search

nyph-infosec / daggerboard

MIT License
95 stars 19 forks source link

Daggerboard could not upload spdx SBOM file in the docker container image #19

Closed rhr407 closed 1 year ago

rhr407 commented 1 year ago

I am having issues uploading the SBOM spdx file in the docker container image. I will be grateful if someone can help me with this issue. A screenshot is attached for understanding the issue in depth.

Kind regards

image

avishayil commented 1 year ago

Same issue here

rhr407 commented 1 year ago

any update on this issue?

kojak-a commented 1 year ago

@rhr407 thanks for posting this issue. Can you provide us with the log message?

rhr407 commented 1 year ago
image

I have generated the file using the Microsoft SBOM generator.

namtarb commented 1 year ago

JSON SPDX is not currently supported by Daggerboard, but we are working on adding support. Based on my testing, I was only able to get the Microsoft tool to output JSON SPDX. In the meantime, tools for converting the SPDX format can be found here: https://spdx.dev/spdx-tools/.

See the wiki for additional information on supported SPDX formats: https://github.com/nyph-infosec/daggerboard/wiki/Supported-SPDX-Formats-&-Upload-Troubleshooting.

rhr407 commented 1 year ago

Ok thanks a lot