aboutcode-org / aboutcode-org/scancode.io

Missing "for_packages" value for some package resources from Docker image scan

Open
#1,617 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

I ran a Docker scan on its own (i.e., pipeline: analyze_docker_image, input: docker://ghcr.io/aboutcode-org/scancode.io:v34.9.5).

There are many resources that are missing the "for_packages" value which the PACKAGES are reported.

Samples:
1.
The scan has `pkg:deb/debian/adduser@3.134?arch=all` detected and assigned "for_packages" value for the following:
```
/usr/sbin/adduser
/usr/sbin/deluser
/usr/share/doc/adduser/copyright
/usr/share/perl5/Debian/AdduserCommon.pm
/var/lib/dpkg/info/adduser.list
/var/lib/dpkg/info/adduser.md5sums
```

but the following files should also be part of "adduser" but don't have "for_packages" value assigned
```
/var/lib/dpkg/info/adduser.conffiles
/var/lib/dpkg/info/adduser.postrm
/var/lib/dpkg/info/adduser.preinst
```

2.
`pkg:deb/debian/dash@0.5.12-2?arch=amd64`

Following files have "for_packages" assigned:
```
/usr/share/debianutils/shells.d/dash
/usr/share/doc/dash/copyright
/usr/share/menu/dash
/var/lib/dpkg/info/dash.list
/var/lib/dpkg/info/dash.md5sums
```
but not the following:
```
/usr/bin/dash
/var/lib/dpkg/info/dash.postinst
/var/lib/dpkg/info/dash.postrm
/var/lib/dpkg/info/dash.prerm
```
3.
`pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64/usr/bin/ischroot`

Following files have "for_packages" assigned:
```
/usr/bin/savelog
/usr/bin/which.debianutils
/usr/sbin/add-shell
/usr/sbin/remove-shell
/usr/sbin/update-shells
/usr/share/debianutils/shells
/usr/share/doc/debianutils/copyright
/var/lib/dpkg/info/debianutils.list
/var/lib/dpkg/info/debianutils.md5sums
```

but not the following:
```
/usr/bin/run-parts
/usr/bin/tempfile
/usr/sbin/installkernel
/var/lib/dpkg/info/debianutils.postinst
/var/lib/dpkg/info/debianutils.postrm
/var/lib/dpkg/info/debianutils.prerm
/var/lib/dpkg/info/debianutils.triggers
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.