-
The following error was returned when I attempted to parse the SPDX file for my current project: "Error while parsing no colon found in "Relationship SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-github.…
-
I'm getting this error:
> 2023/04/06 12:59:14 Message: timedout, Locations: [{Line:1 Column:155}]
-
**Bug Description**
The BOM files that are generated by the script do not appear to be valid according to the SPDX specification. I have tried multiple ways to validate the BOMs including running a…
-
## Summary
Ref https://github.com/anchore/syft
-
**Tool Version** Cloned code from main branch of https://github.com/spdx/spdx-sbom-generator on 11-06-2021 and built the tool
**Test Repo** https://github.com/lewisojile/ruby-gem-sample
**OS** Windo…
-
# Summary
Propose to switch the official image from alpine based to [wolfi](https://github.com/wolfi-dev/os)-based image.
Wolfi is a distroless OS by Chainguard. Similar to Google's distroless p…
-
During the 2023 OpenSSF Secure Open Source Software Summit, an action item was create to help open source and standardize simple sbom manipulate tooling. A time table was also proposed.
- __Requir…
-
# Trending repositories for C#
1. [**space-wizards / space-station-14**](https://github.com/space-wizards/space-station-14)
__A multiplayer game about paranoia and chaos on a spac…
-
There is a need to be able to attest to the transformation of SBOM information from one format to another, and carry this attestation with the SBOM generated (rather than as a side car/ encapulating e…
-
Original Reporter: nvelagapudi
Environment: Not Specified
Version: Not Specified
Migrated From: http://jira.linuxfoundation.org/browse/SSB-61
spdx-sbom-generator tool version v0.0.3Test Repos that I…