aboutcode-org / aboutcode-org/scancode.io
Missing purl version for go packages
- 主要语言
- Python
- 星标
- 215
- 派生
- 203
- 平均合并
- 4 天 8 小时
- 30 天内合并 PR
- 6
描述
It seems the "scan_single_package" pipeline doesn't return version for go packages.
For instance,
| name | version | download_url | returned purl | expected purl |
|-------|----------|----------------|----------------|-----------------|
| gin |1.10.1 | https://github.com/gin-gonic/gin/archive/refs/tags/v1.10.1.tar.gz| pkg:golang/github.com/gin-gonic/gin | pkg:golang/github.com/gin-gonic/gin@1.10.1 |
| terraform |1.13.1 | https://github.com/hashicorp/terraform/archive/refs/tags/v1.13.1.tar.gz| pkg:golang/github.com/hashicorp/terraform | pkg:golang/github.com/hashicorp/terraform@1.13.1 |
| fiber | 2.52.9 | https://github.com/gofiber/fiber/archive/refs/tags/v2.52.9.tar.gz | pkg:golang/github.com/gofiber/fiber/v2 | pkg:golang/github.com/gofiber/fiber/v2@2.52.9 |
贡献指南
评估
这个 Issue 还没有评估数据。