Skip to content

purl-next: Collect PURLs - 1 - design base framework #656

Closed

Description

@pombredanne

To create a decentralized, distributed PURL metadata collection using CI/CD jobs we first need to design, create and setup the base framework.

Activity

  1. changed the title [-]purl-next: Collect PURL metadata for one ecosystem - 1[/-] [+]purl-next: Collect PURL metadata - 1 - setup base framework [/+] on Aug 5, 2025
  2. changed the title [-]purl-next: Collect PURL metadata - 1 - setup base framework [/-] [+]purl-next: Collect PURL metadata - 1 - design base framework[/+] on Aug 5, 2025
  3. moved this from Needs prep to In progress in 00-AboutCodePlanneron Aug 7, 2025
  4. JonoYang commented on Aug 13, 2025

    @JonoYang
    Member

    We want to create a CI time job that:

    • Visits an upstream repo (maven, npm, pypi, etc)
    • Gets the purl metadata
    • Saves it as JSON and commit it to a git repo, github or otherwise

    This process is essentially done in the publish to federatedcode pipeline (https://github.com/aboutcode-org/scancode.io/blob/main/scanpipe/pipelines/publish_to_federatedcode.py)

    What we want to do is to be able to run a modified version of this pipeline in a CI job, where we run the pipeline using the scanpipe cli (https://scancodeio.readthedocs.io/en/latest/command-line-interface.html#scanpipe-create-project-name)

    We would need to keep track of what we indexed such that we do not revisit data we already have and only collect new/modified packages.

    Initially, we should just collect the index of the repo and get the package names and versions. We then will have workers in another job go and fetch the metadata for the given package name and versions.

    The workers should run forever and expect to be stopped at any moment. We should save state and metadata on a periodic basis as we run. When a worker is interrupted and restarted, it should read the last committed state and start from there.

  5. changed the title [-]purl-next: Collect PURL metadata - 1 - design base framework[/-] [+]purl-next: Collect PURLs - 1 - design base framework[/+] on Sep 3, 2025
  6. moved this from Done to In validation in 00-AboutCodePlanneron Sep 19, 2025
  7. moved this from In validation to Validated in 00-AboutCodePlanneron Oct 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions