Skip to content

fix: PURL for PyPI packages from 'conda list' have the correct format now - #471

Merged
jkowalleck merged 1 commit into
CycloneDX:masterfrom
rolweber:pypi-in-conda
Dec 15, 2022
Merged

jkowalleck merged 1 commit into
CycloneDX:masterfrom
rolweber:pypi-in-conda

Conversation

@rolweber

@rolweber rolweber commented Dec 14, 2022 •

Copy link
Copy Markdown
Contributor

Proposed fix for #462.

When generating the purl, check for "conda" packages with pseudo channel and platform "pypi". Those are actually pip-installed packages in the conda environment. Generate a pgk:pypi purl for them.

@rolweber
rolweber requested a review from a team as a code owner December 14, 2022 13:39
Signed-off-by: Roland Weber <rolweber@de.ibm.com>
@jkowalleck

Copy link
Copy Markdown
Member

Thanks for the PR, @rolweber.

will have a proper review soon.

@jkowalleck
jkowalleck self-requested a review December 14, 2022 15:27

@jkowalleck jkowalleck left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💯 a simple fix and decent tests.

Comment thread cyclonedx_py/utils/conda.py Resolved
Comment thread tests/fixtures/conda-list-issue462.json Resolved
@jkowalleck jkowalleck added the bug Something isn't working label Dec 15, 2022
@jkowalleck jkowalleck changed the title fix: Report PyPI Packages from 'conda list' with PyPI purl fix: PURL for PyPI packages from 'conda list' have the correct format now Dec 15, 2022
@jkowalleck
jkowalleck merged commit 1573064 into CycloneDX:master Dec 15, 2022
@jkowalleck

Copy link
Copy Markdown
Member

Thank you for the fix, @rolweber

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working source: conda

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants