Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Confusing results from load_inventory of SCTK Scans #1563

Open
mjherzog opened this issue Jan 24, 2025 · 0 comments
Open

Confusing results from load_inventory of SCTK Scans #1563

mjherzog opened this issue Jan 24, 2025 · 0 comments
Assignees
Labels
bug Something isn't working medium priority

Comments

@mjherzog
Copy link
Member

mjherzog commented Jan 24, 2025

I ran a load_inventory Project with 25 Devel codebase JSON Scans created with SCTK 32.3.0 (SCIO v34.9.3). These are small repos so it will be a lot of extra work to use 25 separate projects.

The key problem is that SCIO appears to be truncating/ignoring the first segment of the Resource path that is visible in the JSON data. For example path = python-lambdas/lambda_function.py from the JSON input is reported as just: lambda_function.py in the SCIO data.

In the case where the name for the first segment of the path from SCTK matches the name for JSON input file (repo) level it would be sufficient to just keep that full path, but there are likely other cases where we need to prepend the input Scan file name to the path.

Without the full path we will likely have the UberJAR problem that we will only keep report one Resource for common files like LICENSE or README that appear in many repos for a Devel Codebase.

@mjherzog mjherzog added bug Something isn't working medium priority labels Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working medium priority
Projects
None yet
Development

No branches or pull requests

2 participants