nexB / purldb

Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss
https://purldb.readthedocs.io/
29 stars 20 forks source link

PurlDB: purl2sym Data collection Batch5 #356

Closed pombredanne closed 3 months ago

pombredanne commented 3 months ago

Here we add purl2sym support for a list of PURLs listed below.

  1. [x] Add support in FetchCode and PurlDB
  2. [x] Test of end-to-end support in the PurlDB

The PURLs are:

keshav-space commented 3 months ago

Completed in:

The simple way to test this is to follow the below steps after installing PurlDB (https://github.com/nexB/purldb?tab=readme-ov-file#installation):

  1. Go to /api/collect/ add PURL for indexing. ex: /api/collect/?purl=pkg:gnu/libiconv@1.17&addon_pipelines=collect_symbols_ctags
  2. Once the indexing has completed go to /api/resources/and filter out resource based on PURL to see the symbols for each resource in extra_data field. ex: /api/resources/?purl=pkg:gnu/libiconv@1.17

[!TIP] Follow this tutorial to index the symbols and strings literals for a PURL/Package using various different addon pipelines. https://aboutcode.readthedocs.io/projects/PURLdb/en/latest/how-to-guides/tutorial_symbol_and_string_collection.html