`gather_metadata` does not preserve tree of dependencies

bazelbuild / rules_license

Apache License 2.0

80 stars 28 forks source link

`gather_metadata` does not preserve tree of dependencies #159

Open shs96c opened 1 month ago

shs96c commented 1 month ago

When generating a Cyclone DX SBOM, it is desirable to model the graph of dependencies via the dependencies attribute. The required data is not preserved by our existing providers.