Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

missing referenced spdx_id in merge #77

Closed
vargenau opened this issue Jul 10, 2024 · 4 comments
Closed

missing referenced spdx_id in merge #77

vargenau opened this issue Jul 10, 2024 · 4 comments
Assignees

Comments

@vargenau
Copy link
Contributor

main.spdx.txt
other.spdx.txt

sbomasm assemble -n merge -v 1 -t application -o merge.spdx.json *.spdx

merge.spdx.json

pyspdxtools -i merge.spdx.json 
ERROR:root:The document is invalid. The following issues have been found:
did not find the referenced spdx_id "SPDXRef-Package-other" in the SPDX document
did not find the referenced spdx_id "SPDXRef-Package-other" in the SPDX document
@viveksahu26
Copy link
Contributor

Hey @vargenau . Thanks for raising an issue. Wanted to know the o/p of the below command:
pyspdxtools -i main.spdx.txt and pyspdxtools -i other.spdx.txt

@vargenau
Copy link
Contributor Author

Both files are valid SPDX.

pyspdxtools -i main.spdx
pyspdxtools -i other.spdx

give no result, meaning they are valid.

The Java Tools also say files are valid SPDX.

I had to rename the files by adding .txt in order to be able to upload them on GitHub. You should rename them back to do the tests.

I always provide valid SPDX as input in my issues.

@riteshnoronha riteshnoronha self-assigned this Jul 10, 2024
@riteshnoronha
Copy link
Contributor

fixed here #84

@riteshnoronha
Copy link
Contributor

v0.1.4 has been released with this fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

When branches are created from issues, their pull requests are automatically linked.

3 participants