Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adding enumerated namespaces for the most popular vendors for rpm and deb types #370

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

jacobcalvert
Copy link

Description

Several tools are generating purls for packages in various Linux distributions. This change adds clarifications for the expected namespace for the most popular distributions using each package type.

… DEB types

several tools are generating purls for binary packages in various Linux distributions.
this change adds clarifications for the expected purl namespace for the most popular
distributions so there is ecosystem consistency.
@meljw
Copy link

meljw commented Jan 10, 2025

Hi, wondering if this is relevant for you. I have seen different namespaces for Oracle Linux (mysql docker)

  • Syft gives ol
  • cdxgen gives oracle
  • Docker Scout gives oraclelinux

@jacobcalvert
Copy link
Author

Hi, wondering if this is relevant for you. I have seen different namespaces for Oracle Linux (mysql docker)

  • Syft gives ol
  • cdxgen gives oracle
  • Docker Scout gives oraclelinux

Thanks!
I paused on adding these since I didn't find consensus among the different tools, but I think oracle or oraclelinux makes most sense; ol is a bit too short and ambiguous. If the spec maintainers agree, I'll update my PR to include one of those two as well in the definition list.

@giterlizzi
Copy link
Contributor

If it can be useful for PR in my SecDB project (https://secdb.nttzen.cloud/pkg) support this several PURL namespaces for deb and rpm:

Type Namespace
deb debian
deb ubuntu
rpm almalinux
rpm amazonlinux
rpm azurelinux
rpm cbl-mariner
rpm centos
rpm fedora
rpm opensuse
rpm oraclelinux
rpm redhat
rpm rockylinux
rpm suse

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants