aboutcode-org / aboutcode-org/scancode.io

Missing purl version for go packages

Open
#1,835 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

It seems the "scan_single_package" pipeline doesn't return version for go packages.
For instance,

| name | version | download_url | returned purl | expected purl |
|-------|----------|----------------|----------------|-----------------|
| gin |1.10.1 | https://github.com/gin-gonic/gin/archive/refs/tags/v1.10.1.tar.gz| pkg:golang/github.com/gin-gonic/gin | pkg:golang/github.com/gin-gonic/gin@1.10.1 |
| terraform |1.13.1 | https://github.com/hashicorp/terraform/archive/refs/tags/v1.13.1.tar.gz| pkg:golang/github.com/hashicorp/terraform | pkg:golang/github.com/hashicorp/terraform@1.13.1 |
| fiber | 2.52.9 | https://github.com/gofiber/fiber/archive/refs/tags/v2.52.9.tar.gz | pkg:golang/github.com/gofiber/fiber/v2 | pkg:golang/github.com/gofiber/fiber/v2@2.52.9 |

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.