-
Notifications
You must be signed in to change notification settings - Fork 109
Open
Description
Submitting this container:
{"cnaContainer":{"affected":[
{"vendor":"v","product":"p2","defaultStatus":"affected","packageURL":"pkg:pypi/django#%3A"},
{"vendor":"v","product":"p2","defaultStatus":"affected","packageURL":"https://a.us"}
],"descriptions":[{"lang":"en","value":"d"}],"references":[{"url":"https://a.us"}]}}
results in only this error:
{"error":"BAD_INPUT","message":"Parameters were invalid","details":[
{"msg":"Percent-encoded colons are not allowed in a PURL: pkg:pypi/django#%3A",
"param":"cnaContainer.affected","location":"body"}]}
whereas submitting this container:
{"cnaContainer":{"affected":[
{"vendor":"v","product":"p2","defaultStatus":"affected","packageURL":"https://a.us"},
{"vendor":"v","product":"p2","defaultStatus":"affected","packageURL":"pkg:pypi/django#%3A"}
],"descriptions":[{"lang":"en","value":"d"}],"references":[{"url":"https://a.us"}]}}
results in only this error:
{"error":"BAD_INPUT","message":"Parameters were invalid","details":[{"msg":
"Invalid purl: missing required \"pkg\" scheme component: \"https://a.us\"",
"param":"cnaContainer.affected","location":"body"}]}
In other words, producers may need to make separate submissions to discover each of a series of mistakes in composing their Purl strings.
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status
Needs Triage