Fix outdated spdx links (#2865)

Signed-off-by: Takeru Tanaka <takeru.tt5672@gmail.com>
anchore · May 14, 2024 · 338ce51 · 338ce51
1 parent 048df17
commit 338ce51
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/syft/format/internal/spdxutil/helpers/external_ref.go b/syft/format/internal/spdxutil/helpers/external_ref.go
@@ -8,7 +8,7 @@ const (
 	OtherReferenceCategory          ReferenceCategory = "OTHER"
 )
 
-// source: https://spdx.github.io/spdx-spec/appendix-VI-external-repository-identifiers/
+// source: https://spdx.github.io/spdx-spec/v2.2.2/external-repository-identifiers/
 
 type ExternalRefType string
 

diff --git a/syft/format/internal/spdxutil/helpers/license.go b/syft/format/internal/spdxutil/helpers/license.go
@@ -11,9 +11,9 @@ import (
 )
 
 func License(p pkg.Package) (concluded, declared string) {
-	// source: https://spdx.github.io/spdx-spec/3-package-information/#313-concluded-license
+	// source: https://spdx.github.io/spdx-spec/v2.3/package-information/#713-concluded-license-field
 	// The options to populate this field are limited to:
-	// A valid SPDX License Expression as defined in Appendix IV;
+	// A valid SPDX License Expression as defined in Annex D;
 	// NONE, if the SPDX file creator concludes there is no license available for this package; or
 	// NOASSERTION if:
 	//   (i) the SPDX file creator has attempted to but cannot reach a reasonable objective determination;

diff --git a/syft/format/internal/spdxutil/helpers/relationship_type.go b/syft/format/internal/spdxutil/helpers/relationship_type.go
@@ -1,6 +1,6 @@
 package helpers
 
-// source: https://spdx.github.io/spdx-spec/7-relationships-between-SPDX-elements/
+// source: https://spdx.github.io/spdx-spec/v2.2.2/relationships-between-SPDX-elements/
 type RelationshipType string
 
 const (