DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.56k stars 541 forks source link

Support ingestion of CycloneDX v1.6 BOMs #3710

Closed nscuro closed 3 months ago

nscuro commented 3 months ago

Description

Adds support for ingestion of CycloneDX v1.6 BOMs.

[!NOTE] BOM exports will continue to use v1.5 for the time being. This avoids breaking users' workflows in case their tooling doesn't yet support v1.6.

Addressed Issue

Closes #3584

Additional Details

N/A

Checklist

codacy-production[bot] commented 3 months ago

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
:white_check_mark: +0.03% (target: -1.00%) :white_check_mark: 78.95% (target: 70.00%)
Coverage variation details | | Coverable lines | Covered lines | Coverage | | ------------- | ------------- | ------------- | ------------- | | Common ancestor commit (21115d3743a9f0bb53394081be2d7be4d2241715) | 22051 | 16753 | 75.97% | | | Head commit (c97bb5433c11c0dd0325e18912656d17e0a78e51) | 22056 (+5) | 16763 (+10) | 76.00% (**+0.03%**) | **Coverage variation** is the difference between the coverage for the head and common ancestor commits of the pull request branch: ` - `
Diff coverage details | | Coverable lines | Covered lines | Diff coverage | | ------------- | ------------- | ------------- | ------------- | | Pull request (#3710) | 19 | 15 | **78.95%** | **Diff coverage** is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: `/ * 100%`

See your quality gate settings    Change summary preferences

Codacy will stop sending the deprecated coverage status from June 5th, 2024. Learn more