DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.43k stars 529 forks source link

Backport: Support ingestion of CycloneDX v1.6 BOMs #3863

Closed nscuro closed 1 week ago

nscuro commented 1 week ago

Description

Adds support for ingestion of CycloneDX v1.6 BOMs.

Note that BOM exports will continue to use v1.5 for the time being. This avoids breaking users' workflows in case their tooling doesn't yet support v1.6.

Addressed Issue

Closes #3584 Backports #3710

Additional Details

N/A

Checklist

codacy-production[bot] commented 1 week ago

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
Report missing for bbedc38202a6a05cad1ad63cd13575bf5a72d297[^1] :x: 69.44% (target: 70.00%)
Coverage variation details | | Coverable lines | Covered lines | Coverage | | ------------- | ------------- | ------------- | ------------- | | Common ancestor commit (bbedc38202a6a05cad1ad63cd13575bf5a72d297) | Report Missing | Report Missing | Report Missing | | | Head commit (3706c3b10cc020a5d98d6af8c9077516b76410e8) | 22079 | 16809 | 76.13% | **Coverage variation** is the difference between the coverage for the head and common ancestor commits of the pull request branch: ` - `
Diff coverage details | | Coverable lines | Covered lines | Diff coverage | | ------------- | ------------- | ------------- | ------------- | | Pull request (#3863) | 36 | 25 | **69.44%** | **Diff coverage** is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: `/ * 100%`

See your quality gate settings    Change summary preferences


:rocket: Don’t miss a bit, follow what’s new on Codacy.

Codacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more [^1]: Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.