aboutcode-org / aboutcode-org/scancode-toolkit

CycloneDx param generates an empty file for a lua project

Abierto
#3,249 15 comentarios 1 reacción 0 asignados Ver en GitHub
bug
Lenguaje dominante
Python
Estrellas
2.6k
Forks
791
Merge medio
1 d 12 h
PR fusionados (30 d)
5

Descripción

Attempting to run scancode 31.2.4 with the --cyclonedx or --cyclonedx-xml param (also including --package). Looking to funnel the xml into Dependency-Track

### Description

The scan runs, but the file generated is empty of substance. There is no error generated as with previous versions, but the file output is minimal. If I specify the --json-pp option, then the file is populated.

### How To Reproduce

Ran the command in several ways in an attempt to narrow down the issue. I stripped out all other options and focused on what would work to have the output file populated.

scancode -clpi -n 8 --package --cyclonedx-xml SCBom.xml .

Setup plugins...
Collect file inventory...
Scan files for: info, licenses, copyrights, packages with 8 process(es)...
[####################] 13174
Scanning done.
Summary: info, licenses, copyrights, packages with 8 process(es)
Errors count: 0
Scan Speed: 3.92 files/sec. 661.24 KB/sec.
Initial counts: 7548 resource(s): 6587 file(s) and 961 directorie(s)
Final counts: 7548 resource(s): 6587 file(s) and 961 directorie(s) for 1.06 GB
Timings:
scan_start: 2023-02-13T155705.253586
scan_end: 2023-02-13T162509.276539
setup_scan:licenses: 1.54s
setup: 1.55s
inventory: 1.86s
scan:packages: 0.30s
scan: 1679.32s
total: 1684.30s
Removing temporary files...done.

scancode -clpi -n 8 --package --cyclonedx SCBom.json .

Setup plugins...
Collect file inventory...
Scan files for: info, licenses, copyrights, packages with 8 process(es)...
[####################] 13172
Scanning done.
Summary: info, licenses, copyrights, packages with 8 process(es)
Errors count: 0
Scan Speed: 4.17 files/sec. 702.55 KB/sec.
Initial counts: 7547 resource(s): 6586 file(s) and 961 directorie(s)
Final counts: 7547 resource(s): 6586 file(s) and 961 directorie(s) for 1.06 GB
Timings:
scan_start: 2023-02-13T153015.612640
scan_end: 2023-02-13T155640.850806
setup_scan:licenses: 1.54s
setup: 1.55s
inventory: 1.87s
scan:packages: 0.28s
scan: 1580.58s
total: 1585.50s
Removing temporary files...done.

### System configuration

The project this is being run on is C++/C#. We also have several 3rd party libraries in the solution.

[SCBom.zip](https://github.com/nexB/scancode-toolkit/files/10724162/SCBom.zip)

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.