Melange not adding provides for symlinks to commands
Opened this issue · 0 comments
justinvreeland commented
It seems like sca isn't adding provides for symlinked commands. If you look at tk you see the following:
~/src/update-openssf jvreeland/automated-ssf-libisoburn.yaml* ≡ 17s
❯ tar -Oxz .PKGINFO < ./packages/aarch64/tk-9.0.0-r1.apk
# Generated by melange
pkgname = tk
pkgver = 9.0.0-r1
arch = aarch64
size = 9304304
origin = tk
pkgdesc = GUI toolkit for the Tcl scripting language
url =
commit = unknown
builddate = 1729727081
license = TCL
depend = pc:tcl
depend = so:ld-linux-aarch64.so.1
depend = so:libX11.so.6
depend = so:libc.so.6
depend = so:libm.so.6
depend = tcl
provides = cmd:wish9.0=9.0.0-r1
provides = pc:tk=9.0.0-r1
datahash = 9a3a005635b30cc5146e5ddd61a7ebc97bf932062a52d5c3ab737f6640a21380
If you look at libisoburn you see:
~/src/update-openssf jvreeland/automated-ssf-libisoburn.yaml* ≡
❯ tar -Oxz .PKGINFO < ./packages/aarch64/libisoburn-1.5.6-r1.apk
# Generated by melange
pkgname = libisoburn
pkgver = 1.5.6-r1
arch = aarch64
size = 2037068
origin = libisoburn
pkgdesc = Library to enable creation and expansion of ISO-9660 filesystems
url =
commit = unknown
builddate = 1730397938
license = GPL-2.0-or-later
depend = cmd:wish
depend = so:ld-linux-aarch64.so.1
depend = so:libacl.so.1
depend = so:libburn.so.4
depend = so:libc.so.6
depend = so:libedit.so.0
depend = so:libisofs.so.6
depend = so:libz.so.1
provides = cmd:xorriso-dd-target=1.5.6-r1
provides = cmd:xorriso-tcltk=1.5.6-r1
provides = cmd:xorriso=1.5.6-r1
provides = so:libisoburn.so.1=1
datahash = 1168af5fd0f2f11cac3da7dfca60e53b7d01e6df6ac62b5fa307542d71ac3c3d
The better option seems to be to provide cmd:wish
than resolve the symlink for libisoburn.