Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Diagnose issues with Resources not associated with a Package #445

Closed
mjherzog opened this issue Jun 11, 2022 · 4 comments
Closed

Diagnose issues with Resources not associated with a Package #445

mjherzog opened this issue Jun 11, 2022 · 4 comments

Comments

@mjherzog
Copy link
Member

We have some major gaps in Package Detection where Resources are not associated with a Package or a Package is not detected.
The task here is to run SCIO Scans on a selection of popular public Docker images to identity a representative sample of the Package detection gaps. A suggested list is:

  • grafana/grafana:7.2.0
  • influxdb:1.8.10
  • logstash:7.17.1
  • nginx:1.21.6-alpine
  • postgres:11.15-bullseye
  • python:3.7-slim-bullseye
  • rabbitmq:3.9.13-management
@pombredanne
Copy link
Member

The latest SCTK 31.xx is designed to solve these issues. These images will be an excellent test suite . We should just wait a couple days before starting this to ensure this is tested with a branch that has the latest SCTK with its advanced package files handling capabilities.

@JonoYang
Copy link
Member

Some of the missing resources are caused by this issue: aboutcode-org/extractcode#41

A fix would be to have an option in the commoncode function where we do the portable filename conversion to allow colons in file names.

@tdruez
Copy link
Contributor

tdruez commented Aug 25, 2022

@JonoYang Is this one ready to be closed since #485 is merged?

@JonoYang
Copy link
Member

@tdruez This looks to be fixed in the current version of scancode.io lists file with : in the filename as Package Resources:
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants