file-metadata cataloger can't generate all files md5 from all sbom's file
Open
enhancement
- Dominant language
- Go
- Stars
- 9.6k
- Forks
- 962
- Avg merge
- 23h 27m
- Merged PRs (30d)
- 48
Description
when if sbom's file in a zip file, file-metadata cataloger can't generate the sbom's file md5 or sha1
Contributor guide
Research direction
Start by reproducing the file-metadata cataloger behavior with an SBOM file contained in a ZIP archive, then trace the cataloger's handling of archived files. Done means the cataloger generates the expected MD5 or SHA1 for every SBOM file inside the archive.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100