search

chainguard-dev / apko

Build OCI images from APK packages directly without Dockerfile
https://apko.dev
Apache License 2.0
1.21k stars 125 forks source link

set downloadLocation to NOASSERTION when apk.URL is unset #1372

Closed imjasonh closed 1 month ago

imjasonh commented 1 month ago

not specifying the downloadLocation is invalid according to SPDX.

Instead of setting it to pkg.URL which might be empty, set it to NOASSERTION.