-
Notifications
You must be signed in to change notification settings - Fork 105
Open
Labels
detector:rustThe Rust Cargo detectorThe Rust Cargo detectorgood first issueGood for newcomersGood for newcomersstatus:readyReady to start implementationReady to start implementationtype:bugBug fix of existing functionalityBug fix of existing functionality
Description
Hi guys,
When I scan a Rust(cargo) repository (e.g https://github.com/rust-lang/rustlings), the sbom file result contains these purls:
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
pkg:cargo//[email protected]#
As per purl-specification, these purls seem not to be valid with //
And when extracting them, the name info would include a slash (e.g /ryu instead of ryu)
Metadata
Metadata
Assignees
Labels
detector:rustThe Rust Cargo detectorThe Rust Cargo detectorgood first issueGood for newcomersGood for newcomersstatus:readyReady to start implementationReady to start implementationtype:bugBug fix of existing functionalityBug fix of existing functionality