containerbuildsystem / cachi2

GNU General Public License v3.0
5 stars 20 forks source link

toil(pkg-mgr:pip): report SBOM "cachi2:missing_hash:in_file" property... #531

Open ben-alkov opened 2 months ago

ben-alkov commented 2 months ago

...when any 'requirements*.txt file is unhashed

Maintainers will complete the following section

Note: if the contribution is external (not from an organization member), the CI pipeline will not run automatically. After verifying that the CI is safe to run:

ben-alkov commented 2 months ago

~This one-line change produces correct SBOMs, but I'm not completely comfortable with it as I don't fully understand why it works...~

~Refactored, but I still don't completely understand why wheels need to be special-cased~

Ignore, this is obviated by later work.