diff options
author | Dan Fandrich <danf@mageia.org> | 2025-03-20 00:11:54 -0700 |
---|---|---|
committer | Dan Fandrich <danf@mageia.org> | 2025-03-22 11:37:53 -0700 |
commit | d7762e525a9ba7bd62af6e2d6906a6ba03fb706b (patch) | |
tree | c04ec1e642792b38c69457dbd7c52f990d9893e7 | |
parent | 35e7b4f210e7a688be8af6868f14e7057b310f98 (diff) | |
download | mgaadvisories-d7762e525a9ba7bd62af6e2d6906a6ba03fb706b.tar mgaadvisories-d7762e525a9ba7bd62af6e2d6906a6ba03fb706b.tar.gz mgaadvisories-d7762e525a9ba7bd62af6e2d6906a6ba03fb706b.tar.bz2 mgaadvisories-d7762e525a9ba7bd62af6e2d6906a6ba03fb706b.tar.xz mgaadvisories-d7762e525a9ba7bd62af6e2d6906a6ba03fb706b.zip |
Include source=arch in the JSON purl parameter
This identifies the packages as source packages, which is the only type
we supply in advisories. This is done in the same way as Debian, Ubuntu
and Alpine (at least) and indicates that the package is not the binary
package that is usually installed by users.
-rw-r--r-- | tmpl/advisory.json | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tmpl/advisory.json b/tmpl/advisory.json index bd2b306..5144f4c 100644 --- a/tmpl/advisory.json +++ b/tmpl/advisory.json @@ -56,7 +56,7 @@ print JSON->new->utf8(0)->encode($stash->get($stash->get('var'))); [% SET pkgver = pkg.text -%] [% USE purl = String('pkg:rpm/mageia/') -%] [% CALL purl.push(pkgname) -%] -[% CALL purl.push('?distro=mageia-') -%] +[% CALL purl.push('?arch=source&distro=mageia-') -%] [% CALL purl.push(rel) -%] [% SET purltext = purl.text -%] "purl": [% jsonvar('purltext') %] |