aboutcode-org / aboutcode-org/scancode-toolkit

Analysis exception processing SPDX file: Missing document namespace

Open
#3,048 5 comments 0 reactions 0 assignees View on GitHub
bug GUI and outputs should have
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

### Description

I have used the openSUSE OBS to RPM build the GNU "hello world" example. Using this RPM as my input, I would like to create an SBOM for it. When I go to verify the SBOM, then it says the document namespace is missing. I don't see a scancode command line option to specify it. I do see that document namespace was a bug a couple of years ago and was fixed.

### How To Reproduce

wget https://ftp.gnu.org/gnu/hello/hello-2.10.tar.gz
wget https://download.opensuse.org/repositories/home:/geokraft4/15.3/src/hello-2.10-4.2.src.rpm
wget https://download.opensuse.org/repositories/home:/geokraft4/15.3/x86_64/hello-2.10-4.2.x86_64.rpm
scancode -clpeui -n 1 --verbose --json-pp ~/spdxdocs/hello-rpm-spdx.json ~/spdxhello/hello-2.10-4.2.x86_64.rpm
java -jar ~/spdxtools/tools-java-1.0.4-jar-with-dependencies.jar Verify ~/spdxdocs/hello-rpm-spdx.json

### System configuration

host: SLES 15 SP3
scancode 30.1.0 installed from git clone.

mkdir ~/source
cd ~/source
git clone https://github.com/nexB/scancode-toolkit.git
cd scancode-toolkit
git checkout develop
./configure
source venv/bin/activate
sudo zypper install -y python3-devel
sudo pip install --upgrade pip setuptools wheel
sudo pip install scancode-toolkit
which scancode

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.