Closed justinabrahms closed 1 year ago
@justinabrahms Thanks for submitting the issue. I'll look into this issue. I'm about to update the plugin with a new version of the SPDX library - I'll see if I can include a resolution of this issue before the release.
@justinabrahms I checked and the resolution of parameters is working in this plugin. The problem is the upstream POM file is using ${project.artifactId}
which doesn't resolve to a value. Changing it to ${artifactId}
works (at least in the version of Maven I'm using).
It shouldn't completely fail, however. I'll make an update which will just produce a warning if there is an invalid URL specified.
Thanks, @goneall. When do you usually cut releases for the tool (so I can update my dependency and check in spdx sboms)?
When do you usually cut releases for the tool?
The next release should be within 2-3 days.
I typically create a new release within a month of any updates to the SPDX spec. I'll also create a new release if there are any serious issues or high security vulnerabilities which have been fixed.
I have this dependency:
but adding spdx into the build chain errors with the following error: