aboutcode-org / aboutcode-org/scancode-toolkit

Incorrect PURL type for Alpine packages

未关闭
#4,964 1 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug package-url-spec
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

### Description

Currently, we use `alpine` as the PURL type for Alpine packages, which is not in line with the latest [Package-URL Spec](https://github.com/package-url/purl-spec/blob/main/types-doc/apk-definition.md).
Alpine packages should use `apk` as the PURL type.

#### These package handler should use `apk` as default package type:

- https://github.com/aboutcode-org/scancode-toolkit/blob/6570c131e2821388286f661368a70e0120aaf2c6/src/packagedcode/alpine.py#L40
- https://github.com/aboutcode-org/scancode-toolkit/blob/6570c131e2821388286f661368a70e0120aaf2c6/src/packagedcode/alpine.py#L64
- https://github.com/aboutcode-org/scancode-toolkit/blob/6570c131e2821388286f661368a70e0120aaf2c6/src/packagedcode/alpine.py#L135

#### Related issues in other projects:

- https://github.com/aboutcode-org/univers/issues/191
- https://github.com/aboutcode-org/vulnerablecode/issues/2286

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。