Failure to scan cargo

[pombredanne]

While testing ...

• Missing License/Question : MIT-0 not detected and OR license expression misinterpreted as AND #4574

... with ScanCode.io version 35.3.0, I create a project with

• https://raw.githubusercontent.com/cesarb/constant_time_eq/refs/heads/main/Cargo.toml
• inspect_packages pipeline or scan_codebase

... it fails with:

2025-09-29 10:03:35.950 Pipeline [inspect_packages] starting
2025-09-29 10:03:35.954 Step [download_missing_inputs] starting
2025-09-29 10:03:35.956 Fetching input from https://raw.githubusercontent.com/cesarb/constant_time_eq/refs/heads/main/Cargo.toml
2025-09-29 10:03:35.973 Step [download_missing_inputs] completed in 0 seconds
2025-09-29 10:03:35.976 Step [copy_inputs_to_codebase_directory] starting
2025-09-29 10:03:35.978 Step [copy_inputs_to_codebase_directory] completed in 0 seconds
2025-09-29 10:03:35.980 Step [extract_archives] starting
2025-09-29 10:03:36.001 Step [extract_archives] completed in 0 seconds
2025-09-29 10:03:36.004 Step [collect_and_create_codebase_resources] starting
2025-09-29 10:03:36.024 Step [collect_and_create_codebase_resources] completed in 0 seconds
2025-09-29 10:03:36.027 Step [flag_empty_files] starting
2025-09-29 10:03:36.029 Step [flag_empty_files] completed in 0 seconds
2025-09-29 10:03:36.032 Step [flag_ignored_resources] starting
2025-09-29 10:03:36.037 Step [flag_ignored_resources] completed in 0 seconds
2025-09-29 10:03:36.039 Step [scan_for_application_packages] starting
2025-09-29 10:03:36.041 Collecting package data from resources:
2025-09-29 10:03:38.170 Assembling collected package data:
2025-09-29 10:03:38.172 Progress: 0%
2025-09-29 10:03:38.177 Pipeline failed




'NoneType' object has no attribute 'path'

Traceback:
  File "/opt/scancodeio/aboutcode/pipeline/__init__.py", line 199, in execute
    step(self)
    ~~~~^^^^^^
  File "/opt/scancodeio/scanpipe/pipelines/inspect_packages.py", line 61, in scan_for_application_packages
    scancode.scan_for_application_packages(
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
        project=self.project,
        ^^^^^^^^^^^^^^^^^^^^^
    ...<2 lines>...
        progress_logger=self.log,
        ^^^^^^^^^^^^^^^^^^^^^^^^^
    )
    ^
  File "/opt/scancodeio/scanpipe/pipes/scancode.py", line 452, in scan_for_application_packages
    assemble_packages(project=project, progress_logger=progress_logger)
    ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/scancodeio/scanpipe/pipes/scancode.py", line 589, in assemble_packages
    assemble_package(resource, project, processed_paths)
    ~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/scancodeio/scanpipe/pipes/scancode.py", line 613, in assemble_package
    for item in extracted_items:
                ^^^^^^^^^^^^^^^
  File "/opt/scancodeio/.venv/lib/python3.13/site-packages/packagedcode/cargo.py", line 62, in assemble
    workspace_root_path = resource.parent(codebase).path
                          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

If instead I use this zip with the same cargo file inside then if works:

constant_time_eq-main.zip

The detected license expression is CC0-1.0 OR MIT-0 OR Apache-2.0 alright as it should be.

[omsuneri]

hey @pombredanne can i get assigned to this issue

[AyanSinhaMahapatra]

@omsuneri @pombredanne

The issue is in scancode-toolkit, so I transferred the issue here:

  File "/opt/scancodeio/.venv/lib/python3.13/site-packages/packagedcode/cargo.py", line 62, in assemble
    workspace_root_path = resource.parent(codebase).path

At https://github.com/aboutcode-org/scancode-toolkit/blob/develop/src/packagedcode/cargo.py#L62

We need to check if resource.parent(codebase) exists and then only do a .path on the resource if it exists as here we are scanning a single file and so the codebase has only one element and no parents.

Could you also check if we have similar unchecked .path on resource parents elsewhere in the code?

Also note @omsuneri we don't assign issues, if an issue is:

• unassigned
• not part of a project
• has no PRs
• has stale PRs
  you can just start working on it.

[omsuneri]

@AyanSinhaMahapatra yaa sure i ll check for the unchecked .path
also i ll keep in mind the contribution guidelines from ahead !!
Thanks