FIX: SBOM with unqualified packages are not recognized in Release analysis
Created:
1/12/2024 12:27:55 AM by Alana Tripp
Status:
Awaiting Release on
Last pulled:
1/12/2024 10:21:54 PM
Description:
Basically, when the SBOM has only the package name and version (e.g. kiwisolver + 1.3.1), then ProGet's package data cannot match it due to the package + version + file (e.g. kiwisolver + 1.3.1 + kiwisolver-1.3.1-cp36-cp36m-macosx_10_9_x86_64.whl).
These scripts seem to work; pending review/patch via EDO-9956
[1.Projects_GetReleaseAnalyzerData.sql](1.Projects_GetReleaseAnalyzerData.sql)
[1.FeedProjectReleasePackages.sql](1.FeedProjectReleasePackages.sql)