aboutcode-org / aboutcode-org/scancode-toolkit

CycloneDx param generates an empty file for a lua project

Open
#3,249 15 comments 1 reaction 0 assignees View on GitHub
bug
Dominant language
Python
Stars
2.6k
Forks
791
Avg merge
1d 12h
Merged PRs (30d)
5

Description

Attempting to run scancode 31.2.4 with the --cyclonedx or --cyclonedx-xml param (also including --package). Looking to funnel the xml into Dependency-Track

### Description

The scan runs, but the file generated is empty of substance. There is no error generated as with previous versions, but the file output is minimal. If I specify the --json-pp option, then the file is populated.

### How To Reproduce

Ran the command in several ways in an attempt to narrow down the issue. I stripped out all other options and focused on what would work to have the output file populated.

scancode -clpi -n 8 --package --cyclonedx-xml SCBom.xml .

Setup plugins...
Collect file inventory...
Scan files for: info, licenses, copyrights, packages with 8 process(es)...
[####################] 13174
Scanning done.
Summary: info, licenses, copyrights, packages with 8 process(es)
Errors count: 0
Scan Speed: 3.92 files/sec. 661.24 KB/sec.
Initial counts: 7548 resource(s): 6587 file(s) and 961 directorie(s)
Final counts: 7548 resource(s): 6587 file(s) and 961 directorie(s) for 1.06 GB
Timings:
scan_start: 2023-02-13T155705.253586
scan_end: 2023-02-13T162509.276539
setup_scan:licenses: 1.54s
setup: 1.55s
inventory: 1.86s
scan:packages: 0.30s
scan: 1679.32s
total: 1684.30s
Removing temporary files...done.

scancode -clpi -n 8 --package --cyclonedx SCBom.json .

Setup plugins...
Collect file inventory...
Scan files for: info, licenses, copyrights, packages with 8 process(es)...
[####################] 13172
Scanning done.
Summary: info, licenses, copyrights, packages with 8 process(es)
Errors count: 0
Scan Speed: 4.17 files/sec. 702.55 KB/sec.
Initial counts: 7547 resource(s): 6586 file(s) and 961 directorie(s)
Final counts: 7547 resource(s): 6586 file(s) and 961 directorie(s) for 1.06 GB
Timings:
scan_start: 2023-02-13T153015.612640
scan_end: 2023-02-13T155640.850806
setup_scan:licenses: 1.54s
setup: 1.55s
inventory: 1.87s
scan:packages: 0.28s
scan: 1580.58s
total: 1585.50s
Removing temporary files...done.

### System configuration

The project this is being run on is C++/C#. We also have several 3rd party libraries in the solution.

[SCBom.zip](https://github.com/nexB/scancode-toolkit/files/10724162/SCBom.zip)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.