aboutcode-org / aboutcode-org/scancode-toolkit

Analysis exception processing SPDX file: Missing document namespace

未关闭
#3,048 5 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug GUI and outputs should have
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

### Description

I have used the openSUSE OBS to RPM build the GNU "hello world" example. Using this RPM as my input, I would like to create an SBOM for it. When I go to verify the SBOM, then it says the document namespace is missing. I don't see a scancode command line option to specify it. I do see that document namespace was a bug a couple of years ago and was fixed.

### How To Reproduce

wget https://ftp.gnu.org/gnu/hello/hello-2.10.tar.gz
wget https://download.opensuse.org/repositories/home:/geokraft4/15.3/src/hello-2.10-4.2.src.rpm
wget https://download.opensuse.org/repositories/home:/geokraft4/15.3/x86_64/hello-2.10-4.2.x86_64.rpm
scancode -clpeui -n 1 --verbose --json-pp ~/spdxdocs/hello-rpm-spdx.json ~/spdxhello/hello-2.10-4.2.x86_64.rpm
java -jar ~/spdxtools/tools-java-1.0.4-jar-with-dependencies.jar Verify ~/spdxdocs/hello-rpm-spdx.json

### System configuration

host: SLES 15 SP3
scancode 30.1.0 installed from git clone.

mkdir ~/source
cd ~/source
git clone https://github.com/nexB/scancode-toolkit.git
cd scancode-toolkit
git checkout develop
./configure
source venv/bin/activate
sudo zypper install -y python3-devel
sudo pip install --upgrade pip setuptools wheel
sudo pip install scancode-toolkit
which scancode

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。