aboutcode-org / aboutcode-org/scancode-toolkit

Scancode fails to inventory package manifest files

Aberta
#2,408 17 comentários 0 reações 0 responsáveis Ver no GitHub
bug package scan
Linguagem predominante
Python
Estrelas
2.6k
Forks
791
Merge médio
1d 12h
PRs com merge (30d)
5

Descrição

### Description

Hey there,

Scancode appears to only scan package manifest files based on the name AND if the scan is run in the same directory. For example, if my python manifest file is named `dev.txt`, scancode does not appear to inventory it. However, if I rename the file to `requirements.txt` **_AND_** run scancode from the same directory, scancode will inventory it and the package dependencies will populate in the json output.. as shown below. There's also a possibility I am using it wrong and this is expected.

### How To Reproduce

#### Here we run scancode against the entire directory (no package dependencies shown)

Command: `scancode -clpeui --json-pp out.json flask-sqlalchemy`

```
{
"path": "flask-sqlalchemy/requirements/dev.txt", ### name is dev.txt
"type": "file",
"name": "dev.txt",
"base_name": "dev",
"extension": ".txt",
"size": 2363,
"date": "2021-02-19",
"sha1": "f3ec0c8082673263ff92cf965fa104bc9c11e078",
"md5": "80d6553a1d0caf914fb7ff299d742b2a",
"sha256": "53dd0a09ff4313129309e0231463226372482868af9601fedf8758d2f74cea74",
"mime_type": "text/plain",
"file_type": "ASCII text",
"programming_language": null,
"is_binary": false,
"is_text": true,
"is_archive": false,
"is_media": false,
"is_source": false,
"is_script": false,
"licenses": [],
"license_expressions": [],
"percentage_of_license_text": 0,
"copyrights": [],
"holders": [],
"authors": [],
"packages": [], ### NOTHING HERE
"emails": [],
"urls": [],
"files_count": 0,
"dirs_count": 0,
"size_count": 0,
"scan_errors": []
},
```

#### Now we run scancode in the same directory against the file and we get package dependencies

Command: `scancode -clpeui --json-pp out.json requirements.txt`

```
"packages": [ ### NOW WE HAVE DATA
{
"type": "pypi",
"namespace": null,
"name": null,
"version": null,
"qualifiers": {},
"subpath": null,
"primary_language": "Python",
"description": null,
"release_date": null,
"parties": [],
"keywords": [],
"homepage_url": null,
"download_url": null,
"size": null,
"sha1": null,
"md5": null,
"sha256": null,
"sha512": null,
"bug_tracking_url": null,
"code_view_url": null,
"vcs_url": null,
"copyright": null,
"license_expression": null,
"declared_license": null,
"notice_text": null,
"root_path": null,
"dependencies": [
{
"purl": "pkg:pypi/alabaster@0.7.12",
"requirement": "==0.7.12",
"scope": "dependencies",
```

> Tell us how to reproduce the issue.

`scancode -clpeui --json-pp out.json flask-sqlalchemy`

`scancode -clpeui --json-pp out.json requirements.txt`

### System configuration

`Python 3.6.13`

`FROM python:3.6-slim-buster` is the base docker image

Version: ScanCode version 21.2.9

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.