+
Skip to content

Support for detecting license info from .so files and binaries in Python wheels #4038

Open
@pooja0805

Description

@pooja0805

Hi team,

I'm using Syft to scan Python wheels, and I noticed that license information for .so files or other compiled binaries inside the wheel is not detected. For example, when scanning Pillow-10.0.1-cp311-cp311-manylinux_2_28_x86_64.whl, the .so files included in the package don't show any license data in the SBOM.

Is there a way Syft can extract license information from these binary files?

Would appreciate any guidance on how best to handle this.

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      点击 这是indexloc提供的php浏览器服务,不要输入任何密码和下载