aboutcode-org / aboutcode-org/scancode.io
Missing purl version for go packages
- Dominant language
- Python
- Stars
- 215
- Forks
- 203
- Avg merge
- 4d 8h
- Merged PRs (30d)
- 6
Description
It seems the "scan_single_package" pipeline doesn't return version for go packages.
For instance,
| name | version | download_url | returned purl | expected purl |
|-------|----------|----------------|----------------|-----------------|
| gin |1.10.1 | https://github.com/gin-gonic/gin/archive/refs/tags/v1.10.1.tar.gz| pkg:golang/github.com/gin-gonic/gin | pkg:golang/github.com/gin-gonic/gin@1.10.1 |
| terraform |1.13.1 | https://github.com/hashicorp/terraform/archive/refs/tags/v1.13.1.tar.gz| pkg:golang/github.com/hashicorp/terraform | pkg:golang/github.com/hashicorp/terraform@1.13.1 |
| fiber | 2.52.9 | https://github.com/gofiber/fiber/archive/refs/tags/v2.52.9.tar.gz | pkg:golang/github.com/gofiber/fiber/v2 | pkg:golang/github.com/gofiber/fiber/v2@2.52.9 |
Contributor guide
Assessment
This issue has not been assessed yet.