Skip to content

ort docker Scanner fails resolving provenance but ort built from sources doesn't  #6693

@qequ

Description

@qequ

I'm testing running ort on a repo that is hosted privately in gitlab and I'm having issues when running two separate versions of the scanner; one running from the sources with

./cli/build/install/ort/bin/ort scan -i ~/private-repo/analyzer-result.yml -o ~/private-repo/

and with docker built with this instructions

 docker run  -v $PWD/:/project ort --info scan -i  /project/output/analyzer-result.yml -o /project/output

with the version of ort built from sources it generates correctly the scan-result.yml but with docker it crashes and reports Provenance Errors, most of them are similar to;

Could not resolve provenance for package '...:': IOException: Could not resolve provenance for '...:' for source code origins [VCS, ARTIFACT].
Resolution of VCS failed with:
IOException: Could not resolve revision for package '....:' with VcsInfo(type=Git, url=https://gitlab.com/privateProject/privateRepo.git, revision=...., path=....):
	Could not find any revision candidates for package '....:' with VcsInfo(type=Git, url=https://gitlab.com/privateProject/privateRepo.git, revision=....., path=...)

Any clue why the docker version fails?

CC: @dgutson

Metadata

Metadata

Assignees

No one assigned

    Labels

    dockerAbout Docker topicsquestionAn issue that is actually a questionscannerAbout the scanner tool

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions