Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ExternalPackageRefCategory problems #813

Open
billie-alsup opened this issue Jul 17, 2024 · 2 comments
Open

ExternalPackageRefCategory problems #813

billie-alsup opened this issue Jul 17, 2024 · 2 comments

Comments

@billie-alsup
Copy link

billie-alsup commented Jul 17, 2024

An internal tool is failing to validate SPDX files which use PACKAGE_MANAGER as an ExternalPackageRefCategory. Presumably PERSISTENT_ID would fail validation as well.

According to SPDX 2.2.2 spec, those underscores should be dashes, i.e. PACKAGE-MANAGER and PERSISTENT-ID.

Same is true in SPDX 2.3 spec

@armintaenzertng
Copy link
Collaborator

This is an old issue with the specification that regularly resurfaces, see for example here: spdx/spdx-spec#792.
The SPDX python tools support both versions (with dash or underscore) when parsing JSON/YAML/XML formats.

Do you have a specific issue with the python-tools?

@billie-alsup
Copy link
Author

In my case, the internal tools are going by the spec which uses dashes, and so are rejecting the generated SPDX from this repository. Is there a version of the spec that uses underscores, or is this simply to accommodate other implementations? I don't have a problem with accepting both, but would hope we would generate using dashes to conform to the spec (unless I am simply misinformed and looking at the wrong spec!!). Currently, I have to run a filter over the generated SPDX to replace the underscores with dashes. Only then can I upload into our own database, otherwise it is rejected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants