search

canonical / cpc-sbom

CPC maintained tool for generating SBOM for cloud images
GNU General Public License v3.0
7 stars 0 forks source link

SBOMs built on launchpad infra have ftpmaster.internal listed as package repository URL #26

Closed philroche closed 1 year ago

philroche commented 1 year ago

Example

"externalRefs": [
                {
                    "referenceCategory": "PACKAGE-MANAGER",
                    "referenceLocator": "pkg:deb/debian/bridge-utils@1.7-1ubuntu3?arch=amd64&repository_url=http://ftpmaster.internal/pool/main/b/bridge-utils/bridge-utils_1.7-1ubuntu3_amd64.deb",
                    "referenceType": "purl"
                }
            ],

This should be changed as this URL is only accessible from launchpad infra.