aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect PURL type for Alpine packages

Aberta
#4,964 1 comentário 0 reações 0 responsáveis Ver no GitHub
bug package-url-spec
Linguagem predominante
Python
Estrelas
2.6k
Forks
791
Merge médio
1d 12h
PRs com merge (30d)
5

Descrição

### Description

Currently, we use `alpine` as the PURL type for Alpine packages, which is not in line with the latest [Package-URL Spec](https://github.com/package-url/purl-spec/blob/main/types-doc/apk-definition.md).
Alpine packages should use `apk` as the PURL type.

#### These package handler should use `apk` as default package type:

- https://github.com/aboutcode-org/scancode-toolkit/blob/6570c131e2821388286f661368a70e0120aaf2c6/src/packagedcode/alpine.py#L40
- https://github.com/aboutcode-org/scancode-toolkit/blob/6570c131e2821388286f661368a70e0120aaf2c6/src/packagedcode/alpine.py#L64
- https://github.com/aboutcode-org/scancode-toolkit/blob/6570c131e2821388286f661368a70e0120aaf2c6/src/packagedcode/alpine.py#L135

#### Related issues in other projects:

- https://github.com/aboutcode-org/univers/issues/191
- https://github.com/aboutcode-org/vulnerablecode/issues/2286

Guia de contribuição

Abrir o guia de contribuição

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.