Skip to content

osv-scanner: No package sources found, --help for usage information. #7917

@ivanbaldo

Description

@ivanbaldo

Describe the bug
I have a repo with Docker Compose stuff but no source code and no packages dependencies declared anywhere but osv-scanner failed.

To Reproduce
Create a repo with something that isn't a software source code but maybe just a simple docker compose file in there and run Megalinter on it.

Expected behavior
Since there's not a package dependency file, there isn't anything to check for, so the osv-scanner scan should be skipped or if run then it should run without errors, only saying it couldn't find any package source file.

Screenshots
❌ Linted [REPOSITORY] files with [osv-scanner]: Found 1 error(s) and 0 warning(s) - (4.35s) 00:00

  • Using [osv-scanner v2.3.8] https://megalinter.io/9.5.0/descriptors/repository_osv_scanner
  • MegaLinter key: [REPOSITORY_OSV_SCANNER]
  • Rules config: identified by [osv-scanner]
  • CWD: [/builds/redacted1/redacted2]
  • Command: [osv-scanner scan source --recursive .]
    --Error detail:
    Scanning dir .
    Starting filesystem walk for root: /
    End status: 27 dirs visited, 94 inodes visited, 0 Extract calls, 2.30022ms elapsed, 2.300624ms wall time
    No package sources found, --help for usage information.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions