aboutcode-org / aboutcode-org/scancode.io
Missing purl version for go packages
- 主要語言
- Python
- 星號
- 215
- 分支
- 203
- 平均合併
- 4 天 8 小時
- 30 天內合併 PR
- 6
描述
It seems the "scan_single_package" pipeline doesn't return version for go packages.
For instance,
| name | version | download_url | returned purl | expected purl |
|-------|----------|----------------|----------------|-----------------|
| gin |1.10.1 | https://github.com/gin-gonic/gin/archive/refs/tags/v1.10.1.tar.gz| pkg:golang/github.com/gin-gonic/gin | pkg:golang/github.com/gin-gonic/gin@1.10.1 |
| terraform |1.13.1 | https://github.com/hashicorp/terraform/archive/refs/tags/v1.13.1.tar.gz| pkg:golang/github.com/hashicorp/terraform | pkg:golang/github.com/hashicorp/terraform@1.13.1 |
| fiber | 2.52.9 | https://github.com/gofiber/fiber/archive/refs/tags/v2.52.9.tar.gz | pkg:golang/github.com/gofiber/fiber/v2 | pkg:golang/github.com/gofiber/fiber/v2@2.52.9 |
貢獻指南
評估
這個 Issue 還沒有評估資料。