How do we deal with PPA on Ubuntu?

[pombredanne]

Based on a chat with @wolfv a question is: How do we deal with PPA on Ubuntu? In particular do we have a qualifier for that? If not we need one.

[giterlizzi]

Excellent question, especially from an SBOM perspective.

For APT, PPA is a repository, so we could use the qualifier "repository_url" or add a new one called simply "repository" where we can specify only the name:

purl-tool --type deb --namespace ubuntu --name firefox --version 146.0+build1-0ubuntu0.26.04.1~mt1 --qualifier repository=ppa:mozillateam/ppa

pkg:deb/ubuntu/firefox@146.0%2Bbuild1-0ubuntu0.26.04.1~mt1?repository=ppa:mozillateam%2Fppa

purl-tool --type deb --namespace ubuntu --name firefox --version 146.0+build1-0ubuntu0.26.04.1~mt1 --qualifier repository_url=https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu

pkg:deb/ubuntu/firefox@146.0%2Bbuild1-0ubuntu0.26.04.1~mt1?repository_url=https:%2F%2Fppa.launchpadcontent.net%2Fmozillateam%2Fppa%2Fubuntu