aboutcode-org / scancode.io

ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!
https://scancodeio.readthedocs.io
Apache License 2.0
109 stars 83 forks source link

When mapping two resources in a d2d pipeline I would like to store explanatory data in the relation #883

Open pombredanne opened 1 year ago

pombredanne commented 1 year ago

When mapping two resources in a d2d pipeline I would like to store explanatory data in the relation.

For instance when I map a debug-built binary ELF to source files using DWARF debug symbols I would like to store in the relation the fact this is was mapped using one or more DWARF debug symbols of this type and with this value.

With this information, I can review and validate the results more efficiently without having to do extra research and this would provide effective tracing to explain why this mapping exists.

tdruez commented 1 year ago

@pombredanne Could you provide examples of the data you'd like to store to define the proper model fields?

pombredanne commented 1 year ago

Say that using a d2d pipeline I map the To/ binary glibc.so to the From/ glibc-2.18/libc/core/softmath.c. It could be mapped thanks to:

Or in the case of Java a .class file could be mapped to a .java file thanks to:

And going further, the binary could be mapped to source based on other attributes such as a unique copyright and license.