text",
"programming_language": null,
"is_binary": false,
"is_text": true,
"is_archive": false,
"is_media": false,
"is_source": false,
"is_script": false,
"licenses": [],
"license_expressions": [],
"percentage_of_license_text": 0,
"copyrights": [],
"holders": [],
"authors": [],
"packages": [], ### NOTHING HERE
"emails": [],
"urls": [],
"files_count": 0,
"dirs_count": 0,
"size_count": 0,
"scan_errors": []
},
```

#### Now we run scancode in the same directory against the file and we get package dependencies

Command: `scancode -clpeui --json-pp out.json requirements.txt`

```
"packages": [ ### NOW WE HAVE DATA
{
"type": "pypi",
"namespace": null,
"name": null,
"version": null,
"qualifiers": {},
"subpath": null,
"primary_language": "Python",
"description": null,
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": null,
"dependencies": [
{
"purl": "pkg:pypi/alabaster@0.7.12",
"requirement": "==0.7.12",
"scope": "dependencies",
```

> Tell us how to reproduce the issue.

`scancode -clpeui --json-pp out.json flask-sqlalchemy`

`scancode -clpeui --json-pp out.json requirements.txt`

### System configuration

`Python 3.6.13`

`FROM python:3.6-slim-buster` is the base docker image

Version: ScanCode version 21.2.9

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.