Festo-se / cyclonedx-editor-validator

Tool for creating, modifying and validating CycloneDX SBOMs.
https://festo-se.github.io/cyclonedx-editor-validator/
GNU General Public License v3.0
18 stars 4 forks source link

Add `amend` operator to delete ambigious licenses #144

Closed mmarseu closed 3 months ago

mmarseu commented 5 months ago

Add optional amend operation to remove ambiguous licenses from components.

Some SBOM generators (syft in particular) generate license entries with only a name property but no further context such as url or text. This serves very little purpose and we prefer deleting these than keeping them in the SBOM.

Therefore, a new operator for amend should be implemented, which deletes license entries such as:

license: {
  "name": "something"
}

This operator must be disabled by default and only run when specifically enabled through a command-line switch.