-
## Summary
https://github.com/spdx/spdx-sbom-generator/blob/main/pkg/modules/javamaven/decoder.go#L173
the artifact hash should not be on the name of the module.
For example the artifact `com.g…
-
1. Clone repo https://github.com/nhantranleon/custom_auth
2. Download the spdx-sbom-generator binaries to cloned repo folder
3. Execute npm install in comman-line tool
4. node_module will be create…
-
When we get Mend Generated CycloneDX Formatted SBOM, we come across a field `email: "NO ASSERTION"` in the components part, When we try to validate these SBOMs, it causes trouble. Can we fix this No A…
-
I will use this epic as a way to gather all the information related to this project
- Official CycloneDX tools center -> https://cyclonedx.org/tool-center/
- Fail to generate spdx file for packa…
-
/kind user-story
## Which area this user story is related to?
/area api
/area library
/area registry
/area alizer
/area devworkspace
/area landing-page
## User Story
The Mechanize…
-
Sorry if this is not the way to get support, but I saw another post sending a question and I don't know where to discuss this other than here. I will gladly accept a location to do so, if this is not …
-
Hello,
I got an error message "error in getting mvn transitive dependency tree and parsing it" when I tried to generator from a simple Maven project:
```
$ ./spdx-sbom-generator -p /home/ubuntu…
-
We (w/@dentrax) thought that [Syft](https://github.com/anchore/syft) is a popular tool to allows us to generate SBOMs easily and quickly. Even [GoReleaser](https://github.com/goreleaser/goreleaser/iss…
-
A proposal has been suggested that the CycloneDX specification add native support for the [SCVS BOM Maturity Model](https://scvs.owasp.org/bom-maturity-model/) to the schema itself. This may likely be…
-
Having some examples of generating provenance for artifacts other than packages or binaries would demonstrate that the generic workflow can be used to generate provenance for files like SBOMs, sarif f…