aboutcode-org / aboutcode-org/scancode.io

Confusing results from load_inventory of SCTK Scans

未关闭
#1,563 0 条评论 0 个 reaction 已指派 1 人 已被 @tdruez 认领 在 GitHub 查看
bug medium priority
主要语言
Python
星标
215
派生
203
平均合并
4 天 8 小时
30 天内合并 PR
6

描述

I ran a load_inventory Project with 25 Devel codebase JSON Scans created with SCTK 32.3.0 (SCIO v34.9.3). These are small repos so it will be a lot of extra work to use 25 separate projects.

The key problem is that SCIO appears to be truncating/ignoring the first segment of the Resource path that is visible in the JSON data. For example path = python-lambdas/lambda_function.py from the JSON input is reported as just: lambda_function.py in the SCIO data.

In the case where the name for the first segment of the path from SCTK matches the name for JSON input file (repo) level it would be sufficient to just keep that full path, but there are likely other cases where we need to prepend the input Scan file name to the path.

Without the full path we will likely have the UberJAR problem that we will only keep report one Resource for common files like LICENSE or README that appear in many repos for a Devel Codebase.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。