Closed macblazer closed 7 months ago
For each component
in the output XML change bomRef
element to bom-ref
attribute. When adding dependencies we didn't validate the XML vs the spec and accidentally put the unique component reference in the wrong place.
CycloneDX has been updated to specification v1.5 here. This tool should be updated to output v1.5 BOM files.