DONADEI Emrick issues

Repositories
Issues
Comments

Results 2 issues of


                                            DONADEI Emrick

Scanning a folder with a jar archive with no metadata creates a SPDX package without versionInfo (Non-NTIA compliant)

**What happened**: When trying to scan a folder that contains a jar, Syft is creating a package of that jar without versionInfo. An example can be found here: https://github.com/google/tink/tree/master/java_src/examples/android/helloworld/gradle/wrapper It...

bug

Using replace in a go.mod creates a SPDX package without versionInfo (Non-NTIA compliant)

**What happened**: In the case of scanning a Go project with a go.mod file with a replace statement, e.g. [here](https://github.com/golang/tools/blob/master/gopls/go.mod). It supposed to recursively resolve to [this file](https://github.com/golang/tools/blob/master/go.mod). But it...

bug

ecosystem:go