Pyspdxtools fails to parse spdx file #890

Activity

1. Eljees commented on Jul 29, 2026

   

   Eljees

   on Jul 29, 2026

   More actions

   I tried to reproduce this and the parts visible in your snippet are fine on current main.

   The creators list is the usual suspect for that error, because a failing actor makes creators None
   and the constructor then complains about missing arguments. Yours parse without complaint:

   'Tool: OpenEmbedded Core create-spdx.bbclass' -> Tool: OpenEmbedded Core create-spdx.bbclass
   'Organization: OpenEmbedded ()'               -> Organization: OpenEmbedded
   'Person: N/A ()'                              -> Person: N/A
   'Tool: sbomasm-v1.0.9'                        -> Tool: sbomasm-v1.0.9
   

   (run against ActorParser.parse_actor on main, python 3.12 — the empty () is handled.)

   The message you got lists all six required fields as missing, which means the parser received a
   document dict where spdxVersion, SPDXID, name and documentNamespace were absent too — not just
   the creation info. That does not match the snippet you posted, so the interesting part is elsewhere in
   the file or in the version you ran.

   Could you share:

   1. the output of pip show spdx-tools (or how you installed pyspdxtools), and
   2. the document itself, or at least everything up to the first packages entry — the top-level keys are
      what matter here?

   With that I can turn it into a regression test. If the file is a Yocto/OpenEmbedded output that you
   cannot share, create-spdx.bbclass on a minimal image would probably reproduce it too — knowing the
   Yocto release would help.
2. Eljees

   added a commit that references this issue on Sep 20, 2026

   Detect JSON content in a file with a bare .spdx extension

   ...

   This issue will close once commit 3fe000b is merged into the 'main' branch.

   3fe000b