CycloneDX / cyclonedx-core-java

CycloneDX SBOM Model and Utils for Creating and Validating BOMs
https://cyclonedx.org/
Apache License 2.0
81 stars 59 forks source link

License text attachment uses content type "plain/text" should be "text/plain" #385

Closed wfhartford closed 2 weeks ago

wfhartford commented 5 months ago

According to the cyclonedx specification, the default content type is "text/plain" (https://github.com/CycloneDX/specification/blob/1.5/schema/bom-1.5.schema.json#L672). This seems reasonable as "text/plain" is a common mime type (https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Common_types). The cyclonedx core java class LicenseLoader sets the content type field to "plain/text" (https://github.com/CycloneDX/cyclonedx-core-java/blob/master/src/main/java/org/cyclonedx/util/LicenseResolver.java#L200) which is not a MIME type.