aboutcode-org / aboutcode-org/scancode.io
Missing "for_packages" value for some package resources from Docker image scan
- Linguagem predominante
- Python
- Estrelas
- 215
- Forks
- 203
- Merge médio
- 4d 8h
- PRs com merge (30d)
- 6
Descrição
I ran a Docker scan on its own (i.e., pipeline: analyze_docker_image, input: docker://ghcr.io/aboutcode-org/scancode.io:v34.9.5).
There are many resources that are missing the "for_packages" value which the PACKAGES are reported.
Samples:
1.
The scan has `pkg:deb/debian/adduser@3.134?arch=all` detected and assigned "for_packages" value for the following:
```
/usr/sbin/adduser
/usr/sbin/deluser
/usr/share/doc/adduser/copyright
/usr/share/perl5/Debian/AdduserCommon.pm
/var/lib/dpkg/info/adduser.list
/var/lib/dpkg/info/adduser.md5sums
```
but the following files should also be part of "adduser" but don't have "for_packages" value assigned
```
/var/lib/dpkg/info/adduser.conffiles
/var/lib/dpkg/info/adduser.postrm
/var/lib/dpkg/info/adduser.preinst
```
2.
`pkg:deb/debian/dash@0.5.12-2?arch=amd64`
Following files have "for_packages" assigned:
```
/usr/share/debianutils/shells.d/dash
/usr/share/doc/dash/copyright
/usr/share/menu/dash
/var/lib/dpkg/info/dash.list
/var/lib/dpkg/info/dash.md5sums
```
but not the following:
```
/usr/bin/dash
/var/lib/dpkg/info/dash.postinst
/var/lib/dpkg/info/dash.postrm
/var/lib/dpkg/info/dash.prerm
```
3.
`pkg:deb/debian/debianutils@5.7-0.5~deb12u1?arch=amd64/usr/bin/ischroot`
Following files have "for_packages" assigned:
```
/usr/bin/savelog
/usr/bin/which.debianutils
/usr/sbin/add-shell
/usr/sbin/remove-shell
/usr/sbin/update-shells
/usr/share/debianutils/shells
/usr/share/doc/debianutils/copyright
/var/lib/dpkg/info/debianutils.list
/var/lib/dpkg/info/debianutils.md5sums
```
but not the following:
```
/usr/bin/run-parts
/usr/bin/tempfile
/usr/sbin/installkernel
/var/lib/dpkg/info/debianutils.postinst
/var/lib/dpkg/info/debianutils.postrm
/var/lib/dpkg/info/debianutils.prerm
/var/lib/dpkg/info/debianutils.triggers
```
Guia de contribuição
Avaliação
Esta issue ainda não foi avaliada.