-
Noticed that the hashes are calculated based on the real file instead of using existing information from the maven cache.
https://github.com/CycloneDX/cyclonedx-maven-plugin/blob/51bde9e135ded7248e…
-
1. Remove blades
2. Show referrers model in current blades' position, user can click nodes in the tree view to update URL, metadata and content display
![image](https://github.com/VasuDevrani/artifa…
-
**Is your feature request related to a problem? Please describe.**
In the open-source ecosystem, developers can share the code on different platforms (GitHub, Bitbucket, self-hosted, etc), and they h…
-
**Describe the problem/challenge you have**
we currently have --cosign-singatures=bool flag that attaches .sig artifacts. cosign has .sbom and .att suffixes as well.
(https://github.com/sigstore/c…
-
Picking up the question from https://github.com/anchore/syft/pull/2131#issuecomment-1719529908:
The CycloneDX contains this metadata when using it on a conan lockfile.
```json
"metadata": {
…
-
- [x] I have tried the latest version of Docker Desktop
- [x] I have tried disabling enabled experimental features
- [x] I have uploaded Diagnostics: 9D7A54BD-7E00-4431-981A-A9E434C0125E/20220…
-
### Current Behavior
REST API method usage does not conform to HTTP specifications https://www.rfc-editor.org/rfc/rfc9110
Some examples:
| Method | RFC / best practices | this API | Hint |
|…
-
### Description
I've wanted to try the newest `docker compose watch` (released with latest desktop), but I have two issue with it.
The [announcement blog post](https://www.docker.com/blog/announcing…
-
To ensure sbom.json we release is valid by cyclonedx, we can use [cyclonedx-cli ](https://github.com/CycloneDX/cyclonedx-cli)to validate in our build system.
another option is https://github.com/IB…
-
When attempting to convert a file twice in a row, the resulting file is blank. The file after the first conversion is not blank. This error occurs with spdx and cyclonedx files.
What should happen:…