ossf / package-analysis

Open Source Package Analysis

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Analysed package is not saved with correct name

maxfisher-g opened this issue · comments

The upload of the analyzed package tarball implemented in #739 and #778 doesn't use the correct name to save to the bucket.

It is supposed to involve the package name and version, followed by the hash, but the name used contains just the hash preceeded by "-". It seems like rs.generatePath(pkg) in

uploadPath := rs.generatePath(pkg) + "-" + hash
is generating / returning an empty path, for some reason