mount local .env file

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

compose.dev.yml

@@ -22,8 +22,6 @@ services:
   web:
     build: .
     image: dejacode:dev
-    env_file:
-      - .env
     environment:
       - DATABASE_HOST=db
       - DATABASE_PASSWORD=dejacode
@@ -37,6 +35,7 @@ services:
     ports:
       - "8000:8000"
     volumes:
+      - ./.env:/opt/dejacode/.env
       - ./component_catalog:/opt/dejacode/component_catalog
       - ./dejacode:/opt/dejacode/dejacode
       - ./dejacode_toolkit:/opt/dejacode/dejacode_toolkit

product_portfolio/importers.py

@@ -693,11 +693,21 @@ def __init__(
         scancodeio = ScanCodeIO(user.dataspace)
         self.packages = scancodeio.fetch_project_packages(self.project_uuid)
         self.dependencies = scancodeio.fetch_project_dependencies(self.project_uuid)
+
         if not self.packages and not self.dependencies:
             raise Exception("Packages could not be fetched from ScanCode.io")
 
+        dataspace = product.dataspace
+        self.default_review_status = ProductRelationStatus.objects.get_default_on_addition_qs(
+            dataspace
+        ).first()
+        self.default_purpose = ProductItemPurpose.objects.get_default_on_addition_qs(
+            dataspace
+        ).first()
+
     def save(self):
         self.import_packages()
+
         if self.create_dependencies:
             self.import_dependencies()
 
@@ -780,8 +790,11 @@ def import_package(self, package_data):
                 "license_expression": package.license_expression,
                 "notes": "Imported from ScanCode.io",
                 "created_by": self.user,
+                "review_status": self.default_review_status,
+                "purpose": self.default_purpose,
             },
         )
+
         package_uid = package_data.get("package_uid") or package.uuid
         self.package_uid_mapping[package_uid] = package
 
@@ -846,7 +859,7 @@ def look_for_existing_package(self, package_data):
             return package
 
         # 2. If the package data does not include a download_url value:
-        # Attemp to find an existing package using purl-only match.
+        # Attempt to find an existing package using purl-only match.
         if not package_data.get("download_url"):
             purl_lookups = {field: package_data.get(field, "") for field in PACKAGE_URL_FIELDS}
             same_purl_packages = package_qs.filter(**purl_lookups)