search

scanoss / scanoss.py

The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.
MIT License
27 stars 19 forks source link

Regression in PURL syntax between SCANOSS 1.0.4 and 1.0.6 #15

Closed vargenau closed 2 years ago

vargenau commented 2 years ago 
svn checkout svn+ssh://svn.code.sf.net/p/phpwiki/code/trunk phpwiki

scanoss-py scan --format spdxlite --output phpwiki.spdx.json phpwiki/

Attached is result of the scan done last week with SCANOSS 1.0.4 and today with 1.0.6.

In 1.0.4 you get "referenceLocator": "pkg:github/pbalan/mariadb@1.0.0"

In 1.0.6 you get "referenceLocator": "pkg:github/pbalan/mariadb@1.0.0@1.0.0"

The 1.0.6 result does not seem to be a valid PURL.

phpwiki-with-scanoss1.0.4.spdx.json.txt phpwiki-with-scanoss1.0.6.spdx.json.txt

mscasso-scanoss commented 2 years ago

Hi again @vargenau. Thank you one more time for report this issue, like the other one you had reported, it was related with an update in our scanning engine. The bug was solved, please give a new try.

vargenau commented 2 years ago

I confirm it works now.

You can close the ticket.