Closed sureng-ws closed 2 years ago
The script from Whitesource used to generate an SPDX 2.2 SBOM wraps the actual SBOM data in a "Document" object which is non-standard:
{ "Document": { "spdxVersion": "SPDX-2.2", ... } } This needs to be removed such that you would see:
{ "spdxVersion": "SPDX-2.2", ... }
Duplicate
sureng-ws
commented
2 years ago sureng-ws
commented
2 years ago
The script from Whitesource used to generate an SPDX 2.2 SBOM wraps the actual SBOM data in a "Document" object which is non-standard:
{ "Document": { "spdxVersion": "SPDX-2.2", ... } } This needs to be removed such that you would see:
{ "spdxVersion": "SPDX-2.2", ... }