CSV Reader does not create a packageURL - Githubissues

devonfw / solicitor

Solicitor is a tool enabling management of licenses of software dependencies

Apache License 2.0

22 stars 18 forks source link

CSV Reader does not create a packageURL #274

Closed duph97 closed 1 month ago

duph97 commented 2 months ago

The CSV reader in Solicitor does not create a packageURL. Without a packageURL you cannot use services that depend on this value. This must be fixed.

Proposed solution:

The package type is added as csv reader configuration property on top level
package type can be of any purl supported value
packageURL in appComponent is only set, if a PackageURLHandler exists for that type

Hints:

Supported pURL Types: https://github.com/package-url/purl-spec/blob/master/PURL-TYPES.rst
packageType is kind of similar to the repoType
Validation whether a purl type is supported is also implemented in the CycloneDX reader

ohecker commented 1 month ago

Merged -> Close