Open
Description
#1082 surfaced a case where we might have a problem with case-differing file names. We should investigate this on a linux system to be sure. Scenario is as follows:
- Create a folder with files
foo.txt
andFOO.TXT
in the same folder - Make sure that they have different contents so their hashes are different
- Generate an SBOM of the folder containing the files
- Look at the SBOM and confirm that the hashes are different
- Run the validate action to ensure that the SBOM meets all validation criteria
In theory, the validation should succeed as long as it is run on Linux.
This should be simple to code up as an E2E test that runs only on non-windows systems.