-
-
Notifications
You must be signed in to change notification settings - Fork 7
Closed
Description
When looking up package metadata from ecosyste.ms, the PURL type for GitHub Actions doesn't match what ecosyste.ms expects.
Current behavior:
- git-pkgs uses ecosystem name
github-actions - This generates PURLs like
pkg:github-actions/actions%2Fcheckout - ecosyste.ms returns empty results for this PURL type
Expected behavior:
- ecosyste.ms uses ecosystem name
actions - PURLs should be
pkg:actions/actions%2Fcheckout - This returns package metadata including licenses
Verification:
# This returns empty
curl "https://packages.ecosyste.ms/api/v1/packages/lookup?purl=pkg:github-actions/actions%2Fcheckout"
# []
# This returns data
curl "https://packages.ecosyste.ms/api/v1/registries/github%20actions/packages/actions/checkout"
# {"name":"actions/checkout","licenses":"mit",...}Fix needed:
Add ecosystem mapping in the enrichment layer or purl package to convert github-actions to actions when querying ecosyste.ms.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels