tools-golang
tools-golang copied to clipboard
spdx
Collection of Go packages to work with SPDX files
Opening this issue here from stale PR #178, opened by @CatalinStratu . Error strings should not be capitalized (unless beginning with proper nouns or acronyms) or end with punctuation, since...
The [validation routine](https://github.com/spdx/tools-golang/blob/main/spdxlib/documents.go#L26) allow DOCUMENT to be a valid ID but don't check if it actually exists in the [field](https://spdx.github.io/spdx-spec/v2.3/document-creation-information/#63-spdx-identifier-field). Reported on behalf on Google internal user (Tyler).
When outputting Tag Value format, [some elements like Files](https://github.com/spdx/tools-golang/blob/main/spdx/v2/v2_3/tagvalue/writer/save_document.go#L53-L66) are being sorted before being output, and these seem to be sorted by SPDXID. This causes a bit of a stability...
The attached file fails to parse with the following error message (please remove .txt before processing) ``` Error: received unknown tag ExternalDocumentRef in CreationInfo section ``` ExternalDocumentRef is a valid...
The attached file fails to parse with the following error message (please remove .txt before processing) `Error: error processing file` This is likely due to its CRLF line endings. After...
Evaluate the golang tools against the conformance suite (https://github.com/spdx/spdx-testbed) to be able to help make improvements to the code and consistency across SPDX tools. It would be nice to first...
Unable to parse the following SPDX file with `tvloader` package: ``` ... SPDXID: SPDXRef-File-34182904f819889b086a855ee5878f2a2e0b9037 FileChecksum: SHA1: 335029255dbadc3dfeb15c8e432078b1535b90de FileChecksum: SHA256: 0852707ebbd7e78d71c1eea3fb7ac0348aa22124a8975f787c07217058e0fe20 FileChecksum: SHA512: 2bca030aeb4aff21505267c02230bbc91bea728070fe6b46089eb7c168deeb6e0d40195a307d8e39073f322cba7abaf81a1b92011ca249eba2b8d92aedc10e38 ... ``` Got the following error: ```log...
Currently , each test case is a test on its own and can be collapsed to a single test case with shared test function uses the following golang idiomatic test...
From: #128 * *Validation*: There are a number of fields right now that aren't closely checked for validity. As just one example, I don't believe SPDX IDs are checked to...
License expression modeling and syntax: Relatedly, at present the licensing fields are just plain strings with no validation at all. - These should take into account the SPDX license expression...