Fix package resource assign bug for jar manifests

aboutcode-org / scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

2.14k stars 552 forks source link

We had a bug in scancode.io Java MANIFEST.MF parsing and while scanning jars with scan_codebase pipelines we were not assigning package resources to DiscoveredPackages correctly. This PR fixes the same.

Tasks

[x] Reviewed contribution guidelines
[x] PR is descriptively titled 📑 and links the original issue above 🔗
[x] Tests pass -- look for a green checkbox ✔️ a few minutes after opening your PR Run tests locally to check for errors.
[x] Commits are in uniquely-named feature branch and has no merge conflicts 📁
[x] Updated documentation pages (if applicable)
[x] Updated CHANGELOG.rst (if applicable)

aboutcode-org / scancode-toolkit

Fix package resource assign bug for jar manifests #3983

Tasks