Robert

Enhancement request: Retain transitive relationship between packages when importing SBOM

10

**Is your enhancement request related to a problem? Please describe.** DejaCode allows to load packages associated with a product from an SBOM. A modern SBOM that fulfills requirements such as...

BUG: SBOM import does not trigger scan of packages

18

**Describe the bug** On a self-hosted instance of DejaCode, it appears that the current main branch of DejaCode does not scan individual packages after loading the SBOM. This feature seems...

Enhancement request: Product as part of another product

3

**Is your enhancement request related to a problem? Please describe.** It can happen that a software is both released as a standalone product A and simultaeously as part of a...

Enhancement request: Auto-assign scan result

5

**Is your enhancement request related to a problem? Please describe.** The SBOM import allows to trigger as scan of all contained packages. If a valid URL can be determined for...

Tuweni project appears to be unmaintained, switch to other options?

10

**Is your feature request related to a problem? Please describe.** The Tuweni project appears to be abandoned, with the [Apache Incubator repository being archived](https://github.com/apache/incubator-tuweni). [A fork by the original author...

The pull request https://github.com/aboutcode-org/purldb/pull/600 allows to use the `api/collect/index_packages/` API endpoint for pypi packages. I have encountered an error while doing so, which seems to indicate that some data is...

BUG: Improve package from PurlDB fails due to parameter in PURL

12

**Describe the bug** Working with DejaCode in a build of https://github.com/aboutcode-org/dejacode/commit/925d4045897da9d7b3de98b8ff3eda3c75b6833d I noticed that several Python package where not being assigned download URLs when using "Improve Package from PurlDB". The...

Enhancement request: Trigger `populate_purldb` pipeline in ScanCode.io on SBOM import

1

**Is your enhancement request related to a problem? Please describe.** Currently DejaCode has trouble getting all necessary information for scanning package that have been imported from SBOMs. Most often not...

Enhancement request: Support adding the VCS and similar URLs from ScanCode.io scan results to packages

1

**Is your enhancement request related to a problem? Please describe.** Currently ScanCode.io already provides information in its scan results, if it finds them, such as: - `homepage_url` - `bug_tracking_url` -...

BUG: DejaCode scan_single_package for previously failed scans results in bad request

6

**Describe the bug** When DejaCode is tasked with analyzing an SBOM it roughly performs two steps: 1. Create a `load_sbom` pipeline in ScanCode.io and import the packages into the inventory...