search

opensbom-generator / spdx-sbom-generator

Support CI generation of SBOMs via golang tooling.
396 stars 109 forks source link

Ruby - Version is displayed twice for DocumentName, DocumentNamespace, SPDXID and Relationship DEPENDS_ON #135

Open niruautomation opened 3 years ago

niruautomation commented 3 years ago

Tool Version Cloned code from main branch of https://github.com/spdx/spdx-sbom-generator on 11-06-2021 and built the tool Test Repo https://github.com/lewisojile/ruby-gem-sample OS Windows 10

Observed that Version is displayed twice for DocumentName, DocumentNamespace, SPDXID and Relationship DEPENDS_ON

SPDX file bom-bundler.spdx.txt image

lewisojile commented 3 years ago

@niruautomation issue fixed and merged https://github.com/spdx/spdx-sbom-generator/pull/142

niruautomation commented 3 years ago

@lewisojile I cloned the code from master, build the tool and verified the ticket. Observed that issues is fixed for DocumentName, SPDXID and Relationship DEPENDS_ON. However issue still exists for DocumentNamespace image

lewisojile commented 3 years ago

@niruautomation I have submitted a PR that should fix this issue.

niruautomation commented 3 years ago

@lewisojile I cloned the code from master on 14-06-2021, build the tool and verified the ticket. Tested and observed that the issue is fixed for DocumentNamespace but issue re-occurred for SPDXID and Relationship DEPENDS_ON image bom-bundler.spdx.txt