SoftwareDesignLab / SBOM-in-a-Box

SBOM-in-a-Box is a unified platform to promote the production, consumption, and utilization of Software Bills of Materials.
MIT License
9 stars 0 forks source link

SBOM Generation does not completely work on Mac OS. #317

Open txdvse opened 10 months ago

txdvse commented 10 months ago

Overview

Description Here Issues using OSI have been known about for a while on MacOS. The Docker container has been updated to successfully run the OSI API now by importing flask in the container before launching and files should also now consistently zip in SBOM-in-a-Box when uploaded to the SBOM Generation module. However, when it comes time to generate SBOMs, only certain tools will succeed. I believe this may be due to a pathing issue involving MacOS directories.

The below screenshot shows the logs in the Terminal after a project has been uploaded and SBOM Generation using OSI has been executed.

Screen Shot 2024-01-03 at 11 35 38 PM

Certain tools WILL create SBOMs. However, they will not show up in SBOM-in-a-Box for some reason.

Screen Shot 2024-01-03 at 11 40 57 PM

Related SVIP System Requirement IDs

Acceptance Criteria

amandanitta commented 9 months ago

Currently is failing to generate SBOMs, but is at least throwing an error message.

Generation of all tools also does not work on Windows machines so likely pathing needs to change for some of the tools

Screenshot 2024-01-05 at 10 55 38 AM