Closed soimsoim closed 4 years ago
The SPDX tools does support 2.1.
Check to make sure the spec-version on your file states the 2.1 version.
If that doesn't work, you can attach the file that doesn't work to this issue and I'll take a look at it.
Command : java -jar spdx-tools-2.1.9-jar-with-dependencies.jar TagToSpreadsheet busybox-1.30.1_simple.tag busy_simple.xls
Output: ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. Set system property 'log4j2.debug' to show Log4j2 internal initialization logging. 11:07:07.757 [main] ERROR org.apache.jena.rdf.model.impl.RDFReaderFImpl - Rewired RDFReaderFImpl - configuration changes have no effect on reading 11:07:07.759 [main] ERROR org.apache.jena.rdf.model.impl.RDFReaderFImpl - Rewired RDFReaderFImpl - configuration changes have no effect on reading The SPDX Document Namespace must be set before other SPDX document properties are set. Usage: TagToSpreadsheet spdxfile.spdx spreadsheetfile.xls where spdxfile.spdx is a valid SPDX tag-value file and spreadsheetfile.xls is the output SPDX spreadsheeet file.
Since the file cannot be attached, the contents of the file are left as comments. Contents of busybox-1.30.1_simple.tag
SPDXVersion: SPDX-2.1
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentComment
Creator: Tool: scancode-tk.bbclass in meta-spdxscanner Created: 2020-03-03T14:44:29Z
PackageName: busybox
PackageVersion: 1.30.1
PackageDownloadLocation: http://www.busybox.net/downloads/busybox-1.30.1.tar.bz2;name=tarball
PackageHomePage: http://www.busybox.net
PackageSummary:
FileName: ./spdx_temp/0001-Use-CC-when-linking-instead-of-LD-and-use-CFLAGS-and.patch FileChecksum: SHA1: 820fd97863bb0c3d9b69b0d770509ee717427d27 LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/0001-dc.tests-fix-two-test-case-to-also-depend-on-DC_BIG.patch FileChecksum: SHA1: c8082b685fd2036a031f020021415377bd2066a7 LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/0001-du-l-works-fix-to-use-145-instead-of-144.patch FileChecksum: SHA1: 2a3b8a23b81131bb0d73b90903f7aa94f122d1c5 LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/0001-testsuite-check-uudecode-before-using-it.patch FileChecksum: SHA1: d4f114af0a2bbe3aed2ede70644ada0a9b2d81f0 LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/0001-testsuite-use-www.example.org-for-wget-test-cases.patch FileChecksum: SHA1: 4638c3c1b2b09a67af23976e8c4c67cd04199d37 LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/busybox-1.30.1/.indent.pro FileChecksum: SHA1: 2c5e2f814fa25bc02b0bb90e07b73aa50986db6a LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/busybox-1.30.1/.pc/.quilt_patches FileChecksum: SHA1: 3113cbc22187a55b4d2617235511a5b220fbe88a LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
FileName: ./spdx_temp/busybox-1.30.1/.pc/.quilt_series FileChecksum: SHA1: 2859777d6f2bf7f5165b3db310e170ac6c7c8672 LicenseConcluded: NOASSERTION LicenseInfoInFile: NONE FileCopyrightText: NONE
I downloaded spdx-tools-2.1.9-jar-with-dependencies.jar from maven and ran it. Is it too old version to run? Is this the cause of the problem?
The SPDX Document Namespace must be set before other SPDX document properties are set.
From the above error message it looks like the a required field DocumentNamespce is not set in the document. It needs to be one of the first fields in the document.
As you commented, the file was not compliant with the SPDX-2.1 format. Thanks for the kind reply!
In my tool, SPDX format file is created based on SPDX-2.1. spdx-tool works fine with SPDX-2.0 (function: TagToSpreadsheet), but not with SPDX-2.1.
Is there a way to make it work with SPDX-2.1?
Thanks & Regards, Soim