36022973499
69%

Ran 24 Sep 2026 03:50PM UTC

Jobs 4

Files 31

Run time 1min

Badge

Embed ▾

Committed 24 Sep 2026 03:49PM UTC coverage: 68.52% (-0.2%) from 68.696%

Build # 36022973499

Build Type

push

github

Committed by

web-flow

Commit Message

Keep the application version in the purl for Erlang apps (#158)

The Elixir and fallback clauses of mix_dep_to_purl/2 pass `version` into
the Purl struct; the Erlang clause takes the same argument, uses it to
build the archive ref, and then omits it. In one document that gives

  eex     version=1.20.4  purl=pkg:otp/eex@1.20.4
  crypto  version=5.9.3   purl=pkg:otp/crypto

even though both versions are known. A purl without a version identifies
the package but not the release, so downstream matching cannot tell which
crypto is described.

The archive ref was wrong in the same clause. `version` here is the
application's version, while OTP's git tags are release versions, so
`tags/OTP-5.9.3` for crypto 5.9.3 is a URL that does not exist - the two
numbering schemes do not map onto each other, and no OTP release can be
derived from an application version. The download_url now refers to the
default branch, as it already did when the version was unknown.

Coverage Stats

875 of 1277 relevant lines covered (68.52%)

1278.09 hits per line

Coverage Regressions

Lines	Coverage	∆	File
1	69.23	-3.98%	lib/sbom/scm/system.ex

Jobs

ID	Job ID	Ran	Files	Coverage
1	main - 36022973499.1	24 Sep 2026 03:50PM UTC	31	61.82	GitHub Action Run
2	latest - 36022973499.2	24 Sep 2026 03:50PM UTC	31	61.11	GitHub Action Run
3	property - 36022973499.3	24 Sep 2026 03:50PM UTC	31	38.73	GitHub Action Run
4	lowest - 36022973499.4	24 Sep 2026 03:50PM UTC	31	60.65	GitHub Action Run

erlef / mix_sbom / 36022973499
69%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 36022973499

erlef / mix_sbom / 36022973499 69%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 36022973499

erlef / mix_sbom / 36022973499
69%

README BADGES
x