aboutcode-org / aboutcode-org/scancode-toolkit

Add support for luarocks spec

未关闭
#3,526 8 条评论 2 个 reaction 已指派 0 人 在 GitHub 查看
bug codeday good first issue package-formats
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

Hello Scancode Team,

I wanted to generate SBOM for my kong source code using scancode tool.
But the output generated from the tool contains very few component (may be just 2 or 3). while the jsonpp output contains so many entries(it also scans all the lua file).

URL of the source code: https://github.com/Kong/kong/tree/3.3.0
Command which I used to scan the souce code and generate sbom:

```
scancode -n 12 -ip kong/ --json-pp kong-3.3.0.json --cyclonedx kong-3.3.0_cdxSBOM.json --classify --summary --consolidate --full-root --mark-source
```

For the reference, I am attaching the SBOM as well as the jsonpp output.

[kong-3.3.0.txt](https://github.com/nexB/scancode-toolkit/files/12748494/kong-3.3.0.txt)
[kong-3.3.0_cdxSBOM.txt](https://github.com/nexB/scancode-toolkit/files/12748495/kong-3.3.0_cdxSBOM.txt)

Can you please have a look on this issue.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。