Skip to content

Fixes/minor spdx3 fixes - #725

Merged
riteshnoronha merged 5 commits into
interlynk-io:mainfrom
viveksahu26:fixes/minor-spdx3-fixes
Aug 10, 2026
Merged

Fixes/minor spdx3 fixes#725
riteshnoronha merged 5 commits into
interlynk-io:mainfrom
viveksahu26:fixes/minor-spdx3-fixes

Conversation

@viveksahu26

Copy link
Copy Markdown
Collaborator

This PR adds the following changes:

  • Fixes BSI:v2.0 functionality for SPDX:3.0.1
    • accepts SPDX 3.0.1 spec version (previously rejected)
    • artifact files (executable, archive, structured) detected via DistributionArtifact()
    • deployable hash and source code hash support for SPDX 3.0
    • fixes report rendering: additional fields (source URI, download URL, concluded license, etc.) now display correct scores instead of 0.0
  • Also supports alias for profiles:
    • for bsi:v1.1(bsiv11, bsi-v1.1)
    • for bsi:v2.0(bsiv20, bsi-v2.0)
    • bsi:v2.1(bsi, bsiv21, bsi-v2.1)
    • oct:v1.1(oct, oct-v1.1, octv11)
  • Profile aliases work across score, list, and compliance commands

Signed-off-by: Vivek Kumar Sahu <vivekkumarsahu650@gmail.com>
Signed-off-by: Vivek Kumar Sahu <vivekkumarsahu650@gmail.com>
Signed-off-by: Vivek Kumar Sahu <vivekkumarsahu650@gmail.com>
@viveksahu26
viveksahu26 force-pushed the fixes/minor-spdx3-fixes branch from fa2f124 to 96b0883 Compare August 10, 2026 05:52
@riteshnoronha
riteshnoronha merged commit 57f8e8c into interlynk-io:main Aug 10, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants