Skip to content

Invalid purls when scanning Rust(cargo) repository #1172

@kennylam91

Description

@kennylam91

Hi guys,
When I scan a Rust(cargo) repository (e.g https://github.com/rust-lang/rustlings), the sbom file result contains these purls:

pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#

As per purl-specification, these purls seem not to be valid with //
And when extracting them, the name info would include a slash (e.g /ryu instead of ryu)

Metadata

Metadata

Assignees

No one assigned

    Labels

    detector:rustThe Rust Cargo detectorgood first issueGood for newcomersstatus:readyReady to start implementationtype:bugBug fix of existing functionality

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions