bazelbuild / bazelbuild/rules_license
Gather metadata does not resolve toolchains
Open
enhancement
- Dominant language
- Starlark
- Stars
- 85
- Forks
- 37
- PR merge metrics
- No merged PRs in 30d
Description
The gather_metadata_info rule is aspect based which does not resolve and find licenses on toolchains. Hence, tools used in toolchains will not be included in e.g. a generated SBOM.
Contributor guide
Research direction
Start by reading the gather_metadata_info rule and trace how its aspect-based metadata collection handles toolchains. Reproduce the missing license metadata with a toolchain, then verify that tools used by the toolchain appear in the generated SBOM.
Written by the indexing model from the issue text.
Assessment
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100